Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/LSmvCR26_7rk_JHaYJHekDtYFxc.roa
File: LSmvCR26_7rk_JHaYJHekDtYFxc.roa (raw, json)
Hash identifier: 12F/wjEcpWC5kZ9FkSDJy6CvEcFDJ7gOQhKdgmv89cQ=
Subject key identifier: 2D:29:AF:09:1D:BA:FF:BA:E4:FC:91:DA:60:91:DE:90:3B:58:17:17
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 019CDC6B141FBE6C2FEA9EAABCE626FC2F19
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/LSmvCR26_7rk_JHaYJHekDtYFxc.roa
Signing time: Wed 11 Mar 2026 10:22:10 +0000
ROA not before: Wed 11 Mar 2026 10:22:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.128.0/20 maxlen: 20
77.223.128.0/24 maxlen: 24
77.223.129.0/24 maxlen: 24
77.223.130.0/24 maxlen: 24
77.223.131.0/24 maxlen: 24
77.223.132.0/24 maxlen: 24
77.223.133.0/24 maxlen: 24
77.223.134.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.137.0/24 maxlen: 24
77.223.138.0/24 maxlen: 24
77.223.139.0/24 maxlen: 24
77.223.140.0/24 maxlen: 24
77.223.141.0/24 maxlen: 24
77.223.142.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
77.223.146.0/24 maxlen: 24
77.223.147.0/24 maxlen: 24
77.223.148.0/24 maxlen: 24
77.223.149.0/24 maxlen: 24
77.223.151.0/24 maxlen: 24
77.223.152.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
77.223.155.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.157.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
77.223.159.0/24 maxlen: 24
78.40.224.0/21 maxlen: 21
78.40.224.0/24 maxlen: 24
78.40.225.0/24 maxlen: 24
78.40.226.0/24 maxlen: 24
78.40.227.0/24 maxlen: 24
78.40.228.0/24 maxlen: 24
78.40.229.0/24 maxlen: 24
78.40.230.0/24 maxlen: 24
78.40.231.0/24 maxlen: 24
91.191.160.0/21 maxlen: 21
91.191.160.0/24 maxlen: 24
91.191.161.0/24 maxlen: 24
91.191.162.0/24 maxlen: 24
91.191.163.0/24 maxlen: 24
91.191.164.0/24 maxlen: 24
91.191.165.0/24 maxlen: 24
91.191.166.0/24 maxlen: 24
91.191.167.0/24 maxlen: 24
91.191.168.0/21 maxlen: 21
91.191.168.0/24 maxlen: 24
91.191.169.0/24 maxlen: 24
91.191.170.0/24 maxlen: 24
91.191.171.0/24 maxlen: 24
91.191.172.0/24 maxlen: 24
91.191.173.0/24 maxlen: 24
91.191.174.0/24 maxlen: 24
91.191.175.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.200.0/24 maxlen: 24
93.187.201.0/24 maxlen: 24
93.187.202.0/24 maxlen: 24
93.187.203.0/24 maxlen: 24
93.187.204.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.206.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
151.237.237.0/24 maxlen: 24
185.80.72.0/24 maxlen: 24
195.244.32.0/19 maxlen: 19
195.244.32.0/24 maxlen: 24
195.244.33.0/24 maxlen: 24
195.244.34.0/24 maxlen: 24
195.244.35.0/24 maxlen: 24
195.244.36.0/24 maxlen: 24
195.244.37.0/24 maxlen: 24
195.244.38.0/24 maxlen: 24
195.244.39.0/24 maxlen: 24
195.244.40.0/24 maxlen: 24
195.244.41.0/24 maxlen: 24
195.244.42.0/24 maxlen: 24
195.244.43.0/24 maxlen: 24
195.244.44.0/24 maxlen: 24
195.244.45.0/24 maxlen: 24
195.244.46.0/24 maxlen: 24
195.244.47.0/24 maxlen: 24
195.244.48.0/24 maxlen: 24
195.244.49.0/24 maxlen: 24
195.244.50.0/24 maxlen: 24
195.244.51.0/24 maxlen: 24
195.244.52.0/24 maxlen: 24
195.244.53.0/24 maxlen: 24
195.244.54.0/24 maxlen: 24
195.244.55.0/24 maxlen: 24
195.244.56.0/24 maxlen: 24
195.244.57.0/24 maxlen: 24
195.244.58.0/24 maxlen: 24
195.244.59.0/24 maxlen: 24
195.244.60.0/24 maxlen: 24
195.244.61.0/24 maxlen: 24
195.244.62.0/24 maxlen: 24
195.244.63.0/24 maxlen: 24
2a01:aac0::/32 maxlen: 32
2a0a:be80::/29 maxlen: 29
2a0a:be80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:6b:14:1f:be:6c:2f:ea:9e:aa:bc:e6:26:fc:2f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Mar 11 10:22:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d29af091dbaffbae4fc91da6091de903b581717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2d:39:12:22:0a:cf:8f:bd:bf:1b:f2:d0:05:
ce:fd:dc:77:94:fc:4d:80:2e:97:db:97:a6:b9:8a:
79:3a:b0:ad:65:6e:ac:30:71:69:91:5c:51:8f:a8:
8b:0a:81:0b:e7:b7:b8:f3:79:8b:c9:03:8e:a1:52:
93:34:48:34:78:ab:41:9b:d0:8c:12:ac:05:c5:23:
ad:29:34:91:62:d8:d3:5a:c0:c1:d5:b7:2e:37:31:
2d:fe:ba:5f:13:2d:a5:b1:39:9f:b3:bf:79:96:5a:
19:62:47:ed:18:ff:42:c1:7b:9a:27:1b:de:11:52:
84:7e:37:10:0d:6b:96:e4:87:31:94:80:86:cd:95:
b4:41:b8:79:68:46:17:2d:31:06:27:df:ea:6a:67:
10:2c:27:db:ce:20:c7:5f:1b:b4:13:b9:b0:8d:5c:
aa:b4:f5:ae:50:d3:c8:70:7b:9e:cc:a1:51:d3:34:
62:0d:65:ba:81:b4:50:82:50:3a:a8:29:d6:93:cd:
20:ef:e3:69:fe:81:6c:1d:8b:b9:9b:7c:09:ad:34:
04:cb:c2:4a:62:2f:a2:92:4c:6e:62:74:71:10:d5:
ee:4a:5f:61:64:30:49:1a:b2:84:21:c5:a9:e4:ab:
33:2a:9e:dd:83:02:42:bb:d5:d1:7c:a0:60:ca:2b:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:AF:09:1D:BA:FF:BA:E4:FC:91:DA:60:91:DE:90:3B:58:17:17
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/LSmvCR26_7rk_JHaYJHekDtYFxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/20
77.223.146.0-77.223.149.255
77.223.151.0-77.223.159.255
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
151.237.237.0/24
185.80.72.0/24
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
41:ba:c5:42:fe:cb:1c:98:15:72:99:93:c1:41:ad:90:b2:f3:
df:bf:66:37:8d:bc:33:1d:2c:3c:f1:82:6a:9c:db:c6:21:7a:
9f:ab:59:60:4c:ef:62:3f:2e:34:3a:7c:bb:9a:c8:46:f2:19:
99:2f:7c:3c:c4:c4:f6:f7:57:e0:cd:90:ab:e7:1d:12:7f:e0:
c9:62:f9:0d:c9:c0:f3:16:c3:7c:2d:d9:0b:53:34:16:c6:34:
41:28:24:d3:18:18:28:32:49:b6:a2:e0:52:ff:3e:56:bc:b9:
c7:4e:a3:17:4d:89:06:aa:f2:0b:35:1d:aa:85:b7:21:2d:c7:
3b:23:5d:54:d9:7f:95:08:4b:3a:80:79:cd:1b:4c:01:fd:b2:
25:d1:f4:02:47:76:3c:87:32:31:85:33:86:59:ed:46:3f:41:
b8:f5:8d:c9:3f:f4:ba:e0:d4:c3:83:7e:fe:be:d1:ba:d2:7c:
ad:ef:49:91:94:9c:ef:b8:53:ba:4d:44:be:59:8b:6a:eb:9c:
11:5f:b8:d4:38:de:90:70:ae:70:ad:49:96:be:86:d4:a4:06:
4c:e5:ee:70:ff:32:bb:fd:31:9d:46:af:16:3a:3a:99:4f:21:
53:3c:ea:ce:8e:44:f0:3e:da:9f:07:63:28:74:f5:b4:82:ed:
03:b3:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:36:22 2026 by rpki-client