Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/U27renAALZTxH0h-gwjCCnMoHKk.roa
File: U27renAALZTxH0h-gwjCCnMoHKk.roa (raw, json)
Hash identifier: ORyWVmLu5TiTeF6f08kuBMFxVBSVN460MMMTmyam6hc=
Subject key identifier: 53:6E:EB:7A:70:00:2D:94:F1:1F:48:7E:83:08:C2:0A:73:28:1C:A9
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019FF0BC77D0873E15FFFD24680F5F161503
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/U27renAALZTxH0h-gwjCCnMoHKk.roa
Signing time: Tue 11 Aug 2026 12:11:51 +0000
ROA not before: Tue 11 Aug 2026 12:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34602
IP address blocks: 77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 24
77.50.192.0/18 maxlen: 24
77.233.208.0/22 maxlen: 22
77.233.209.0/24 maxlen: 24
77.233.216.0/22 maxlen: 22
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 24
81.17.144.0/21 maxlen: 21
81.17.155.0/24 maxlen: 24
81.17.156.0/23 maxlen: 23
91.204.128.0/23 maxlen: 23
91.204.130.0/24 maxlen: 24
94.141.162.0/23 maxlen: 23
94.141.163.0/24 maxlen: 24
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/24 maxlen: 24
2a00:e78::/31 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:bc:77:d0:87:3e:15:ff:fd:24:68:0f:5f:16:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Aug 11 12:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536eeb7a70002d94f11f487e8308c20a73281ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:09:66:f1:47:94:d7:8a:ea:96:44:3d:23:
a7:a6:bb:11:08:51:46:8f:54:13:1c:0c:c5:85:22:
82:79:3a:9e:4b:70:f3:17:06:bc:73:42:89:eb:c7:
16:cd:e2:0a:b3:ff:f4:65:42:55:75:1f:8b:b9:bf:
36:f2:1c:b2:c2:05:e3:5b:c5:33:50:10:a5:c7:40:
10:4c:76:02:97:f0:0d:8b:92:db:51:df:9b:7e:0c:
23:ce:56:05:3e:28:7a:00:33:3f:02:a6:0e:85:63:
30:df:88:68:ce:44:e9:c3:34:96:5e:54:c7:ee:92:
8d:91:56:1a:50:d7:0f:90:5a:6b:c8:92:3c:b9:63:
f2:e2:50:44:9d:6f:21:4c:b6:ae:47:f3:25:6a:8a:
49:b9:90:c5:31:38:fc:b7:b4:52:41:64:ec:ae:8d:
66:01:7c:5b:ed:ff:24:16:b3:b1:b3:fd:a5:cb:e2:
9f:1c:0c:33:53:06:e5:50:7b:85:e9:b3:e7:97:44:
9f:c1:80:60:ca:33:93:5e:50:45:97:e4:3f:b2:e4:
9a:7f:2a:be:32:2e:a7:8b:59:b1:cd:6e:34:78:ea:
75:8b:28:f5:d1:25:09:ba:e2:32:88:93:39:93:25:
7b:38:76:83:6d:5a:65:af:a3:bd:d3:15:ef:59:a2:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:EB:7A:70:00:2D:94:F1:1F:48:7E:83:08:C2:0A:73:28:1C:A9
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/U27renAALZTxH0h-gwjCCnMoHKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.50.0.0/16
77.233.208.0/22
77.233.216.0/22
77.243.96.0/20
81.17.144.0/20
91.204.128.0-91.204.130.255
94.141.162.0-94.141.191.255
185.185.140.0/24
IPv6:
2a00:e78::/31
Signature Algorithm: sha256WithRSAEncryption
85:b8:22:9c:4b:79:ae:b0:d9:a3:1d:a2:9b:ca:c5:b1:ce:12:
28:6a:f4:2b:59:a3:51:c1:82:00:fe:c8:c1:c3:06:7f:f9:43:
4e:27:c1:3c:8d:13:f1:45:d6:3f:e2:1d:0e:46:4a:1c:2e:e4:
1b:f8:37:04:9e:70:59:bd:4d:b1:22:9c:5a:e0:85:55:7a:4b:
04:41:ad:7d:b4:fe:92:66:17:23:9a:17:36:95:25:57:f5:d0:
10:2c:65:06:41:84:22:92:ba:ae:b2:36:9f:37:81:fb:c6:92:
3b:27:08:cd:e0:02:74:77:f4:3b:84:cf:89:35:ed:59:16:4d:
69:1c:8a:2d:53:7c:0d:4b:93:a2:87:61:21:a2:a8:e7:ad:02:
b6:a0:c5:3e:39:b6:ea:00:19:97:f2:71:59:94:9a:12:64:5c:
ff:39:75:0d:2e:01:6a:53:4a:6e:fc:43:77:89:d8:2f:ad:84:
de:4a:2f:07:74:12:2e:ed:e5:38:21:71:20:ba:a3:c8:6a:d0:
ae:99:32:64:57:2b:0c:b2:21:04:ac:ab:4b:79:77:c3:00:ae:
2c:ea:65:ef:0e:6d:00:76:e9:03:5c:1f:40:1d:1e:83:fe:ba:
21:cc:19:57:ec:65:59:3c:03:97:78:74:b5:dd:a8:ef:68:e6:
16:7e:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:11 2026 by rpki-client