Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/G_UPWjhIcvhRhbrsCzFiU4-Xung.roa
File: G_UPWjhIcvhRhbrsCzFiU4-Xung.roa (raw, json)
Hash identifier: 047QljbRvFtkey6qy1tumtUXHbVbw0WiHtNwMdYTktY=
Subject key identifier: 1B:F5:0F:5A:38:48:72:F8:51:85:BA:EC:0B:31:62:53:8F:97:BA:78
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019FFC6ECE77149D372210A3395F65C79044
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/G_UPWjhIcvhRhbrsCzFiU4-Xung.roa
Signing time: Thu 13 Aug 2026 18:42:27 +0000
ROA not before: Thu 13 Aug 2026 18:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200293
IP address blocks: 77.91.96.0/24 maxlen: 24
77.91.97.0/24 maxlen: 24
77.91.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:6e:ce:77:14:9d:37:22:10:a3:39:5f:65:c7:90:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Aug 13 18:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bf50f5a384872f85185baec0b3162538f97ba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cb:84:d1:25:ab:5a:16:38:32:af:1b:2e:75:
43:fb:ff:9d:f8:01:78:73:fc:a3:ab:a3:bc:49:bb:
a1:ac:56:da:fb:13:68:2d:4d:5b:54:6b:88:78:5c:
da:8f:11:7b:a6:4d:8d:84:41:0d:eb:e7:3d:3d:20:
5d:28:71:52:43:02:0d:ce:6d:aa:8f:bd:6f:b7:de:
e3:9f:8c:6e:a0:cd:a9:06:86:a0:d9:23:b6:42:6c:
fd:67:2b:7e:08:bc:37:b2:26:69:ac:00:97:e3:6f:
27:24:31:7d:98:6a:f8:49:36:22:0d:ac:30:98:e6:
04:1d:bc:ee:b2:bd:9c:1d:ae:52:7d:47:fa:c2:73:
4a:8d:df:3f:0a:c0:c5:c6:96:c8:d6:16:e2:dc:76:
b2:40:58:f7:ad:fa:a0:39:82:24:c8:4f:76:67:da:
0e:a0:ef:41:75:44:3d:88:68:2e:3e:05:c0:f6:45:
7b:3b:59:88:11:fc:5d:a1:06:99:a2:dc:1c:51:c2:
b7:5c:8a:db:8e:a5:aa:99:7f:f1:6e:86:aa:19:a2:
81:75:e7:8b:4b:d8:65:38:e3:ad:20:79:af:90:3a:
1b:ad:47:2f:31:38:ff:e8:4c:59:5f:92:71:ae:6b:
a2:a5:2c:e4:09:45:76:13:f3:ee:7b:01:40:dc:3b:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:0F:5A:38:48:72:F8:51:85:BA:EC:0B:31:62:53:8F:97:BA:78
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/G_UPWjhIcvhRhbrsCzFiU4-Xung.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.96.0/23
77.91.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:85:05:3b:7b:9b:b4:d7:da:97:d0:82:5d:02:5b:7a:ae:4f:
dc:7f:b7:ba:42:23:2f:07:9c:64:35:09:8e:1d:9b:a3:51:a0:
36:26:73:e4:0e:93:b2:25:db:d0:a6:6f:ca:a1:c8:a9:ec:36:
a7:cb:88:79:85:30:48:04:df:a6:04:08:fe:be:28:89:30:2c:
77:2e:98:17:cd:44:24:c8:df:c1:1c:18:68:45:7b:d8:ab:22:
b8:ce:b0:93:6b:91:fe:e6:14:ae:d1:cd:ad:b2:1c:d7:d4:83:
0f:2f:88:4c:4f:2f:c8:56:e8:da:d9:73:67:3b:64:59:fb:b9:
95:1d:c6:59:5a:ba:cb:a2:30:12:a4:b5:94:4a:b6:c8:4a:58:
cb:6c:d5:4e:08:23:95:0c:81:85:58:aa:74:4d:3c:ce:77:a7:
ea:81:48:a2:9f:35:df:39:a6:29:8d:0e:b9:3e:b3:2b:ed:a0:
f4:a2:09:1b:4d:f0:3e:7b:f8:9b:3d:32:17:70:0d:30:11:fe:
2c:bc:76:48:c1:98:fd:b9:dc:01:c7:cc:e7:ea:8a:54:4f:92:
d9:c4:1f:be:cc:b0:aa:4d:81:a3:42:b6:8a:d6:77:c7:6d:64:
9f:1d:04:6c:22:76:19:5c:37:1f:cb:a8:f7:c0:11:96:86:05:
3f:9c:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:43 2026 by rpki-client