Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa
File: 5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa (raw, json)
Hash identifier: kCO6losb3l4e0pwUvR/y3U7+rbUeZzOuEE/W82Lxfuk=
Subject key identifier: E7:FD:9F:D8:81:BA:15:FF:D9:F0:FA:69:D5:46:06:41:D7:1B:A5:DF
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019FF0BB8EBCF004483099DF6C0329C4679D
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa
Signing time: Tue 11 Aug 2026 12:10:51 +0000
ROA not before: Tue 11 Aug 2026 12:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57268
IP address blocks: 77.233.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:bb:8e:bc:f0:04:48:30:99:df:6c:03:29:c4:67:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Aug 11 12:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7fd9fd881ba15ffd9f0fa69d5460641d71ba5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:a7:9c:75:86:d5:09:0d:ca:b9:c7:20:d0:
2c:e9:b7:24:23:e0:68:cd:b3:6d:9c:e9:89:b9:76:
d3:a2:d3:8e:8b:bb:f1:a1:72:68:d8:18:e3:ee:3c:
57:54:90:f4:90:9c:6b:0a:24:93:a8:88:8f:bb:f7:
39:a1:41:f2:b4:c8:ae:fa:6c:76:b0:e0:f2:95:3f:
d1:2a:c8:e8:66:33:84:4b:37:bb:c6:97:54:3d:3b:
3c:b2:22:07:47:38:3b:77:32:ba:9a:19:d3:c1:2a:
c5:71:23:e7:16:28:1f:dc:3c:16:5e:0d:00:a1:5d:
94:09:24:f4:09:ea:38:4f:79:73:01:91:89:c1:55:
d3:25:40:a7:d8:5e:06:42:6f:20:95:43:45:3e:6e:
a2:12:9c:6a:09:d2:cd:0f:c5:5b:64:e5:67:52:7c:
10:1e:37:68:44:c7:6e:d4:32:c0:12:3c:26:c9:8d:
d6:fe:26:ad:c5:84:b8:36:d3:13:f6:38:74:80:44:
e9:e0:c0:08:6c:bd:74:40:5b:25:28:74:fe:4d:32:
b9:9e:cc:c4:f3:9c:a2:fa:b3:e4:e1:be:fd:80:31:
73:23:90:11:d5:d2:05:91:af:f1:de:b4:8c:1b:fe:
ca:20:8a:8a:f5:f9:e3:79:64:a0:92:01:df:cd:cf:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:9F:D8:81:BA:15:FF:D9:F0:FA:69:D5:46:06:41:D7:1B:A5:DF
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.192.0/21
Signature Algorithm: sha256WithRSAEncryption
46:c2:76:d8:93:bb:19:c1:eb:ce:be:98:3e:2a:2d:5f:6a:68:
4b:e8:4e:4f:01:7b:ec:62:fc:cf:89:29:b3:70:eb:30:cb:e4:
7d:51:5f:ae:c0:ef:03:59:1e:0b:13:01:27:55:da:5c:1f:43:
9f:86:3d:a0:34:d2:c0:db:00:32:b5:de:90:47:9e:c0:0f:61:
fa:1a:84:cc:36:43:a5:b2:a4:05:2a:eb:39:b7:ff:02:64:0a:
20:e1:04:10:9d:c9:6b:aa:1b:07:f8:f6:28:b7:29:51:42:8b:
61:8a:6d:8b:6c:c1:1c:25:b5:be:9b:a7:90:be:af:d3:38:b1:
71:64:99:5d:c3:c1:71:35:58:f1:20:30:19:64:8c:a9:a4:c5:
aa:2d:86:9c:2a:67:04:54:5e:61:3b:60:b0:d6:0a:92:88:69:
a1:c8:a5:19:83:8c:35:44:f1:85:fb:1e:8e:10:2c:80:e7:4e:
9b:24:6d:9c:07:78:d5:89:48:69:02:26:ce:8a:2d:4b:2e:53:
33:92:91:7c:e5:ab:74:23:0b:1d:d3:8a:65:d4:e6:98:0f:7e:
fa:b3:75:e2:99:bb:a0:2e:ac:6e:f1:31:25:e8:13:17:7b:24:
72:c9:77:18:60:2d:9e:35:8c:93:21:18:6b:81:ef:51:33:1e:
a4:f9:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:00 2026 by rpki-client