Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JVsYuvMRsdQL2NBUzkBRdQ5PsL4.roa
File: JVsYuvMRsdQL2NBUzkBRdQ5PsL4.roa (raw, json)
Hash identifier: /KiyMSTBu8YlcUSx3FoMJJcSW+VY3ypKCz2GoCTQ06s=
Subject key identifier: 25:5B:18:BA:F3:11:B1:D4:0B:D8:D0:54:CE:40:51:75:0E:4F:B0:BE
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01A11A74861B865888851AE846F45C5B4B5F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JVsYuvMRsdQL2NBUzkBRdQ5PsL4.roa
Signing time: Thu 08 Oct 2026 07:40:06 +0000
ROA not before: Thu 08 Oct 2026 07:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218466
IP address blocks: 77.85.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:74:86:1b:86:58:88:85:1a:e8:46:f4:5c:5b:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 8 07:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255b18baf311b1d40bd8d054ce4051750e4fb0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:65:fb:fc:5f:f5:0b:17:96:0d:34:36:42:
bf:c5:41:af:24:5b:2d:91:fe:36:85:08:b6:ed:3c:
4b:fb:66:f8:6a:b8:f1:ef:b2:97:fa:2b:99:e7:c1:
0e:9f:65:76:5f:9d:aa:d8:fb:20:3a:dd:51:40:eb:
d6:43:03:d7:71:b1:3e:8c:97:3b:6c:2d:30:e6:ce:
1e:c0:00:ce:0d:b4:81:03:7f:f9:3d:4f:ef:74:db:
db:4b:d8:38:51:8a:cf:85:51:63:db:2c:09:39:b8:
7d:a1:3e:ab:b7:60:88:02:9b:b6:09:86:a4:73:23:
a6:e8:ac:30:57:81:54:ce:c1:6b:7b:2e:07:4a:a6:
61:3d:14:7e:92:94:e9:81:bc:6a:c2:56:80:ca:9c:
a4:54:22:d2:bd:6b:ca:df:b9:1e:46:65:2b:37:03:
bf:a1:3f:f3:ac:0d:f7:ea:6b:46:58:b1:5b:71:6a:
fe:12:99:67:bf:72:7a:f5:61:a2:3e:9e:01:98:c7:
75:1a:d9:8e:c6:eb:d0:92:10:4a:09:2e:9e:33:a8:
af:06:15:95:41:90:6b:e7:d2:8d:26:3b:04:a1:0e:
57:57:7c:b9:69:2f:c5:44:65:04:18:1c:7b:cb:5a:
03:8b:10:01:10:50:87:ca:77:61:2c:e1:d2:c3:ee:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5B:18:BA:F3:11:B1:D4:0B:D8:D0:54:CE:40:51:75:0E:4F:B0:BE
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JVsYuvMRsdQL2NBUzkBRdQ5PsL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.173.0/24
Signature Algorithm: sha256WithRSAEncryption
85:12:67:78:d2:2a:68:3e:84:6b:b3:fa:84:ae:8e:a5:7d:4e:
12:5d:0a:c4:7f:da:60:6e:74:6a:f1:5c:6c:e1:8a:2b:18:7b:
2d:dc:b9:7f:70:d8:20:18:ec:a8:a1:ad:b8:c9:ce:e9:56:38:
f2:de:e0:02:32:e6:ba:ce:a4:c2:f8:01:f4:18:a0:e1:f8:98:
05:04:ea:4d:94:6e:df:df:a6:45:77:31:29:cb:ca:bc:03:df:
5d:2c:26:d1:82:d1:47:5c:98:ec:55:0c:54:36:02:5f:c2:06:
39:a2:1f:14:72:c0:3c:4b:3f:aa:4b:8e:c1:70:b6:cd:53:99:
fb:77:10:e1:da:b3:6d:12:88:23:3f:60:5d:3d:bf:c1:a9:07:
e4:a2:4a:0f:29:4f:38:9a:97:0f:be:6a:ed:c9:49:37:79:e2:
dc:65:db:50:51:0d:96:e3:81:9c:69:a8:d9:eb:46:0d:e0:c4:
d4:bb:c4:56:b7:ab:a6:89:0e:6a:73:97:9a:49:c1:0c:2a:df:
54:b0:25:3e:72:32:c7:d0:1e:00:0b:d5:f6:0f:53:34:d3:14:
b5:13:b7:f0:9e:81:0b:f1:ac:3a:53:d0:68:ac:2f:9a:e3:72:
7c:e1:93:55:24:a3:ad:62:c7:fc:e4:55:58:4b:53:ba:2d:62:
1c:bb:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:07 2026 by rpki-client