Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pF4zgplELajs67eQG1eZNEahj4s.roa
File: pF4zgplELajs67eQG1eZNEahj4s.roa (raw, json)
Hash identifier: vipr8Kc+AbgKNfNBkHzpZ454W/JcjtWZLe121JAmn6Y=
Subject key identifier: A4:5E:33:82:99:44:2D:A8:EC:EB:B7:90:1B:57:99:34:46:A1:8F:8B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019EF3644754D662E443AF5EAEC0368333DB
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pF4zgplELajs67eQG1eZNEahj4s.roa
Signing time: Tue 23 Jun 2026 07:31:35 +0000
ROA not before: Tue 23 Jun 2026 07:31:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.3.0/24 maxlen: 24
78.128.41.0/24 maxlen: 24
78.128.86.0/23 maxlen: 23
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.31.0/24 maxlen: 24
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:64:47:54:d6:62:e4:43:af:5e:ae:c0:36:83:33:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 23 07:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a45e338299442da8ecebb7901b57993446a18f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:37:d5:78:b9:2e:7e:7e:64:88:eb:ac:ba:
e1:a0:06:2c:2e:3b:07:b5:ef:74:3a:dc:cf:dc:9e:
01:2c:64:22:4c:18:f6:2e:70:fd:12:1e:1e:45:a7:
98:b9:b8:da:d2:11:e9:1e:5e:05:89:c9:7b:42:47:
73:26:fe:0b:3e:d5:56:0e:19:8a:7d:b7:7d:38:67:
a0:c1:9a:3e:66:e3:c6:2c:e4:89:be:3b:1b:4c:3d:
24:7e:4f:59:a3:72:04:92:de:0b:aa:a0:22:63:20:
13:07:e1:c6:8a:04:36:e3:b6:c8:2f:13:f9:dc:4e:
66:b9:14:de:cd:7b:e2:fe:61:66:87:4b:dd:fb:41:
67:56:47:c2:95:e0:da:5f:7a:10:b8:bb:8f:94:81:
c5:6e:69:db:9d:ef:56:3e:75:df:4e:72:2e:9b:48:
3b:fc:7c:7b:87:a2:53:45:e1:c7:fd:5d:14:59:84:
4a:37:af:11:54:10:29:d2:1b:71:f4:b3:0d:8e:7d:
9e:3b:3f:85:57:41:33:cd:ee:bd:f6:2b:94:6e:dd:
ac:a1:9b:30:e8:9f:a0:c4:07:fb:26:ac:14:ed:4a:
c8:32:e1:96:1b:e5:85:d0:4a:c2:1a:a1:a4:c3:7d:
4e:46:09:2b:a9:d5:b9:2a:83:f3:fc:f3:ce:91:e4:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:33:82:99:44:2D:A8:EC:EB:B7:90:1B:57:99:34:46:A1:8F:8B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pF4zgplELajs67eQG1eZNEahj4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.3.0/24
78.128.41.0/24
78.128.86.0-78.128.91.255
78.128.97.0/24
78.128.100.0/22
78.128.116.0/23
78.142.31.0/24
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.183.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
89:a0:25:d2:d0:0b:5e:65:3f:15:d0:e9:f6:da:a3:30:79:86:
39:31:71:1f:ef:b2:91:b0:4e:9f:7e:05:cd:2c:2b:50:38:13:
7e:00:66:06:f9:dc:e5:7d:34:95:2e:bc:b9:f1:c2:32:59:21:
06:eb:a4:c0:d4:2a:13:94:30:6d:01:65:73:96:4c:20:4a:36:
a5:58:34:02:07:eb:99:d6:a4:e5:cf:c6:ec:b0:2e:6f:69:7d:
b5:88:60:cd:2f:3b:5d:44:5d:3d:b4:9c:1d:5d:13:5c:4a:14:
56:ba:cb:9d:8b:46:49:ca:a0:d7:f8:a8:5a:c3:11:62:14:e9:
4c:42:09:74:e5:6e:7a:3b:01:15:c2:c0:2e:bd:d9:67:4e:f0:
42:d2:cb:c6:3b:26:00:63:42:eb:b5:75:02:1f:15:e3:43:cd:
75:2a:bd:07:25:6a:f8:ae:ad:6d:2e:ee:74:74:58:9a:f6:80:
a2:eb:eb:60:4b:36:8e:99:8c:b4:75:56:da:bc:25:f3:0f:cd:
f2:ee:75:d7:ae:5f:59:cf:39:b7:44:e8:0f:97:41:e1:7c:51:
89:00:68:75:63:d8:2c:c4:83:07:59:12:93:2a:07:24:da:e3:
64:12:b0:5a:be:5b:eb:c0:35:ca:52:47:1b:ba:8c:eb:81:ba:
c5:1b:2e:e1
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ7zZEdU1mLkQ69ersA2gzPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjYwNjIzMDczMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDVlMzM4Mjk5NDQyZGE4ZWNlYmI3OTAxYjU3OTkzNDQ2YTE4ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbs31Xi5Ln5+ZIjrrLrhoAYsLjsH
te90OtzP3J4BLGQiTBj2LnD9Eh4eRaeYubja0hHpHl4Ficl7QkdzJv4LPtVWDhmK
fbd9OGegwZo+ZuPGLOSJvjsbTD0kfk9Zo3IEkt4LqqAiYyATB+HGigQ247bILxP5
3E5muRTezXvi/mFmh0vd+0FnVkfCleDaX3oQuLuPlIHFbmnbne9WPnXfTnIum0g7
/Hx7h6JTReHH/V0UWYRKN68RVBAp0htx9LMNjn2eOz+FV0Ezze699iuUbt2soZsw
6J+gxAf7JqwU7UrIMuGWG+WF0ErCGqGkw31ORgkrqdW5KoPz/PPOkeTECwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFKReM4KZRC2o7Ou3kBtXmTRGoY+LMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvcEY0emdwbEVMYWpzNjdlUUcxZVpORWFoajRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAk1M
BAMEAE6AAwMEAE6AKTAMAwQBToBWAwQCToBYAwQAToBhAwQCToBkAwQBToB0AwQA
To4fAwQBU96+AwQEVMngMAwDBAFblKIDBAFblKQwDAMEAFuUqQMEA1uUsAMEAIK5
4wMEAIK56gMEALlReAMEAsEY8AMEAcHIDjANBgkqhkiG9w0BAQsFAAOCAQEAiaAl
0tALXmU/FdDp9tqjMHmGOTFxH++ykbBOn34FzSwrUDgTfgBmBvnc5X00lS68ufHC
MlkhBuukwNQqE5QwbQFlc5ZMIEo2pVg0Agfrmdak5c/G7LAub2l9tYhgzS87XURd
PbScHV0TXEoUVrrLnYtGScqg1/ioWsMRYhTpTEIJdOVuejsBFcLALr3ZZ07wQtLL
xjsmAGNC67V1Ah8V40PNdSq9ByVq+K6tbS7udHRYmvaAouvrYEs2jpmMtHVW2rwl
8w/N8u51165fWc85t0ToD5dB4XxRiQBodWPYLMSDB1kSkyoHJNrjZBKwWr5b68A1
ylJHG7qM64G6xRsu4Q==
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:15 2026 by rpki-client