Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/97B4Sc_XubtL_lW7OfZysQqsOs4.roa
File: 97B4Sc_XubtL_lW7OfZysQqsOs4.roa (raw, json)
Hash identifier: s6SnzQICC+87j3qQ2YxLoHSbPtUJDNl+2RyFPIbB7qI=
Subject key identifier: F7:B0:78:49:CF:D7:B9:BB:4B:FE:55:BB:39:F6:72:B1:0A:AC:3A:CE
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019FDCE2607B566F2B3B033B7767DF1420B9
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/97B4Sc_XubtL_lW7OfZysQqsOs4.roa
Signing time: Fri 07 Aug 2026 15:40:51 +0000
ROA not before: Fri 07 Aug 2026 15:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213929
IP address blocks: 77.87.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:e2:60:7b:56:6f:2b:3b:03:3b:77:67:df:14:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Aug 7 15:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7b07849cfd7b9bb4bfe55bb39f672b10aac3ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:8b:b3:5f:35:31:04:2b:28:ad:ac:a9:4f:
af:bd:a1:36:a1:a4:21:94:12:08:ce:4c:45:f6:27:
2d:dc:78:7c:60:51:98:6f:f2:24:0c:bb:ce:fb:b5:
5e:99:cf:e4:2b:55:d5:ec:54:65:c1:6d:85:e9:f3:
ff:a1:3c:7e:d9:3c:f2:de:d1:48:85:a2:bf:28:d5:
06:1f:8f:85:eb:12:fd:d6:56:51:9f:ba:fd:7e:e2:
b2:38:96:bd:47:8e:ef:3c:28:a4:ad:47:94:45:db:
ac:e0:cb:2e:4c:1f:8c:68:45:d8:f5:45:60:78:8b:
8e:64:ba:75:8e:3c:b0:9d:7b:a8:e2:11:f9:f8:03:
c6:cd:ed:23:3c:5f:01:aa:0e:46:01:5e:c4:ac:6d:
27:ec:b8:74:80:e9:91:3f:62:20:c2:c8:49:31:8a:
71:15:5b:5b:7b:39:1e:25:c1:82:ad:e3:5a:b2:3c:
7f:61:eb:6c:d5:9f:16:95:fc:c3:82:19:6f:3d:27:
ab:58:7d:f8:2b:64:c1:32:2f:2a:d7:97:0f:5e:b2:
ef:cb:bf:c0:6b:3a:f6:39:74:5a:a1:fc:04:79:3d:
5c:aa:0a:9c:35:6e:6d:2f:c8:99:84:c9:99:15:ce:
72:84:04:d5:8d:91:81:3d:04:47:ea:2a:7d:08:a3:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:78:49:CF:D7:B9:BB:4B:FE:55:BB:39:F6:72:B1:0A:AC:3A:CE
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/97B4Sc_XubtL_lW7OfZysQqsOs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.248.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:81:88:1b:25:e6:77:51:ed:9d:45:98:45:bc:95:96:49:ff:
ac:7e:09:55:af:69:12:3a:a4:43:b5:47:7e:cb:36:8e:99:30:
19:85:c9:46:8f:88:89:f0:c4:11:97:50:20:27:c6:8d:8f:4e:
09:29:ff:3f:85:7c:08:d2:c0:da:c4:b6:92:aa:15:45:54:e6:
47:a0:98:0a:36:47:3c:58:77:bf:01:f8:60:c7:91:cf:b2:6c:
b6:3b:a2:b1:ef:0a:72:13:56:c2:bd:dd:cf:db:51:d4:91:fe:
af:58:77:84:94:52:18:3c:7d:83:8a:c5:77:e5:61:3b:04:d6:
30:67:5e:de:b8:78:d1:94:8b:43:71:65:97:58:1b:4c:11:20:
7e:48:89:41:6c:3f:cf:a5:62:0d:fe:86:08:95:dd:41:2f:03:
d0:b2:92:77:0b:15:4f:55:92:f2:d8:b2:b7:51:29:58:96:18:
b4:7b:73:e7:20:5a:ee:b2:19:2e:7f:fe:82:ab:f7:91:53:ab:
4e:f4:ab:18:9f:2a:96:bc:77:6f:e4:56:fe:12:25:26:6a:88:
d1:c2:42:5d:5f:a1:a1:a6:b0:d7:c4:62:cc:2f:35:81:75:9d:
1b:62:ef:87:06:9c:7d:08:c7:81:eb:13:d4:c6:4f:7d:c9:26:
7c:d4:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:23 2026 by rpki-client