Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/0thyuBS-7i3aOK5iDtW2SD_9l5g.roa
File: 0thyuBS-7i3aOK5iDtW2SD_9l5g.roa (raw, json)
Hash identifier: QgjGWqiX1+npCmoWmYzY48kBirMLlhP0MOtvPBXoWXc=
Subject key identifier: D2:D8:72:B8:14:BE:EE:2D:DA:38:AE:62:0E:D5:B6:48:3F:FD:97:98
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 01A10177B453E0F302F303A66BCAE35B0193
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/0thyuBS-7i3aOK5iDtW2SD_9l5g.roa
Signing time: Sat 03 Oct 2026 11:13:04 +0000
ROA not before: Sat 03 Oct 2026 11:13:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214431
IP address blocks: 195.200.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:77:b4:53:e0:f3:02:f3:03:a6:6b:ca:e3:5b:01:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Oct 3 11:13:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2d872b814beee2dda38ae620ed5b6483ffd9798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:5d:f7:76:70:8d:c8:ba:26:07:c6:8b:90:
99:43:fd:29:99:2f:69:b1:bc:43:87:d4:43:d6:0b:
58:d3:a4:99:3f:e4:2b:c2:8a:3d:88:4f:0f:5c:94:
81:a1:58:75:4f:92:4c:d7:7d:0d:5c:ef:c5:68:54:
b9:a3:1a:07:94:95:ef:c1:92:36:c3:6c:7f:c3:13:
3e:54:15:f1:60:e4:52:b9:5b:40:9f:56:01:17:77:
c3:f3:dc:84:62:fa:be:4d:8f:43:f0:2a:91:2f:4c:
6c:e3:01:ff:7e:4c:18:bf:1b:8d:d2:5e:9f:09:e7:
59:e6:7f:b1:d8:0a:05:06:db:2a:d5:17:91:b1:43:
c1:dc:39:60:1b:d4:6a:21:10:64:cb:60:64:62:55:
51:ba:de:9f:b5:6d:03:f8:f6:d9:bf:23:73:a3:6b:
78:2c:b3:7a:39:d7:62:bf:b6:7b:0e:95:a2:c7:b1:
99:4a:2c:db:7f:b6:67:b6:58:61:5d:01:fa:a1:7c:
f6:ee:b5:ec:16:3c:cd:5d:ba:56:90:ac:1e:c3:2d:
da:ee:44:3d:5b:c8:f1:42:d0:7a:8a:21:6f:63:62:
d8:92:7c:cc:eb:9c:e3:bc:3d:ba:87:44:06:55:e2:
1d:0d:b1:a6:50:6e:5b:39:55:1a:d0:25:18:9b:3a:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:72:B8:14:BE:EE:2D:DA:38:AE:62:0E:D5:B6:48:3F:FD:97:98
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/0thyuBS-7i3aOK5iDtW2SD_9l5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.77.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f3:29:c3:5b:1e:98:16:ad:4d:17:dd:b1:3b:16:96:b9:74:
2b:9c:22:b7:13:c6:ce:3f:45:bf:3c:2b:74:bd:0a:f9:d5:04:
8e:72:e8:a2:87:41:fe:fa:5b:73:e6:87:de:c4:c8:27:9c:ce:
b9:12:9f:9e:e3:84:48:1d:18:ee:cd:a6:4e:1c:3c:e8:66:0a:
10:a4:c0:0f:74:8a:ca:cc:a4:ea:e7:b0:91:4b:c8:9b:4f:80:
3e:b8:a9:14:9b:30:c3:c5:49:8e:12:cf:59:a4:5c:f9:11:e9:
d7:92:9d:f5:6f:94:ad:08:94:0e:20:42:55:84:3f:e0:1a:b4:
78:3b:08:14:7c:c3:95:78:e0:b2:d0:21:f1:52:e1:d6:b6:b9:
f0:bc:ff:31:bb:82:85:2f:94:f0:11:07:9d:7a:46:10:19:bb:
42:8c:a0:80:95:43:e2:16:36:94:a4:c8:52:1d:2e:ca:87:f7:
d5:1a:57:49:9d:05:57:dd:b4:d7:cc:49:60:b3:78:92:3a:0b:
0d:20:52:ff:8d:8e:d4:46:ca:66:68:3a:e5:02:93:13:77:bc:
ec:cf:f8:f1:f5:19:79:b2:d5:30:62:fc:3f:cb:9d:3a:d3:dd:
4b:a5:6d:f1:ca:74:a6:7e:27:8e:55:17:7a:4c:88:70:7e:5c:
62:68:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:05 2026 by rpki-client