Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/_s7vUDean7Bk3XkZfaPzLom7oDA.roa
File: _s7vUDean7Bk3XkZfaPzLom7oDA.roa (raw, json)
Hash identifier: GgtG8eWJVnz8jQ43nDutA9e3I7bTjxYLRfGFuNm9kaE=
Subject key identifier: FE:CE:EF:50:37:9A:9F:B0:64:DD:79:19:7D:A3:F3:2E:89:BB:A0:30
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 01A04E83C0A484E61C49E0F175E342FDBFD2
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/_s7vUDean7Bk3XkZfaPzLom7oDA.roa
Signing time: Sat 29 Aug 2026 17:14:12 +0000
ROA not before: Sat 29 Aug 2026 17:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.247.194.0/24 maxlen: 24
91.132.248.0/22 maxlen: 24
91.197.36.0/22 maxlen: 24
91.238.62.0/24 maxlen: 24
109.196.168.0/22 maxlen: 24
185.5.130.0/24 maxlen: 24
185.16.251.0/24 maxlen: 24
185.94.30.0/24 maxlen: 24
185.249.0.0/22 maxlen: 24
192.144.24.0/22 maxlen: 24
193.39.88.0/22 maxlen: 24
193.228.12.0/22 maxlen: 24
194.32.82.0/24 maxlen: 24
194.76.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:83:c0:a4:84:e6:1c:49:e0:f1:75:e3:42:fd:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Aug 29 17:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feceef50379a9fb064dd79197da3f32e89bba030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:c6:88:55:75:0e:c9:10:fa:e8:e0:63:40:
fa:2f:bd:15:74:5c:fa:41:c0:5a:c1:76:e4:d5:36:
87:5e:af:73:b3:13:99:79:ad:8b:83:4c:b8:8a:df:
aa:ae:ae:c0:74:06:71:31:42:41:3e:36:47:d8:09:
0c:d5:fe:1c:92:df:0d:77:a3:1b:53:32:9d:7f:b2:
a3:bc:77:e2:f6:87:45:ba:b3:8f:dc:97:c1:e2:d9:
6d:d4:86:1a:64:52:cb:11:02:56:ff:b8:f5:09:39:
3e:b5:9d:10:c6:6a:1d:78:cb:ed:1e:ac:f5:e2:99:
f3:f1:d0:a1:d7:79:6b:25:f5:f8:da:c3:3a:e8:7c:
e4:da:ff:fd:a6:e9:c3:cc:5c:db:2e:3e:8b:21:7a:
75:29:c4:bb:be:1e:67:68:1a:8a:94:5e:d8:f1:df:
1e:ca:18:35:4f:d1:d9:80:d0:bc:75:98:6d:77:f5:
16:38:38:f7:b0:af:98:a3:b1:26:a5:2c:86:79:41:
3b:1b:57:c4:02:0c:82:a3:bc:26:88:21:ad:3d:b8:
6a:a5:be:ea:cc:68:ad:2c:fc:91:04:8d:db:56:a6:
fb:42:8a:c2:ca:5c:7b:71:81:f3:b5:4b:1e:aa:d2:
56:d9:58:a3:1f:4e:1c:11:b0:06:49:cf:53:64:d0:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:EF:50:37:9A:9F:B0:64:DD:79:19:7D:A3:F3:2E:89:BB:A0:30
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/_s7vUDean7Bk3XkZfaPzLom7oDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.194.0/24
91.132.248.0/22
91.197.36.0/22
91.238.62.0/24
109.196.168.0/22
185.5.130.0/24
185.16.251.0/24
185.94.30.0/24
185.249.0.0/22
192.144.24.0/22
193.39.88.0/22
193.228.12.0/22
194.32.82.0/24
194.76.32.0/22
Signature Algorithm: sha256WithRSAEncryption
65:71:be:1e:8c:3c:20:88:ca:0a:87:24:ba:19:23:3a:5c:e5:
dc:7c:71:0a:06:fc:f0:ef:c6:d4:a9:bd:a4:04:82:8a:91:b1:
11:79:f8:90:ce:0d:f0:d5:47:87:b3:83:8e:4a:b8:c5:ee:04:
5b:76:b8:df:64:ce:16:6a:35:3e:77:aa:52:dd:07:13:eb:a2:
62:62:74:0d:20:75:41:f1:00:ef:cc:1c:70:28:46:ae:2f:b5:
08:a1:60:db:81:41:1a:eb:d6:6d:fe:55:02:4c:1c:92:22:2e:
fc:a2:aa:dd:d1:c6:89:72:46:23:dd:72:37:55:14:5c:cd:a2:
0f:30:05:69:2a:9f:ff:16:b4:3a:28:c4:56:d2:20:88:b7:81:
a9:5c:dd:91:6c:16:c8:ac:3e:67:e1:2c:a9:c7:6b:65:5e:00:
25:74:6b:90:a1:53:c2:35:3b:c0:14:5d:ed:b5:a9:b5:8c:66:
35:53:a7:20:c0:90:65:39:30:2b:4b:7e:88:12:ba:ae:0f:a9:
f8:20:18:91:94:b3:f5:47:b1:c8:dc:71:bd:8d:cd:ef:8d:06:
ca:33:bc:8c:c4:fc:59:e9:7a:39:7d:87:8c:e7:6f:e6:2f:3a:
f1:e3:58:97:02:ae:c7:1a:7c:34:47:7b:dc:57:45:21:3b:62:
3e:5f:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:53 2026 by rpki-client