Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/dnSDaIv-SCfi0PdBQfU0w4TqjY8.roa
File: dnSDaIv-SCfi0PdBQfU0w4TqjY8.roa (raw, json)
Hash identifier: PAbBvLt9TDw5Kb5axWSCTOqom3n/Oa9w7JSxqnngK5M=
Subject key identifier: 76:74:83:68:8B:FE:48:27:E2:D0:F7:41:41:F5:34:C3:84:EA:8D:8F
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A1BF6641F7ED75BFAEECA8922B44682368
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/dnSDaIv-SCfi0PdBQfU0w4TqjY8.roa
Signing time: Mon 09 Nov 2026 08:21:52 +0000
ROA not before: Mon 09 Nov 2026 08:21:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:66:41:f7:ed:75:bf:ae:ec:a8:92:2b:44:68:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 9 08:21:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=767483688bfe4827e2d0f74141f534c384ea8d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:81:19:41:b3:dd:46:c0:78:5d:32:2f:ae:
07:31:f7:c7:a8:cc:ea:fa:6f:2d:eb:06:5d:00:4f:
7c:95:45:0c:b7:ce:d2:8a:74:cd:ec:f8:1c:44:7b:
30:df:ee:d6:ec:99:b1:cb:a4:f4:ce:df:04:1f:ed:
ce:85:73:a0:9d:98:5a:ae:e0:9f:6b:31:e1:be:7c:
df:79:f1:38:74:e5:43:ca:ff:f1:3e:29:18:0f:7d:
ac:d8:2f:fb:09:2a:00:bf:fa:e5:6e:f8:1d:a6:8f:
7e:2b:1b:de:e7:9f:83:58:09:5e:6e:26:e3:f1:f7:
cd:39:a6:21:8b:cb:e6:3c:93:6f:35:ea:17:bb:0f:
83:9b:a0:15:18:e7:c1:c8:84:09:93:1b:23:fe:09:
20:d2:da:8f:9e:dc:50:a7:ef:81:c9:c3:61:3c:df:
39:b4:a3:08:62:c2:90:f5:24:af:0d:65:49:9d:c6:
65:be:a6:77:2f:22:98:19:80:d3:f6:1b:54:dc:fd:
5d:6b:7b:ed:19:bf:6c:55:06:80:47:42:3c:f9:9a:
28:47:e2:c1:d1:ea:9b:d5:30:a2:95:df:90:ff:28:
e5:50:a5:0a:ea:ae:9f:5a:b8:00:f6:9c:fb:61:f3:
5f:23:f3:fc:a4:f3:c2:3b:9e:d7:29:a4:ca:6d:f5:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:74:83:68:8B:FE:48:27:E2:D0:F7:41:41:F5:34:C3:84:EA:8D:8F
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/dnSDaIv-SCfi0PdBQfU0w4TqjY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:18:08:5c:1d:e4:74:96:30:47:5c:a4:cf:ad:02:8e:04:5c:
a3:e7:bd:9b:d1:73:be:39:80:45:35:bb:ac:5d:b1:d1:d3:70:
9c:57:6b:5e:f2:f2:73:f8:d1:31:eb:f9:60:19:78:94:41:52:
04:3d:9a:47:eb:60:a8:66:1f:7c:1d:35:8c:cf:65:93:df:0b:
1f:4c:34:d2:e9:dc:af:ce:78:cc:bc:db:f6:d8:13:ba:7e:c5:
24:d5:43:8a:dc:0d:fe:38:ee:ec:2d:39:e0:c5:58:c1:f6:c3:
9a:0a:51:34:00:02:a2:1d:80:43:a1:a5:09:10:05:0d:d3:62:
1f:17:4d:93:0b:c4:ff:48:21:31:7e:58:7c:c2:af:b0:b3:2d:
a3:cb:23:46:62:ce:14:48:da:2a:3e:23:d4:4c:c8:9f:14:9d:
5b:82:a1:ba:1e:95:d2:87:65:f2:e0:ea:87:88:1d:96:17:51:
66:05:00:f4:0d:ee:17:3e:3c:c3:d0:ab:44:61:cc:b5:88:2f:
42:91:ca:f0:7f:9d:b1:5b:94:8a:5a:bb:53:d1:54:5f:cd:09:
42:9b:ae:16:c1:46:12:ac:aa:b7:0a:30:80:3b:89:1c:15:27:
ab:97:9f:7b:9d:c4:0e:51:88:48:f7:b5:af:5d:da:31:41:bd:
e1:07:34:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG/ZkH37XW/ruyokitEaCNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYxMTA5MDgyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Njc0ODM2ODhiZmU0ODI3ZTJkMGY3NDE0MWY1MzRjMzg0ZWE4ZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1uBGUGz3UbAeF0yL64HMffHqMzq
+m8t6wZdAE98lUUMt87SinTN7PgcRHsw3+7W7Jmxy6T0zt8EH+3OhXOgnZharuCf
azHhvnzfefE4dOVDyv/xPikYD32s2C/7CSoAv/rlbvgdpo9+Kxve55+DWAlebibj
8ffNOaYhi8vmPJNvNeoXuw+Dm6AVGOfByIQJkxsj/gkg0tqPntxQp++BycNhPN85
tKMIYsKQ9SSvDWVJncZlvqZ3LyKYGYDT9htU3P1da3vtGb9sVQaAR0I8+ZooR+LB
0eqb1TCild+Q/yjlUKUK6q6fWrgA9pz7YfNfI/P8pPPCO57XKaTKbfV9bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZ0g2iL/kgn4tD3QUH1NMOE6o2PMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvZG5TRGFJdi1TQ2ZpMFBkQlFmVTB3NFRxalk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbdMA0G
CSqGSIb3DQEBCwUAA4IBAQBcGAhcHeR0ljBHXKTPrQKOBFyj572b0XO+OYBFNbus
XbHR03CcV2te8vJz+NEx6/lgGXiUQVIEPZpH62CoZh98HTWMz2WT3wsfTDTS6dyv
znjMvNv22BO6fsUk1UOK3A3+OO7sLTngxVjB9sOaClE0AAKiHYBDoaUJEAUN02If
F02TC8T/SCExflh8wq+wsy2jyyNGYs4USNoqPiPUTMifFJ1bgqG6HpXSh2Xy4OqH
iB2WF1FmBQD0De4XPjzD0KtEYcy1iC9Ckcrwf52xW5SKWrtT0VRfzQlCm64WwUYS
rKq3CjCAO4kcFSerl597ncQOUYhI97WvXdoxQb3hBzT2
-----END CERTIFICATE-----
Generated at Sun Nov 15 02:47:34 2026 by rpki-client