Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/EXGKHVIo_osI3Gb68ip0jBzAF5U.roa
File: EXGKHVIo_osI3Gb68ip0jBzAF5U.roa (raw, json)
Hash identifier: R34cNQW7ksM11PmBeSLdiBzAeEJM8HIjBSNbskLK9H0=
Subject key identifier: 11:71:8A:1D:52:28:FE:8B:08:DC:66:FA:F2:2A:74:8C:1C:C0:17:95
Certificate issuer: /CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Certificate serial: 019F2368CDED231813026A98925177C10D13
Authority key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/EXGKHVIo_osI3Gb68ip0jBzAF5U.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43281
IP address blocks: 37.77.168.0/22 maxlen: 24
37.77.172.0/24 maxlen: 24
77.247.200.0/21 maxlen: 24
2a03:9d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:ed:23:18:13:02:6a:98:92:51:77:c1:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11718a1d5228fe8b08dc66faf22a748c1cc01795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:36:74:e6:ba:ae:3b:dc:ac:c1:ff:59:63:
77:4a:70:86:9b:8b:67:2e:ec:ec:4e:85:ca:86:0f:
38:1a:fb:9a:87:b6:29:93:ff:bb:67:7a:40:68:08:
b7:fd:a9:86:b0:ce:bb:b8:36:e5:7b:89:1e:7c:91:
d3:2d:2f:80:fb:7f:a1:c2:47:4a:42:b2:d7:da:b5:
16:00:0e:37:0b:be:6b:c1:9e:e4:40:e9:4b:fd:e1:
d6:e1:57:55:9e:cc:c6:30:72:21:eb:48:a0:8c:6f:
39:8d:df:5a:5b:77:dc:a1:9c:2e:d6:9d:f5:e6:c1:
bd:5f:48:16:52:01:69:87:cf:aa:7d:4f:93:b8:92:
18:b1:6f:e1:bc:30:47:fe:30:b2:55:b8:bb:41:f8:
56:ed:d8:39:db:60:ec:6e:93:14:5d:ad:0d:b8:15:
f4:de:e6:2e:88:81:9c:de:91:65:ef:b9:96:b4:21:
7d:d1:3e:22:a6:3b:0e:0d:90:62:c9:af:e9:7e:56:
02:d2:8f:54:b7:e4:69:a2:80:8a:3f:b8:6e:3c:a2:
e4:f0:50:8e:37:4a:3d:d5:25:d7:57:24:91:83:22:
8f:4a:1c:39:24:ac:72:e7:8f:cb:b4:06:ee:c7:c5:
ed:d0:11:65:97:e4:98:26:b5:68:34:60:fe:27:be:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:8A:1D:52:28:FE:8B:08:DC:66:FA:F2:2A:74:8C:1C:C0:17:95
X509v3 Authority Key Identifier:
keyid:98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/EXGKHVIo_osI3Gb68ip0jBzAF5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.168.0-37.77.172.255
77.247.200.0/21
IPv6:
2a03:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
79:96:26:38:2b:87:0f:33:8a:82:e8:8b:e6:5d:83:ae:08:9a:
ce:64:a3:b0:30:ae:bd:01:92:5e:bd:ec:5c:7d:73:29:0a:87:
4f:76:56:4f:10:ef:2a:54:27:36:f7:02:29:63:12:61:f4:59:
e5:4f:44:7d:10:48:2e:e0:43:e8:26:de:ce:66:1e:ad:df:31:
7a:fb:b4:38:fd:e2:4d:fc:66:e8:54:83:ad:2f:75:bd:5a:81:
ed:14:6d:16:14:f4:fd:ed:fd:60:e7:b4:96:f2:23:62:68:04:
0b:14:2d:44:cc:d6:7a:1a:de:0c:65:9c:d8:36:8a:ea:10:c4:
84:c1:85:0d:4f:4e:14:14:77:f3:c2:d4:f9:72:bc:e4:3e:48:
ad:cb:ea:29:96:e7:c1:79:a4:24:6a:b0:28:f2:e8:63:5c:7a:
bf:9f:99:5f:b8:8c:03:c5:27:4a:5f:9c:52:dc:0d:f1:58:10:
52:9d:c6:11:83:63:75:56:df:c0:4c:3d:4a:ae:a4:b5:ff:8b:
84:91:82:58:5d:eb:b4:68:b6:60:d5:d2:f1:b4:8d:b1:c7:e5:
cb:82:9c:d5:06:b1:69:e6:70:b7:36:ab:a6:08:a2:56:74:eb:
95:2f:d9:c2:c6:af:41:f1:90:61:a8:2b:a8:15:0f:aa:e8:fa:
26:f1:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:24:32 2026 by rpki-client