Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/77Yu4ZkKaPznuOKi8y7bp9vM3Nc.roa
File: 77Yu4ZkKaPznuOKi8y7bp9vM3Nc.roa (raw, json)
Hash identifier: MYuHr/ytBfhTDbqr7za9ExjlF7JJS2yYoVjndj2ysU0=
Subject key identifier: EF:B6:2E:E1:99:0A:68:FC:E7:B8:E2:A2:F3:2E:DB:A7:DB:CC:DC:D7
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F00C8060DBA011AD4FF9F242C9531057B
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/77Yu4ZkKaPznuOKi8y7bp9vM3Nc.roa
Signing time: Thu 25 Jun 2026 21:55:36 +0000
ROA not before: Thu 25 Jun 2026 21:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 201.24.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:c8:06:0d:ba:01:1a:d4:ff:9f:24:2c:95:31:05:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jun 25 21:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efb62ee1990a68fce7b8e2a2f32edba7dbccdcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:3e:87:3a:e7:56:e9:84:c4:2d:75:bc:85:
bf:b7:ac:44:98:ee:a0:7e:70:c0:82:36:3a:e9:cf:
8c:00:29:b2:20:44:cb:ab:6e:15:3f:79:de:5b:80:
c8:8c:01:58:47:38:9d:e5:ee:0c:c4:44:cd:57:e9:
c7:19:07:0c:8a:99:d2:a1:6a:0e:98:bf:5a:5a:67:
db:b4:a6:b1:df:15:b8:9f:c8:9b:a9:fe:b9:21:da:
86:0f:39:8d:f0:43:ce:40:d3:41:10:51:c9:fa:a3:
ad:d2:24:08:5b:b8:c7:3a:6e:c0:78:a2:07:aa:25:
f3:3e:90:77:9f:a2:52:f9:2a:b5:6e:b9:a6:59:8d:
44:37:b4:c4:eb:86:d2:58:44:0e:d0:fe:a4:6a:58:
f9:c5:f5:02:a4:2b:c7:01:1b:e8:a0:21:c0:e4:f4:
01:90:d9:8e:7e:ea:5a:d5:00:5e:31:ec:87:d7:9b:
8a:c2:f0:c7:8f:67:be:ba:93:a8:d7:c8:ce:bb:dc:
be:b3:09:9c:6d:26:7f:06:c4:34:51:86:9f:50:0f:
a9:10:6e:6b:ad:7b:fe:cb:18:3e:f8:04:13:e3:f9:
a4:4e:26:3a:77:47:06:ec:ae:ad:13:61:7c:fe:e7:
dd:ee:09:90:42:7a:17:c9:66:d1:51:ca:7a:3c:78:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:2E:E1:99:0A:68:FC:E7:B8:E2:A2:F3:2E:DB:A7:DB:CC:DC:D7
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/77Yu4ZkKaPznuOKi8y7bp9vM3Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2a:9f:e7:07:54:04:31:86:ab:f8:09:8e:02:0e:b8:9e:21:
08:c3:69:89:e9:d2:3b:fd:28:5e:30:b9:ff:d9:34:9c:7d:68:
84:9c:20:5e:1d:f7:ee:ba:85:3c:4b:ae:41:39:96:2a:6f:fc:
5f:35:61:1b:d0:e3:fb:a2:60:b3:de:05:b3:d9:3a:95:8e:22:
6b:9a:3d:f5:5c:74:dc:60:48:55:59:ab:90:7b:0c:87:ca:7e:
4e:c2:c4:4b:6a:80:ca:27:71:17:c3:94:da:83:c6:97:92:ae:
61:bf:05:88:92:73:8f:6a:ba:ef:7d:37:44:a3:18:af:c0:b5:
c3:f0:12:32:bd:e2:35:ca:ae:77:3a:45:9b:21:61:39:6d:d4:
f7:f0:9f:fb:0f:c8:b0:61:3a:98:bc:45:a7:02:e6:18:ba:8a:
5d:5a:b6:c0:60:04:58:ed:5c:6c:1b:21:96:a5:1f:03:e3:2c:
9d:76:d4:cf:25:d1:08:36:42:87:cf:3e:f3:09:ce:82:c5:1b:
d2:1f:34:5e:d5:bc:58:4d:92:0a:e7:e7:f0:3c:77:e5:b2:d0:
37:72:b5:5a:01:48:4e:be:65:ca:b8:b1:38:5e:33:85:ce:d1:
c0:e9:0c:30:83:e5:ba:39:d5:47:42:08:ef:57:fa:40:d4:e4:
7a:f9:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 04:10:50 2026 by rpki-client