Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/lIz9Y2VSw1IRAK5RgFrWVq9VCXw.roa
File: lIz9Y2VSw1IRAK5RgFrWVq9VCXw.roa (raw, json)
Hash identifier: u8QpaP+GzKQQXypDSXNKQWO2maacxt/Fww5QZjJ3VFw=
Subject key identifier: 94:8C:FD:63:65:52:C3:52:11:00:AE:51:80:5A:D6:56:AF:55:09:7C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0397CE42AE4B8A02CCD954389CEFFACC8
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/lIz9Y2VSw1IRAK5RgFrWVq9VCXw.roa
Signing time: Tue 25 Aug 2026 15:14:41 +0000
ROA not before: Tue 25 Aug 2026 15:14:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:7c:e4:2a:e4:b8:a0:2c:cd:95:43:89:ce:ff:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 25 15:14:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=948cfd636552c3521100ae51805ad656af55097c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:dd:a7:a0:0b:70:34:7b:e3:a3:bb:7e:90:
40:06:32:a9:b2:ea:f8:a4:c3:8c:a8:25:14:d3:ab:
65:2e:ea:88:58:11:7d:30:9b:f2:2e:fc:9a:30:a1:
41:fb:21:7f:47:3d:11:76:7a:71:5a:3f:d3:fc:4b:
57:0c:74:07:66:ec:03:40:71:e5:e7:9f:be:ad:0e:
50:d7:34:04:b9:dc:3f:ae:cc:e1:6e:fb:e2:d1:5d:
c4:74:64:c3:71:e2:4b:38:8b:99:68:c4:e6:f1:05:
5e:d2:f4:f6:1a:7b:13:b1:4a:d2:ca:19:c5:53:b1:
29:46:76:5b:12:52:10:c3:9f:78:9a:e9:e6:5a:69:
97:fe:93:90:ef:c5:c7:eb:4f:54:5c:76:3e:a9:1d:
91:1d:86:40:c6:a2:fe:3c:28:1b:bc:f5:6c:c5:75:
e1:74:40:66:9a:7c:a9:4c:40:0b:c9:26:f5:02:1f:
49:1c:12:27:d2:17:d3:1e:eb:97:de:8c:22:7f:01:
a7:e7:0e:c3:fa:7d:95:0c:be:05:a4:51:b7:2a:02:
bb:34:6d:de:71:1e:dd:02:f1:8c:80:2b:93:2c:ca:
63:2e:82:44:00:12:0e:74:f6:6e:4e:db:6a:d3:ed:
0e:80:e7:5c:d0:1f:e7:a1:55:df:f7:22:9a:e8:ad:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:FD:63:65:52:C3:52:11:00:AE:51:80:5A:D6:56:AF:55:09:7C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/lIz9Y2VSw1IRAK5RgFrWVq9VCXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:de:51:61:fb:84:ec:73:f2:c7:dd:39:e8:1b:49:90:72:16:
30:c0:97:5f:ba:61:60:7e:e9:07:ba:a0:4e:fe:a6:e6:4b:04:
fe:c6:62:d8:e0:21:22:9a:f8:29:ef:89:8c:c4:a8:1b:96:ee:
d3:e9:f0:f2:d4:3b:7d:3d:ec:e2:11:8e:f8:82:17:f4:ff:3e:
a3:21:d1:3d:1f:b2:d0:f2:61:01:35:81:0b:65:27:b2:bc:f5:
19:9c:34:50:a4:44:ca:d5:2f:08:f8:02:6f:28:43:b9:30:c7:
cb:59:bd:1f:55:e8:e6:f8:db:36:19:82:2c:8a:67:2e:29:70:
fa:a8:3c:8e:fa:d3:bf:05:6d:96:53:76:3d:f3:46:ab:ae:37:
47:5f:b7:ba:41:3c:bf:94:f2:2e:99:ea:4c:56:d6:56:bb:cf:
c5:d1:37:61:5b:ee:ac:b2:fc:b9:a8:07:1f:59:fd:6a:e2:5f:
48:ec:32:be:f1:d6:6a:d1:e0:ed:59:cd:60:b5:b8:f3:cc:bf:
76:78:a5:b2:e8:70:8f:2c:43:9b:3d:79:c5:25:d6:7b:b0:ca:
0c:3f:f3:46:e5:dd:dc:51:2c:60:e4:da:f1:0d:07:1c:5d:47:
48:70:27:0a:cd:90:a7:3a:5f:68:92:45:32:0c:a8:a2:f5:60:
cd:0c:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:50 2026 by rpki-client