Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/_Bb4drutpCuAnsJxdSvtqYZQZAA.roa
File: _Bb4drutpCuAnsJxdSvtqYZQZAA.roa (raw, json)
Hash identifier: sTQIXtqfUF9PeL6dJIA0IzD8wYEha9TfWmYMF4xxcUk=
Subject key identifier: FC:16:F8:76:BB:AD:A4:2B:80:9E:C2:71:75:2B:ED:A9:86:50:64:00
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019F4AA7448370A55223927A8142CD9E3938
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/_Bb4drutpCuAnsJxdSvtqYZQZAA.roa
Signing time: Fri 10 Jul 2026 06:11:43 +0000
ROA not before: Fri 10 Jul 2026 06:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210537
IP address blocks: 80.77.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:a7:44:83:70:a5:52:23:92:7a:81:42:cd:9e:39:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jul 10 06:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc16f876bbada42b809ec271752beda986506400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:99:7b:09:71:17:e3:2a:d5:13:ff:2b:73:
77:e5:82:f2:d8:89:9d:98:d1:b3:db:e8:76:10:99:
77:a9:a6:d7:dd:d4:c1:9b:31:1c:b2:a4:b6:ea:27:
3d:7f:0e:16:97:31:f8:35:c2:63:8c:2b:ce:56:12:
4a:f1:df:73:9b:f7:66:35:87:14:06:d7:98:10:0d:
e2:8a:ee:a2:4e:44:59:34:3f:8a:fa:22:1b:ab:4e:
99:75:7e:86:17:49:d0:fa:e4:1d:e5:e0:bf:36:48:
da:58:35:1a:a6:84:47:99:89:38:ae:2c:37:07:16:
90:52:5a:10:49:e2:12:04:4e:c1:61:69:b0:7c:52:
dc:5c:95:37:88:0c:2f:7d:3c:29:2e:32:ac:5d:27:
a9:e7:79:14:ec:33:31:9d:94:7c:b9:ab:5e:aa:5b:
27:9b:9d:17:71:6d:15:da:bf:a2:63:2e:cb:c8:1c:
4e:27:cc:c3:fa:f2:f0:77:5e:69:65:66:ba:df:ff:
d4:a9:2e:51:0b:77:83:39:e9:aa:0e:82:53:98:42:
6c:85:b8:57:bd:1b:4f:fc:d4:52:95:d4:93:00:a2:
bc:8d:48:5d:b6:0e:6b:b2:b8:80:c8:a5:ab:11:8a:
3a:0f:91:0c:91:f7:47:0e:5b:74:0b:ee:3f:d8:f2:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:F8:76:BB:AD:A4:2B:80:9E:C2:71:75:2B:ED:A9:86:50:64:00
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/_Bb4drutpCuAnsJxdSvtqYZQZAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.18.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2d:4e:87:b9:7b:6e:fa:f0:dc:b4:d5:f0:60:a1:91:32:e6:
d7:89:73:9c:48:b7:50:b8:e0:c5:ab:6b:a8:97:13:b9:2d:9f:
f9:eb:dd:0f:cf:16:74:51:c8:c3:31:4f:69:48:00:c0:63:ec:
14:ce:36:af:65:55:5c:b8:90:74:cf:03:54:77:d5:03:6f:3f:
d5:38:41:2d:07:b9:e4:77:bf:de:de:33:84:dc:ce:9c:5a:f1:
21:f0:2a:eb:5c:c7:be:57:5c:98:9d:ed:34:14:4a:5a:4c:18:
98:14:fe:25:0e:32:25:54:d2:7e:0d:a6:e6:fd:19:db:7e:f8:
d2:47:0f:31:75:ba:8e:4c:4e:d9:15:fc:3b:72:76:09:a8:af:
1d:8d:07:75:f2:23:56:9a:65:09:27:4c:81:64:05:87:09:4b:
09:68:2d:8d:8e:58:0c:ea:45:1f:7d:f7:63:3c:8e:b0:d3:61:
86:4a:da:a3:93:68:cf:62:49:77:ec:0a:8e:08:22:20:2f:14:
db:9c:59:9f:28:a6:17:7b:a1:bf:68:5f:0e:d8:83:52:14:e8:
70:37:bf:5c:71:25:a9:69:da:6a:33:cd:6d:06:04:83:21:02:
8d:6a:ee:02:8e:2d:7c:e4:78:3d:06:7f:55:80:4a:de:c7:7c:
15:3e:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client