Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/aFnh6dX02Plbz29YBmV3SD7j9Q0.roa
File: aFnh6dX02Plbz29YBmV3SD7j9Q0.roa (raw, json)
Hash identifier: sc7xU6BRSHAeMTFIhYVFzlvkouO1NHCbhFZvW8ZQGuY=
Subject key identifier: 68:59:E1:E9:D5:F4:D8:F9:5B:CF:6F:58:06:65:77:48:3E:E3:F5:0D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A03596C33D0E0BAFBA8FC56AA1118F687A
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/aFnh6dX02Plbz29YBmV3SD7j9Q0.roa
Signing time: Mon 24 Aug 2026 21:04:27 +0000
ROA not before: Mon 24 Aug 2026 21:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:96:c3:3d:0e:0b:af:ba:8f:c5:6a:a1:11:8f:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 24 21:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6859e1e9d5f4d8f95bcf6f58066577483ee3f50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:19:ca:32:fa:b7:a4:96:e2:c1:11:77:31:
dd:5c:b7:0f:54:e1:8b:80:21:7d:74:56:68:1b:df:
66:42:73:12:fd:72:e7:db:e0:09:a2:15:a9:f2:88:
a0:e0:96:10:c7:92:ab:c5:63:05:63:81:8b:db:b4:
4a:7c:b2:93:3c:41:0d:ef:a6:40:e0:58:b4:30:40:
1f:46:b4:95:5b:4b:f0:98:2f:e7:5e:37:94:47:a3:
28:86:18:85:48:7a:c1:f5:65:6b:3f:4c:a9:1e:06:
6d:90:46:4f:e4:3a:d7:ea:3e:d9:99:e4:fc:2b:35:
5f:55:11:ca:85:87:2b:a7:2b:a7:ec:83:1a:0b:c7:
15:26:3f:03:2c:b1:1f:6e:ad:39:81:70:b8:bc:32:
b2:a8:19:cf:51:6d:c0:57:43:d8:51:08:d5:31:51:
ef:9e:e1:99:32:1b:04:9e:10:16:02:5b:77:bc:28:
a1:9c:c9:3e:36:64:58:91:07:f0:0f:c0:16:ae:10:
84:7a:6f:4d:81:83:88:c0:32:7f:57:68:8f:84:c4:
49:ed:5f:2e:91:ea:70:38:e8:88:58:4d:07:d9:2a:
c9:da:91:37:9c:43:d3:55:bb:84:e0:c9:1e:e8:82:
90:77:74:5a:5d:85:ee:5c:ed:4e:18:61:35:bf:c9:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:E1:E9:D5:F4:D8:F9:5B:CF:6F:58:06:65:77:48:3E:E3:F5:0D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/aFnh6dX02Plbz29YBmV3SD7j9Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3b:a8:1c:c3:9a:87:18:c4:b3:ba:cf:cb:50:9d:91:38:c9:
ab:59:01:91:a4:e7:ff:1c:10:87:4c:c1:1b:e2:84:84:8e:7d:
c7:a9:9f:0c:77:b4:02:bf:0f:34:81:8a:f5:50:5b:db:37:27:
66:3f:f7:48:22:47:d8:a9:57:f4:cd:28:3b:b7:31:ad:eb:35:
4b:50:a4:e2:50:bc:b6:23:f4:31:9e:78:12:95:c8:75:a7:c7:
4d:1d:a7:a9:df:cb:55:07:18:26:a7:6d:71:03:08:ae:9a:0a:
76:11:1e:a8:5b:f1:b0:0f:d7:0c:8b:42:e5:e7:b0:87:27:27:
0e:a8:e6:7d:f7:84:57:96:ef:ad:a3:df:92:73:42:36:6f:11:
a6:69:ef:a0:c6:dd:e1:f4:a7:a4:5a:9b:f4:a9:50:26:73:aa:
72:ac:1b:5e:c0:a0:01:9a:fc:41:cd:3d:21:46:b9:07:c7:2c:
4e:f8:f2:f7:1d:b8:22:23:ae:b9:01:b0:56:a7:73:65:cf:e0:
b3:b7:4b:15:a9:ca:19:65:6b:fa:f2:be:bc:4c:17:96:94:b5:
05:1b:41:98:63:05:e9:cf:b1:a3:40:c7:1a:64:28:ac:0b:5f:
f1:f6:59:e7:5e:b1:9d:08:82:ec:1e:79:9d:fb:0a:07:db:08:
10:b6:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:33 2026 by rpki-client