Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/py8FDKM0EL9YhXSR3t7SBDgwudo.roa
File: py8FDKM0EL9YhXSR3t7SBDgwudo.roa (raw, json)
Hash identifier: OmcUkQa8dBYEak8elnyKCy3ZRFzpwCJpa5qIs4sDW5g=
Subject key identifier: A7:2F:05:0C:A3:34:10:BF:58:85:74:91:DE:DE:D2:04:38:30:B9:DA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F5ABA93A75CEACFC6CE13CE23A5997C5D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/py8FDKM0EL9YhXSR3t7SBDgwudo.roa
Signing time: Mon 13 Jul 2026 09:06:44 +0000
ROA not before: Mon 13 Jul 2026 09:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 77.107.83.0/24 maxlen: 24
79.99.147.0/24 maxlen: 24
82.153.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:ba:93:a7:5c:ea:cf:c6:ce:13:ce:23:a5:99:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 13 09:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a72f050ca33410bf58857491deded2043830b9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:eb:28:c2:0c:3a:93:60:7b:2a:d5:f1:dc:
79:2f:8e:e3:30:e4:15:be:5b:66:b8:2f:42:7c:6b:
46:fb:b5:a8:ab:7c:d4:62:a6:ec:82:47:aa:9f:ae:
01:f8:5e:2a:cc:fd:d2:a5:50:81:95:03:5c:54:42:
ca:a8:7e:c5:af:b8:ac:7b:e3:91:6d:6c:24:aa:00:
14:8f:ad:2a:34:e5:80:b4:53:f4:f2:48:34:13:78:
fb:62:f3:26:b8:e3:69:54:35:3a:25:71:ae:17:57:
b3:cb:d9:33:14:94:98:cd:19:46:89:b6:9a:15:5d:
63:57:11:72:85:8a:be:9f:24:e3:26:ca:d8:fe:b7:
92:97:89:94:90:29:e5:c7:6a:26:ff:c2:5e:8c:2d:
15:14:d4:3d:3e:03:cf:b2:28:45:a3:c1:66:5f:c8:
6d:f4:00:f2:ab:b7:9c:53:1c:d2:c5:9b:58:61:f3:
a6:67:03:47:87:f6:ea:94:7a:fa:96:b6:fe:cc:60:
a5:71:09:f2:63:0a:43:9b:c2:c1:de:83:f1:bf:84:
4d:c2:31:3f:87:86:4a:55:a3:7d:3f:d7:6e:c1:3d:
13:a8:b0:82:c2:29:cd:e8:2c:df:47:d5:90:7a:5e:
87:15:c8:9f:96:15:5a:12:9c:85:81:0e:9e:65:20:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:05:0C:A3:34:10:BF:58:85:74:91:DE:DE:D2:04:38:30:B9:DA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/py8FDKM0EL9YhXSR3t7SBDgwudo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.83.0/24
79.99.147.0/24
82.153.36.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e8:11:91:5c:c3:af:8e:62:ec:d6:13:29:8d:78:08:29:5c:
da:9b:31:d7:0e:0d:0a:89:ad:b7:2b:98:48:e1:45:4a:75:ce:
a1:4f:15:3d:9a:94:8f:0b:67:bc:9e:c5:87:61:3e:f6:37:09:
e0:da:23:91:e0:1c:d6:a1:8d:11:d0:31:ec:b4:bd:ba:3a:b2:
bd:d1:34:cb:9d:19:14:99:08:14:9b:55:63:59:8b:a6:92:f1:
7d:34:16:18:54:35:e6:7f:36:fc:81:14:92:17:b7:06:81:bb:
e1:73:69:1e:e9:6d:27:74:91:38:7d:f0:63:86:2f:25:cc:e7:
df:1b:3b:ee:4f:c8:a8:36:b7:81:cf:7b:a9:57:3a:e4:7c:49:
10:ca:31:08:35:93:99:3d:39:e5:93:a9:f4:00:1a:23:29:13:
7d:12:d6:99:8d:e5:69:8a:03:0c:06:7b:39:b6:dd:69:9f:3d:
4f:16:87:bd:ab:0d:c3:5b:c1:50:a2:15:cd:b8:b2:ba:5f:83:
f1:cb:86:09:40:af:17:73:af:94:57:6d:7f:7c:86:ae:98:79:
38:de:5f:bd:c5:bd:10:c7:50:3e:a4:5f:2c:a3:24:cc:a8:e9:
19:50:c6:95:e0:eb:de:0a:84:ed:a1:d3:20:c4:7e:5c:24:5d:
f5:a9:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client