Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EckOJuBVpCvJKdgEOjcDhvM66kk.roa
File: EckOJuBVpCvJKdgEOjcDhvM66kk.roa (raw, json)
Hash identifier: zQbfaPkYt5tUGx3q17+d3Wv2lWTr4cQcwMRVyrJff9k=
Subject key identifier: 11:C9:0E:26:E0:55:A4:2B:C9:29:D8:04:3A:37:03:86:F3:3A:EA:49
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A0E8CB551F0D03460F878650E61F438D77
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EckOJuBVpCvJKdgEOjcDhvM66kk.roa
Signing time: Mon 28 Sep 2026 16:13:54 +0000
ROA not before: Mon 28 Sep 2026 16:13:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 77.242.149.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:cb:55:1f:0d:03:46:0f:87:86:50:e6:1f:43:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 28 16:13:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c90e26e055a42bc929d8043a370386f33aea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:99:90:e2:eb:d0:c7:78:67:fb:e4:4c:75:
fd:0d:f6:b9:02:22:55:d8:79:ad:21:0f:44:42:1b:
5d:df:da:1b:b8:c4:ce:07:1f:1d:26:df:e8:6d:0f:
72:20:64:fd:5d:f8:2a:91:f4:2e:db:76:ed:2c:9b:
39:7b:bf:d5:63:cd:b3:55:25:e2:63:1c:70:f9:90:
51:74:ee:5f:9c:f2:39:89:56:bd:6a:46:de:5e:20:
dc:e7:fb:38:72:9e:2f:3d:7e:58:06:f1:d4:f3:2a:
8f:f4:e6:b3:f2:81:c3:d7:fd:4d:09:14:60:14:32:
c6:c4:11:d4:37:75:9b:23:f3:f0:a1:54:65:b5:6c:
2c:6f:1c:76:ff:9a:b2:04:55:59:c8:bd:7a:2a:78:
04:d5:66:9a:d4:1e:b2:0a:0b:86:50:aa:01:bf:93:
20:23:42:9e:95:a4:38:ae:af:55:b3:62:2c:99:ad:
b0:4a:22:b9:0d:04:2a:fe:8e:0b:07:9c:89:c7:59:
a8:8d:df:94:44:84:48:89:64:bd:7b:39:f3:d1:80:
b7:62:83:9b:3c:9b:d5:ac:6c:ca:7d:0c:29:5f:d1:
a3:6f:6a:a6:07:cd:78:7a:a5:58:d1:e5:43:a5:3d:
26:7a:83:82:69:66:a8:42:86:eb:2c:78:ad:98:ba:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C9:0E:26:E0:55:A4:2B:C9:29:D8:04:3A:37:03:86:F3:3A:EA:49
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EckOJuBVpCvJKdgEOjcDhvM66kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.149.0/24
77.242.159.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3d:09:19:72:00:1c:1c:1c:ab:d1:a1:dd:02:ae:fa:d2:43:
db:0d:01:d7:7d:35:c9:1f:ba:26:c2:f9:92:f1:11:bb:00:61:
9a:73:5d:fd:54:f4:49:31:1d:45:d2:b6:84:f3:d8:ed:32:57:
c3:a5:dd:f6:8a:a9:38:80:52:8f:12:c8:2c:e7:6d:0d:0c:63:
1c:cc:37:13:aa:18:f2:33:ab:0c:9c:6c:3c:a8:6d:29:e5:95:
2b:8a:50:24:13:37:c8:cf:72:09:ad:8b:44:b4:b5:bb:81:32:
19:00:03:81:48:1b:6c:6a:58:68:d3:55:03:a9:bc:7c:bc:75:
2d:8f:54:14:ad:45:ed:32:5c:94:7d:1b:8c:1a:c4:05:13:ac:
05:98:a4:35:a6:9a:93:16:da:8d:89:35:79:14:74:01:24:16:
b4:84:0d:e3:5d:fc:a8:00:3d:8b:5b:01:4c:94:5e:8e:b5:aa:
b9:2b:da:4a:c5:14:18:94:0f:f4:43:98:1e:59:c1:dd:ac:02:
75:66:93:1c:a3:e5:d2:79:ce:a8:0a:a5:9b:2e:2b:40:34:da:
60:bf:54:a6:99:39:ee:a1:bc:10:a8:63:7f:47:78:79:8c:df:
5b:7e:e2:f0:8b:bb:41:f0:bf:27:74:2c:93:06:8a:d2:3d:8e:
03:5a:6f:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDoy1UfDQNGD4eGUOYfQ413MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwOTI4MTYxMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM5MGUyNmUwNTVhNDJiYzkyOWQ4MDQzYTM3MDM4NmYzM2FlYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uGZkOLr0Md4Z/vkTHX9Dfa5AiJV
2HmtIQ9EQhtd39obuMTOBx8dJt/obQ9yIGT9XfgqkfQu23btLJs5e7/VY82zVSXi
Yxxw+ZBRdO5fnPI5iVa9akbeXiDc5/s4cp4vPX5YBvHU8yqP9Oaz8oHD1/1NCRRg
FDLGxBHUN3WbI/PwoVRltWwsbxx2/5qyBFVZyL16KngE1Waa1B6yCguGUKoBv5Mg
I0KelaQ4rq9Vs2Isma2wSiK5DQQq/o4LB5yJx1mojd+URIRIiWS9eznz0YC3YoOb
PJvVrGzKfQwpX9Gjb2qmB814eqVY0eVDpT0meoOCaWaoQobrLHitmLrDewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBHJDibgVaQrySnYBDo3A4bzOupJMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvRWNrT0p1QlZwQ3ZKS2RnRU9qY0Rodk02NmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfKVAwQA
TfKfMA0GCSqGSIb3DQEBCwUAA4IBAQB0PQkZcgAcHByr0aHdAq760kPbDQHXfTXJ
H7omwvmS8RG7AGGac139VPRJMR1F0raE89jtMlfDpd32iqk4gFKPEsgs520NDGMc
zDcTqhjyM6sMnGw8qG0p5ZUrilAkEzfIz3IJrYtEtLW7gTIZAAOBSBtsalho01UD
qbx8vHUtj1QUrUXtMlyUfRuMGsQFE6wFmKQ1ppqTFtqNiTV5FHQBJBa0hA3jXfyo
AD2LWwFMlF6Otaq5K9pKxRQYlA/0Q5geWcHdrAJ1ZpMco+XSec6oCqWbLitANNpg
v1SmmTnuobwQqGN/R3h5jN9bfuLwi7tB8L8ndCyTBorSPY4DWm/m
-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:27 2026 by rpki-client