Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/lae4OtHmoG6AJYQrgRz81yH_LlA.roa
File: lae4OtHmoG6AJYQrgRz81yH_LlA.roa (raw, json)
Hash identifier: xLHjJipgVNqkU5QG3Fd4FFFIaeQLYub8jo7+ExiNqF4=
Subject key identifier: 95:A7:B8:3A:D1:E6:A0:6E:80:25:84:2B:81:1C:FC:D7:21:FF:2E:50
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019FCA4B8B08E69116D90EB0FA40C020BE64
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/lae4OtHmoG6AJYQrgRz81yH_LlA.roa
Signing time: Tue 04 Aug 2026 01:02:56 +0000
ROA not before: Tue 04 Aug 2026 01:02:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
77.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:4b:8b:08:e6:91:16:d9:0e:b0:fa:40:c0:20:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 4 01:02:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a7b83ad1e6a06e8025842b811cfcd721ff2e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:3b:fb:a5:fb:fb:6e:63:a4:cc:6d:5b:ae:
a4:13:b6:ac:0f:02:7e:12:d1:ff:ae:aa:5a:c5:bb:
81:06:04:5c:d0:3c:92:bd:71:e1:54:6f:44:be:bc:
1b:66:7d:8b:3c:94:49:e0:e9:c4:d7:d5:c1:4d:eb:
07:4f:0e:2e:eb:56:e5:8a:f7:63:fd:00:b0:02:61:
39:57:be:cd:0e:b8:52:f0:ce:22:f5:8f:aa:da:82:
35:8e:bf:4c:06:a7:f4:46:da:20:58:f2:d4:07:44:
ea:d0:c9:d4:90:6a:c4:04:c1:c7:1f:0b:f6:2c:3c:
cc:5f:e1:61:c1:12:58:48:08:72:0a:cb:9a:5a:e3:
dd:fd:30:7c:99:cd:b0:a0:45:eb:69:e3:f5:7b:07:
04:71:b2:c5:75:ad:8b:30:48:de:d0:c8:02:7c:66:
e3:25:fc:44:0d:24:60:8e:af:d8:fd:80:b8:e0:ec:
fa:f7:88:ae:5d:d6:bf:fe:9b:50:14:54:a5:24:06:
34:ca:8b:7b:13:fa:6f:39:8b:c4:9e:11:35:2e:fc:
a6:bd:0d:6f:28:d9:5d:ff:60:24:61:71:cb:d8:fe:
5c:f1:d3:28:f5:a3:d3:aa:60:af:18:12:e4:8e:b7:
64:68:f8:c3:4f:ab:be:1a:e2:f9:e8:f4:2e:1e:71:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:B8:3A:D1:E6:A0:6E:80:25:84:2B:81:1C:FC:D7:21:FF:2E:50
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/lae4OtHmoG6AJYQrgRz81yH_LlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0-77.246.222.255
Signature Algorithm: sha256WithRSAEncryption
6c:82:42:c0:28:3a:9c:1e:46:af:c2:b8:2a:7a:0d:a1:e3:ce:
1d:87:0d:7c:c7:c2:c1:df:e2:f7:cb:90:2d:43:79:db:74:4a:
48:65:f0:d9:48:8c:cb:fd:a6:1c:b9:28:6a:8b:cd:25:ab:61:
10:bf:d8:b3:02:cb:94:67:16:b0:9b:e2:19:6e:4c:40:c2:2f:
9c:bb:b6:19:31:31:38:e4:69:1f:90:cb:68:5b:b6:36:b2:46:
7c:5b:2b:9f:d2:9b:67:9d:77:f9:b6:7c:62:51:a7:e9:e8:21:
87:84:e7:3a:30:58:93:bb:61:fd:f7:d1:3a:7a:79:a4:d0:c5:
d1:e1:96:8a:53:11:c0:3f:f0:b6:c8:e6:7f:bb:81:12:73:26:
5e:9d:db:6f:f9:b5:ed:ed:92:8b:46:2e:83:b3:cf:3b:20:75:
03:29:1b:77:31:ea:7e:5a:fc:51:7d:d9:47:72:ca:44:91:0a:
f5:1e:42:5e:82:a0:30:5a:1d:0f:31:02:ce:21:27:a1:fe:bc:
81:ef:c1:fd:d6:b0:38:83:b2:90:f5:2e:b0:d5:01:ba:5b:24:
a5:ef:26:29:6a:30:17:2b:c1:48:d2:4b:13:eb:1e:f0:27:31:
73:7d:4b:6e:b0:78:dc:43:aa:69:97:a8:ad:57:fa:48:fc:1c:
bd:41:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:03 2026 by rpki-client