Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/776kTfMAU9E-GA6tUE0dWf03NFE.roa
File: 776kTfMAU9E-GA6tUE0dWf03NFE.roa (raw, json)
Hash identifier: XZPUoY2R1970iMjMj9p+da3kkexyw+ixtJZJMB7YrV8=
Subject key identifier: EF:BE:A4:4D:F3:00:53:D1:3E:18:0E:AD:50:4D:1D:59:FD:37:34:51
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01A190633FA3CAC57195CC4AAC5E520D6FCA
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/776kTfMAU9E-GA6tUE0dWf03NFE.roa
Signing time: Sat 31 Oct 2026 05:16:25 +0000
ROA not before: Sat 31 Oct 2026 05:16:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395886
IP address blocks: 45.135.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:63:3f:a3:ca:c5:71:95:cc:4a:ac:5e:52:0d:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Oct 31 05:16:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efbea44df30053d13e180ead504d1d59fd373451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:a7:fc:73:ee:21:35:d5:44:00:b1:e5:2b:
f1:5f:1c:37:4a:66:ef:51:42:4c:2f:46:2c:47:2d:
84:f7:bb:1a:01:e2:e3:b1:2e:a3:4a:ec:58:dc:ab:
06:5a:65:34:d2:c0:32:45:d8:5e:98:5d:82:c8:4c:
ce:de:60:ad:eb:c4:25:98:54:c7:f5:26:f0:fe:d7:
06:17:60:c0:95:98:ea:b4:ee:9d:61:f6:24:3b:b7:
f4:cc:50:0c:56:ac:94:f0:bf:d9:40:ca:8f:30:cf:
0d:7a:75:ca:02:f8:5b:e2:ff:d9:6e:9d:c5:0d:a9:
16:1d:30:1b:a4:20:13:58:fa:ad:ec:3e:e0:92:63:
32:39:2e:9e:e1:04:2d:c8:0b:8f:42:36:bc:7b:59:
3c:5d:bc:8c:73:cb:0f:9e:b7:0e:f9:27:a9:af:65:
ff:2e:ae:02:f3:7d:93:29:88:0e:45:6e:4f:fb:09:
93:dc:c1:a6:11:92:8e:9c:30:4f:54:8e:5c:a6:e9:
4d:3d:bc:b5:c9:6e:57:aa:dc:06:94:84:9f:3e:bb:
f5:c8:5e:63:bf:70:a1:a5:a4:a4:33:ba:c8:bf:7f:
82:a0:44:15:a9:3c:2b:85:38:5f:fb:7e:12:4b:5e:
96:88:e1:31:9d:7c:fe:9d:49:d9:00:8f:4b:e7:51:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BE:A4:4D:F3:00:53:D1:3E:18:0E:AD:50:4D:1D:59:FD:37:34:51
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/776kTfMAU9E-GA6tUE0dWf03NFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.116.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c2:e5:d7:57:06:10:b1:44:30:2a:67:67:29:57:df:2d:a5:
5b:7d:12:22:ea:c2:a2:d8:38:55:9c:29:3c:54:a3:38:59:00:
39:2d:5b:dd:8a:6b:6b:5d:95:a9:e2:70:1d:a5:38:82:9f:e9:
2c:70:e3:30:89:d3:e1:35:3b:0a:28:de:91:08:cc:be:b3:22:
be:a1:f9:50:20:ac:49:b3:f4:7e:70:29:27:d2:20:90:1d:9a:
dd:c7:27:36:b8:c3:d0:d3:f9:ec:5a:5b:48:a3:c5:2c:7f:31:
f5:ef:e7:ce:5a:a3:c4:8f:d1:af:b9:50:bd:a6:84:ca:c3:31:
b4:6d:cd:ef:fd:57:ff:75:f6:59:f4:3f:8f:44:ba:61:42:69:
82:c0:83:fc:48:a6:80:3b:1b:39:d2:38:95:17:52:cb:8a:fd:
22:ad:63:ad:b8:6d:90:ef:74:3a:89:42:cf:32:ab:b2:bc:e9:
e4:e0:3b:7f:13:0e:6e:14:24:ae:10:cb:e2:2f:89:58:9b:32:
c7:20:90:49:67:0b:9c:93:f5:f3:38:ba:5e:9a:e3:d7:ee:37:
70:8d:5b:4e:40:4c:e0:0b:a6:07:0a:db:1f:07:a8:26:f1:1b:
76:76:87:db:78:cc:3e:d6:da:ee:d6:b1:c8:4e:7b:ce:5c:b5:
74:47:f6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:00 2026 by rpki-client