Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/y2choy79AZX4jAgmtYkBA_uHqeg.roa
File: y2choy79AZX4jAgmtYkBA_uHqeg.roa (raw, json)
Hash identifier: ORFflmvNDJK0PMxyG6esrzF+CcoHg2AfCrMx6arBAbw=
Subject key identifier: CB:67:21:A3:2E:FD:01:95:F8:8C:08:26:B5:89:01:03:FB:87:A9:E8
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019E73F0EA429D2AE57EFE410B03849714B3
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/y2choy79AZX4jAgmtYkBA_uHqeg.roa
Signing time: Fri 29 May 2026 13:33:48 +0000
ROA not before: Fri 29 May 2026 13:33:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29582
IP address blocks: 77.76.3.0/24 maxlen: 24
78.128.12.0/22 maxlen: 24
78.128.16.0/20 maxlen: 24
78.128.52.0/22 maxlen: 24
78.128.56.0/22 maxlen: 24
78.128.84.0/23 maxlen: 24
78.142.22.0/23 maxlen: 24
79.124.80.0/23 maxlen: 24
91.92.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:f0:ea:42:9d:2a:e5:7e:fe:41:0b:03:84:97:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 29 13:33:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb6721a32efd0195f88c0826b5890103fb87a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:db:f6:05:cf:0c:6e:3e:4a:a2:45:23:18:
ee:18:da:90:5b:d8:a9:b7:a6:7a:85:52:73:0d:b9:
a8:f4:f8:d5:95:9d:9f:82:9d:2d:08:eb:47:2e:3f:
7b:8d:e7:d0:ac:33:8f:d1:8a:28:7f:92:9e:0a:96:
29:79:e8:24:ee:a2:32:59:58:3c:98:99:d8:7a:2e:
ab:5d:2f:00:16:a6:f2:d0:70:4c:be:a4:c3:29:e5:
ef:de:4a:e5:80:3d:76:07:3c:c2:36:56:18:3c:08:
11:93:8f:b4:94:9b:4b:84:40:90:cf:d9:2d:7d:bc:
27:c7:58:fa:cf:18:00:d9:46:31:8a:27:40:87:e9:
f8:7a:4c:5d:7b:5f:ed:ef:35:fb:54:d1:08:6e:2c:
63:8d:82:ab:36:4e:79:b0:b6:7f:bd:fd:03:81:34:
f5:45:a7:29:90:31:6b:e7:3f:0c:35:54:af:fa:42:
6c:83:85:4b:c3:29:04:87:d1:85:54:71:33:7e:8b:
a3:e1:7e:6e:c3:06:62:d8:1d:bb:84:16:31:0a:15:
c9:88:e4:39:3d:0f:dc:2a:e7:4c:49:01:cb:f2:ce:
62:0f:ac:7f:0c:d8:5d:5d:9b:f6:88:02:11:80:5f:
f6:de:62:bd:82:e1:e5:e1:ff:60:94:64:ad:e4:8e:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:67:21:A3:2E:FD:01:95:F8:8C:08:26:B5:89:01:03:FB:87:A9:E8
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/y2choy79AZX4jAgmtYkBA_uHqeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.3.0/24
78.128.12.0-78.128.31.255
78.128.52.0-78.128.59.255
78.128.84.0/23
78.142.22.0/23
79.124.80.0/23
91.92.59.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a6:8e:f7:df:49:25:93:23:50:86:18:ee:f6:1c:a3:cb:a3:
24:cb:de:8b:c7:2c:29:cb:18:b5:e1:9f:8f:4e:72:ec:5a:04:
73:3c:b5:b8:1d:07:61:49:eb:33:e9:f9:9b:63:b7:74:d2:67:
7f:43:07:5b:ca:a3:2b:6e:ad:00:c6:ea:92:ce:15:80:b0:b6:
b4:6d:10:d3:91:07:ab:8f:c2:28:3c:30:ef:d5:5b:70:a0:5c:
5f:24:08:10:35:bf:d4:40:33:f3:d5:a4:eb:c2:30:91:6a:62:
51:10:7a:b2:9c:b5:52:7c:68:8d:0b:4c:77:2a:99:34:49:47:
f1:99:3b:cd:66:7c:07:b2:b2:5d:c1:43:49:cb:6d:bb:b1:b2:
07:3d:5e:56:c9:d6:5f:37:1e:73:81:5e:9f:83:f7:62:0b:96:
01:60:92:21:f4:3d:89:7b:c8:99:a9:cd:58:20:f8:ea:a6:a8:
c3:de:55:35:35:bc:d3:7f:0a:ea:5e:4b:e4:d8:3a:06:2c:e7:
1b:ff:10:e0:b9:be:23:6d:36:9b:82:0b:68:18:54:cb:8c:25:
38:be:64:6f:20:cc:0e:7c:c2:c6:6a:c2:25:7c:41:39:56:d8:
3d:c2:fb:e7:18:c5:e4:7c:aa:80:ff:88:4b:5c:54:96:46:30:
32:99:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:05 2026 by rpki-client