Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa
File: 1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa (raw, json)
Hash identifier: EXKCmselguxEWJqVjaQNd8s2v6f02y8BzJbbVd7d/lo=
Subject key identifier: FA:47:19:36:DD:B7:8B:0D:51:07:3E:06:B7:7A:73:0F:50:9F:06:91
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A05CBAF9692D3F72FB57BC80E9E7709F0C
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa
Signing time: Tue 01 Sep 2026 11:29:12 +0000
ROA not before: Tue 01 Sep 2026 11:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:ba:f9:69:2d:3f:72:fb:57:bc:80:e9:e7:70:9f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 1 11:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa471936ddb78b0d51073e06b77a730f509f0691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:c1:96:56:a2:36:79:5f:ba:50:89:02:54:
f1:b7:f0:cb:e7:32:73:67:89:4a:fe:31:5f:40:78:
28:1f:81:cc:bf:3c:70:e0:57:eb:34:82:2a:4c:5d:
11:ad:46:64:37:91:e3:92:26:a0:58:b0:00:49:9e:
db:e8:bb:45:3e:2e:4f:77:e8:ba:e2:32:96:1f:5f:
c8:93:73:b9:c8:48:ea:9f:2e:88:d6:d6:96:33:76:
72:92:52:55:25:e6:78:6b:7d:32:9d:18:f2:ce:38:
17:88:3f:5a:09:42:1c:2a:ec:fc:76:0a:aa:f1:79:
8a:d0:60:59:c1:b9:f1:15:78:08:b2:09:bb:e2:d8:
a1:37:b0:5a:d0:70:9f:7b:50:47:b0:1b:41:09:14:
13:90:b5:be:3c:9e:d0:45:72:c7:fb:1c:7d:99:de:
84:18:75:df:05:72:73:de:3f:d0:67:ce:25:12:6c:
dd:4c:47:09:1b:50:7f:b3:db:ef:16:e8:2a:47:01:
a9:fa:1c:61:72:19:6b:e3:93:cf:44:be:b5:0e:84:
c6:94:68:98:46:f4:59:18:08:bb:a5:6f:6c:63:02:
0b:47:ca:98:35:52:c7:d9:c4:0b:99:24:e2:33:c5:
2a:bf:82:d9:49:a5:79:59:0a:6c:c9:a5:44:c5:74:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:19:36:DD:B7:8B:0D:51:07:3E:06:B7:7A:73:0F:50:9F:06:91
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
68:94:00:3a:f1:05:5c:49:d6:8c:51:58:8a:a0:78:6e:66:08:
34:92:af:38:b7:e9:d6:99:88:46:f6:50:d7:5c:99:77:38:8f:
19:bd:52:a1:da:e9:19:be:3c:06:3d:17:a0:23:49:f4:0f:e7:
73:94:8d:43:6c:da:94:93:e8:d2:6f:a0:85:f5:ed:e2:70:6f:
3a:64:d3:cb:39:b3:88:29:ee:57:71:21:cb:7a:21:61:b9:f8:
79:4a:5f:a5:72:28:a3:b6:f0:3e:3b:25:de:23:dc:7e:58:4f:
a5:ae:c4:5e:ce:65:2d:4e:94:ce:17:4c:7d:81:1c:ac:d6:31:
35:4d:0b:a1:fb:7b:9c:15:cf:be:f1:37:46:96:94:4b:c9:a5:
6e:fa:5e:29:58:3f:f5:19:32:c6:30:de:ed:ab:c4:ab:1f:5b:
36:a0:7b:fc:21:34:f9:04:39:25:cd:ee:f0:d0:19:68:fc:b2:
72:3b:ed:6a:38:e5:0f:64:c9:b9:09:82:b7:8a:cc:e5:88:43:
b1:ee:36:ba:12:68:c0:e1:82:3c:1e:c5:38:e3:7b:51:9e:05:
5f:86:8e:39:d9:90:42:69:13:b2:dd:69:a8:06:1e:8f:e3:18:
1b:84:27:c0:1f:d3:89:e2:d8:a6:1a:1c:a3:d3:7a:43:c7:b1:
2c:a2:1b:8c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBcuvlpLT9y+1e8gOnncJ8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwOTAxMTEyOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTQ3MTkzNmRkYjc4YjBkNTEwNzNlMDZiNzdhNzMwZjUwOWYwNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3DBllaiNnlfulCJAlTxt/DL5zJz
Z4lK/jFfQHgoH4HMvzxw4FfrNIIqTF0RrUZkN5HjkiagWLAASZ7b6LtFPi5Pd+i6
4jKWH1/Ik3O5yEjqny6I1taWM3ZyklJVJeZ4a30ynRjyzjgXiD9aCUIcKuz8dgqq
8XmK0GBZwbnxFXgIsgm74tihN7Ba0HCfe1BHsBtBCRQTkLW+PJ7QRXLH+xx9md6E
GHXfBXJz3j/QZ84lEmzdTEcJG1B/s9vvFugqRwGp+hxhchlr45PPRL61DoTGlGiY
RvRZGAi7pW9sYwILR8qYNVLH2cQLmSTiM8Uqv4LZSaV5WQpsyaVExXQvbwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpHGTbdt4sNUQc+Brd6cw9QnwaRMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvMS1rY1pOdDIzaXcxUkJ6NEd0M3B6RDFDZkJwRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTMvYjcxNGFkLTFmNzgtNGExMC04ZTYxLWFiOGYxZjMzODdl
ZS8xL1VTVDdvZVFCd0Q1Ym9jMTNycDdqblAxakdfcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE323DAN
BgkqhkiG9w0BAQsFAAOCAQEAaJQAOvEFXEnWjFFYiqB4bmYINJKvOLfp1pmIRvZQ
11yZdziPGb1SodrpGb48Bj0XoCNJ9A/nc5SNQ2zalJPo0m+ghfXt4nBvOmTTyzmz
iCnuV3Ehy3ohYbn4eUpfpXIoo7bwPjsl3iPcflhPpa7EXs5lLU6UzhdMfYEcrNYx
NU0Loft7nBXPvvE3RpaUS8mlbvpeKVg/9RkyxjDe7avEqx9bNqB7/CE0+QQ5Jc3u
8NAZaPyycjvtajjlD2TJuQmCt4rM5YhDse42uhJowOGCPB7FOON7UZ4FX4aOOdmQ
QmkTst1pqAYej+MYG4QnwB/TieLYphoco9N6Q8exLKIbjA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:43 2026 by rpki-client