Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/n4bNxRbFCs1h23LwYCKEKVbs6cE.roa
File: n4bNxRbFCs1h23LwYCKEKVbs6cE.roa (raw, json)
Hash identifier: vxCr/WbV6Jeybsw7yoKB1UFYSoEYb1FPwb35J/hvssw=
Subject key identifier: 9F:86:CD:C5:16:C5:0A:CD:61:DB:72:F0:60:22:84:29:56:EC:E9:C1
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019DC05A193A9025F6A237860E4BDF0E7922
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/n4bNxRbFCs1h23LwYCKEKVbs6cE.roa
Signing time: Fri 24 Apr 2026 16:37:03 +0000
ROA not before: Fri 24 Apr 2026 16:37:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:5a:19:3a:90:25:f6:a2:37:86:0e:4b:df:0e:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 24 16:37:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f86cdc516c50acd61db72f06022842956ece9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:2e:1f:48:4f:b9:94:44:2d:d0:00:f7:27:
68:ae:f8:ad:8f:c9:7c:5b:61:58:ad:43:54:1b:3f:
7e:45:a9:e9:c7:93:42:dc:41:db:ab:b7:44:49:6c:
7b:cd:39:46:4a:6d:ed:39:6e:11:08:be:c4:b2:67:
45:cd:81:3f:2b:21:57:fa:ef:90:f1:ee:2a:88:e1:
fd:47:69:cb:04:f9:cf:99:92:aa:55:3d:7d:67:48:
22:00:43:f4:78:03:1f:f1:e2:db:f8:3b:b1:a0:8b:
0d:e1:82:3f:f5:90:0e:7a:3d:4b:da:89:b2:95:ec:
bb:de:c9:a8:e5:f8:9e:27:3b:a1:80:0c:c0:10:1c:
fb:14:f7:5a:a4:aa:02:52:9a:7e:6e:b5:5c:fd:3a:
42:16:6e:31:aa:b9:e9:1d:6d:16:aa:b7:c3:fe:60:
d4:b0:6e:d0:a7:c2:44:42:27:23:62:d0:59:61:e5:
5d:19:08:25:b9:c6:ee:d8:b3:78:4d:34:e5:88:cd:
bf:97:b6:11:58:c7:9f:76:0d:59:3d:db:9a:05:64:
36:29:d7:e2:25:0e:b5:2e:f9:bd:d7:0f:9a:04:3e:
68:e2:05:bd:98:ed:f9:5d:9c:5b:1c:e9:4f:96:7a:
97:a1:ee:77:b6:46:b0:a1:ca:7a:86:90:5b:58:b7:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:CD:C5:16:C5:0A:CD:61:DB:72:F0:60:22:84:29:56:EC:E9:C1
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/n4bNxRbFCs1h23LwYCKEKVbs6cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
73:15:19:84:60:ec:3a:65:fe:bd:0a:17:61:2e:25:e9:f9:35:
62:a1:20:b4:61:31:17:8a:1e:56:9d:0f:4c:15:a0:aa:da:56:
7b:eb:e2:4f:1e:df:97:41:9b:e9:55:f1:4d:ef:8a:b4:5f:e5:
e1:2b:d6:8b:81:13:04:89:c7:de:3d:1e:ed:ca:64:ab:9d:33:
a6:a4:f6:4a:79:5e:24:f9:fb:8d:ed:01:d4:98:33:08:14:90:
c7:cb:d9:70:2f:db:26:08:72:a4:b6:7c:a6:7b:67:85:e8:64:
5c:98:50:3b:12:e1:5e:ec:ea:72:fd:9d:b8:8d:76:c9:68:cf:
68:05:b3:e4:2c:40:55:90:de:23:11:55:ae:41:1c:04:56:9d:
a6:2d:cb:49:11:bb:42:51:6b:9c:93:b8:84:07:d0:e3:55:b6:
c5:31:27:f2:e4:18:e9:3b:e0:d1:49:9f:54:bf:74:8f:50:da:
c1:9a:9a:c9:fe:de:78:11:aa:69:03:b3:f7:ed:5b:ba:af:58:
b9:b4:e3:4d:29:ee:65:a7:a3:87:6b:a8:25:a1:98:32:4c:8c:
25:fb:12:df:3a:e9:cd:b1:a5:f7:e8:69:f2:8d:cc:b6:e5:78:
e1:95:fd:24:0d:7f:42:c8:00:36:13:92:67:cc:9d:34:1e:4a:
e6:50:19:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3AWhk6kCX2ojeGDkvfDnkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwNDI0MTYzNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjg2Y2RjNTE2YzUwYWNkNjFkYjcyZjA2MDIyODQyOTU2ZWNlOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V4uH0hPuZRELdAA9ydorvitj8l8
W2FYrUNUGz9+Ranpx5NC3EHbq7dESWx7zTlGSm3tOW4RCL7EsmdFzYE/KyFX+u+Q
8e4qiOH9R2nLBPnPmZKqVT19Z0giAEP0eAMf8eLb+DuxoIsN4YI/9ZAOej1L2omy
ley73smo5fieJzuhgAzAEBz7FPdapKoCUpp+brVc/TpCFm4xqrnpHW0WqrfD/mDU
sG7Qp8JEQicjYtBZYeVdGQglucbu2LN4TTTliM2/l7YRWMefdg1ZPduaBWQ2Kdfi
JQ61Lvm91w+aBD5o4gW9mO35XZxbHOlPlnqXoe53tkawocp6hpBbWLcLgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+GzcUWxQrNYdty8GAihClW7OnBMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvbjRiTnhSYkZDczFoMjNMd1lDS0VLVmJzNmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbcAwQA
WFCJMA0GCSqGSIb3DQEBCwUAA4IBAQBzFRmEYOw6Zf69ChdhLiXp+TVioSC0YTEX
ih5WnQ9MFaCq2lZ76+JPHt+XQZvpVfFN74q0X+XhK9aLgRMEicfePR7tymSrnTOm
pPZKeV4k+fuN7QHUmDMIFJDHy9lwL9smCHKktnyme2eF6GRcmFA7EuFe7Opy/Z24
jXbJaM9oBbPkLEBVkN4jEVWuQRwEVp2mLctJEbtCUWuck7iEB9DjVbbFMSfy5Bjp
O+DRSZ9Uv3SPUNrBmprJ/t54EappA7P37Vu6r1i5tONNKe5lp6OHa6gloZgyTIwl
+xLfOunNsaX36Gnyjcy25Xjhlf0kDX9CyAA2E5JnzJ00HkrmUBkq
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:52 2026 by rpki-client