Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/RpRW9hgIjPMfAZ842QdrIrNI7fk.roa
File: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (raw, json)
Hash identifier: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=
Subject key identifier: 46:94:56:F6:18:08:8C:F3:1F:01:9F:38:D9:07:6B:22:B3:48:ED:F9
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 019DB5C1BF2988392A953D20F99CBE71A48A
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/RpRW9hgIjPMfAZ842QdrIrNI7fk.roa
Signing time: Wed 22 Apr 2026 15:14:26 +0000
ROA not before: Wed 22 Apr 2026 15:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12637
IP address blocks: 77.83.64.0/24 maxlen: 24
77.83.65.0/24 maxlen: 24
80.241.140.0/22 maxlen: 24
80.241.142.0/24 maxlen: 24
2a05:be80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:c1:bf:29:88:39:2a:95:3d:20:f9:9c:be:71:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Apr 22 15:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=469456f618088cf31f019f38d9076b22b348edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:fa:38:fb:b8:c7:1d:0a:47:62:e5:cc:f6:
c1:54:a0:5f:86:1b:2e:a6:52:fe:f2:e2:28:dd:76:
51:61:a1:e1:b7:9d:cb:cf:ec:a7:b8:7c:84:2e:e7:
e4:8b:51:ad:89:a1:1b:c8:dd:bf:51:c0:37:71:22:
2d:77:ca:c6:b2:51:a5:c9:11:fb:6f:d8:3d:7d:89:
fe:28:4a:45:27:79:6b:43:f9:ed:d8:ec:dd:90:26:
c2:f3:13:05:dd:51:0c:37:9d:f4:8c:24:4c:16:02:
e3:d6:3d:3b:ad:f8:94:72:23:e0:b4:5a:a5:77:8f:
18:f4:8e:c0:21:db:52:14:70:20:52:b8:4a:ca:7b:
2b:cf:22:6c:2b:08:ea:cc:ed:03:db:41:86:2c:8a:
af:cc:20:56:f3:6d:a4:8a:3a:15:45:0f:86:b6:f0:
5a:06:37:fc:3c:6a:6c:2b:73:c1:08:28:07:91:24:
a9:93:f6:d9:31:44:92:ec:78:b4:00:18:e5:2b:38:
fc:ad:58:39:61:eb:01:3d:11:26:66:63:a0:70:c5:
a4:08:89:72:19:c1:24:16:1c:3f:6b:0e:80:7b:86:
e2:30:97:bd:3a:d3:57:e8:06:a9:25:13:a8:2f:65:
47:b2:8a:04:be:e0:ad:2b:93:28:0d:50:55:b4:09:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:56:F6:18:08:8C:F3:1F:01:9F:38:D9:07:6B:22:B3:48:ED:F9
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/RpRW9hgIjPMfAZ842QdrIrNI7fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/23
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
11:77:e4:72:1b:5d:50:80:2f:1f:0f:53:26:8d:a8:fe:56:4d:
82:b1:e2:eb:08:3f:21:10:5e:97:6a:98:d3:82:08:94:01:38:
5b:0c:ef:70:08:1b:13:a5:a2:b5:7e:f9:16:4b:45:34:c1:91:
50:44:77:f4:5e:66:21:3d:b4:fd:b1:ab:89:e8:7d:4d:72:aa:
4a:35:b3:9a:2b:ce:18:83:2c:e7:f3:0e:8a:81:e5:4b:e8:d1:
b7:68:b9:26:37:2d:1c:0b:15:40:b9:3b:c1:e8:c5:bd:a2:2c:
3f:c5:99:b6:32:46:be:b4:d0:4c:e3:8e:d4:8f:ef:d0:6c:75:
5b:c5:07:8c:6b:6e:7d:77:f2:39:2f:56:fb:f2:74:6a:e8:c9:
1b:ee:a1:5b:36:84:56:a4:70:fa:f9:b5:26:47:b6:bb:00:81:
06:53:94:43:34:62:35:52:70:6c:59:96:18:c7:5f:b0:ae:51:
0d:3d:d0:60:1a:3b:39:71:fe:e3:02:30:e9:0b:74:3f:e7:f1:
a3:6c:3c:47:3b:51:b1:94:6d:c0:70:3a:8a:34:1b:10:16:28:
1e:38:5f:c3:8d:54:4b:9c:32:11:f4:74:6b:f9:1a:f3:83:ec:
ab:56:d2:f8:9b:d6:f1:eb:0c:89:56:d2:f3:15:7a:82:79:5a:
4c:e1:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:32 2026 by rpki-client