Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/8x4m40MJyadL-uEQAOXCvhEfYKA.roa
File: 8x4m40MJyadL-uEQAOXCvhEfYKA.roa (raw, json)
Hash identifier: cTEqJJoJmNCorKc0VwZRCIHhdBELnQT/DkBPVC7hWH0=
Subject key identifier: F3:1E:26:E3:43:09:C9:A7:4B:FA:E1:10:00:E5:C2:BE:11:1F:60:A0
Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial: 019FF0CE3A794F9118243952C955980F9D85
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/8x4m40MJyadL-uEQAOXCvhEfYKA.roa
Signing time: Tue 11 Aug 2026 12:31:14 +0000
ROA not before: Tue 11 Aug 2026 12:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 77.237.64.0/19 maxlen: 19
77.237.65.0/24 maxlen: 24
77.237.68.0/24 maxlen: 24
77.237.69.0/24 maxlen: 24
77.237.70.0/24 maxlen: 24
77.237.72.0/24 maxlen: 24
77.237.74.0/24 maxlen: 24
77.237.75.0/24 maxlen: 24
77.237.76.0/24 maxlen: 24
77.237.77.0/24 maxlen: 24
77.237.78.0/23 maxlen: 23
77.237.78.0/24 maxlen: 24
77.237.80.0/20 maxlen: 20
77.237.80.0/24 maxlen: 24
77.237.81.0/24 maxlen: 24
77.237.82.0/24 maxlen: 24
77.237.83.0/24 maxlen: 24
77.237.84.0/23 maxlen: 24
77.237.84.0/24 maxlen: 24
77.237.85.0/24 maxlen: 24
77.237.87.0/24 maxlen: 24
77.237.88.0/24 maxlen: 24
77.237.89.0/24 maxlen: 24
77.237.90.0/24 maxlen: 24
77.237.91.0/24 maxlen: 24
77.237.94.0/24 maxlen: 24
77.237.95.0/24 maxlen: 24
92.242.192.0/19 maxlen: 19
92.242.192.0/23 maxlen: 23
92.242.192.0/24 maxlen: 24
92.242.193.0/24 maxlen: 24
92.242.194.0/24 maxlen: 24
92.242.195.0/24 maxlen: 24
92.242.196.0/24 maxlen: 24
92.242.197.0/24 maxlen: 24
92.242.198.0/24 maxlen: 24
92.242.199.0/24 maxlen: 24
92.242.200.0/21 maxlen: 21
92.242.201.0/24 maxlen: 24
92.242.202.0/23 maxlen: 23
92.242.202.0/24 maxlen: 24
92.242.203.0/24 maxlen: 24
92.242.204.0/24 maxlen: 24
92.242.205.0/24 maxlen: 24
92.242.206.0/24 maxlen: 24
92.242.207.0/24 maxlen: 24
92.242.208.0/20 maxlen: 20
92.242.208.0/24 maxlen: 24
92.242.210.0/23 maxlen: 23
92.242.210.0/24 maxlen: 24
92.242.211.0/24 maxlen: 24
92.242.212.0/22 maxlen: 22
92.242.214.0/24 maxlen: 24
92.242.215.0/24 maxlen: 24
92.242.217.0/24 maxlen: 24
92.242.219.0/24 maxlen: 24
92.242.220.0/24 maxlen: 24
92.242.221.0/24 maxlen: 24
92.242.223.0/24 maxlen: 24
185.14.160.0/22 maxlen: 22
185.14.160.0/24 maxlen: 24
185.14.161.0/24 maxlen: 24
185.14.163.0/24 maxlen: 24
185.225.240.0/24 maxlen: 24
185.225.241.0/24 maxlen: 24
185.225.242.0/23 maxlen: 23
185.225.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:ce:3a:79:4f:91:18:24:39:52:c9:55:98:0f:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Validity
Not Before: Aug 11 12:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f31e26e34309c9a74bfae11000e5c2be111f60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:b3:17:ae:07:93:c7:f6:5c:25:cf:e3:e7:
00:39:12:99:aa:bc:1d:a4:d6:7c:8b:71:95:3b:73:
f7:70:60:82:6e:6d:3d:15:3e:f5:76:bc:43:32:79:
49:2e:99:68:2c:8e:31:52:25:86:a1:c8:fb:ce:dd:
88:85:23:bf:7c:9c:29:6e:54:99:ce:f3:a3:70:af:
c8:5d:d7:de:9f:f7:ff:f3:97:43:95:41:dc:f2:5e:
60:9d:be:e7:29:43:d7:90:a8:11:a3:90:fd:61:4d:
c1:a6:2a:ff:98:5f:c3:e5:45:59:50:b2:99:a5:d5:
81:2e:78:6a:12:a5:43:f1:45:24:92:fd:d0:cb:ad:
46:69:a4:52:a1:28:d5:cd:61:8c:f1:ed:c9:88:f9:
29:ce:86:4c:f0:8f:34:bf:af:e1:eb:02:7d:5a:5c:
38:98:2f:f1:4a:ce:95:ed:30:9a:60:2f:0c:d4:79:
84:e4:f6:2a:a2:f1:93:9f:f0:c9:32:83:52:cc:98:
39:1a:37:b2:01:e7:8c:dd:0e:22:f4:8f:6f:14:ef:
aa:a4:7d:6b:2f:70:6a:0e:1b:60:10:99:5e:72:79:
2e:91:d6:67:bf:be:77:d6:74:e3:56:e6:d8:d3:9f:
43:24:9a:ac:e7:cf:6f:ef:78:c5:41:80:ba:5d:57:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:26:E3:43:09:C9:A7:4B:FA:E1:10:00:E5:C2:BE:11:1F:60:A0
X509v3 Authority Key Identifier:
keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/8x4m40MJyadL-uEQAOXCvhEfYKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.64.0/19
92.242.192.0/19
185.14.160.0/22
185.225.240.0/22
Signature Algorithm: sha256WithRSAEncryption
66:37:5b:29:ab:54:b7:a6:47:64:39:be:81:8e:f4:07:d9:db:
30:99:73:60:92:ab:65:1f:46:d4:ed:31:d4:75:73:ec:0c:37:
39:d2:1f:b9:79:42:f6:f3:53:3e:c4:e5:a3:25:a6:c1:8d:3c:
c5:8d:ac:61:2b:61:53:58:89:17:a9:25:6c:b3:18:ac:dd:bd:
e1:e7:63:86:5b:4b:20:f5:6d:1a:70:79:23:5e:66:b0:64:f9:
1d:17:c2:bd:49:d2:97:c8:23:d9:af:7c:79:94:7e:90:f3:c0:
5e:83:4b:11:3e:16:b2:4c:da:60:1d:41:e0:7c:8b:01:43:e5:
e4:0d:38:a9:e4:75:09:d2:12:fc:e4:11:f9:e2:b8:24:4f:50:
20:67:a7:9d:16:7a:76:95:3b:2c:d9:30:ee:d3:ef:b6:10:fa:
6b:b7:b1:77:32:b3:36:a3:10:13:01:22:a5:36:f2:19:d7:3e:
f8:b1:96:59:d7:6f:cf:6d:58:b8:87:42:51:73:72:1c:06:b9:
d0:0e:36:6b:1b:b0:b9:3b:88:62:16:3f:96:a0:70:1f:c4:1a:
5c:bf:10:82:48:be:69:59:b7:73:50:66:e7:23:a4:0c:e8:46:
18:80:52:ac:6f:aa:3c:b0:d3:64:e3:8b:b6:ee:0c:78:f4:b9:
b3:c2:97:84
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/wzjp5T5EYJDlSyVWYD52FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YWZkY2Q1ZTk3YWMxYzEwMjQ3OWM5NTRkNWY5MjJiMTI2
Y2JjMTQwHhcNMjYwODExMTIzMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzFlMjZlMzQzMDljOWE3NGJmYWUxMTAwMGU1YzJiZTExMWY2MGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ2zF64Hk8f2XCXP4+cAORKZqrwd
pNZ8i3GVO3P3cGCCbm09FT71drxDMnlJLploLI4xUiWGocj7zt2IhSO/fJwpblSZ
zvOjcK/IXdfen/f/85dDlUHc8l5gnb7nKUPXkKgRo5D9YU3Bpir/mF/D5UVZULKZ
pdWBLnhqEqVD8UUkkv3Qy61GaaRSoSjVzWGM8e3JiPkpzoZM8I80v6/h6wJ9Wlw4
mC/xSs6V7TCaYC8M1HmE5PYqovGTn/DJMoNSzJg5GjeyAeeM3Q4i9I9vFO+qpH1r
L3BqDhtgEJlecnkukdZnv7531nTjVubY059DJJqs589v73jFQYC6XVe+hQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPMeJuNDCcmnS/rhEADlwr4RH2CgMB8GA1UdIwQY
MBaAFAev3NXpesHBAkeclU1fkisSbLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEt
ZmY2ODUxNzc3MGU0LzEvOHg0bTQwTUp5YWRMLXVFUUFPWEN2aEVmWUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEtZmY2ODUxNzc3MGU0
LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFTe1AAwQF
XPLAAwQCuQ6gAwQCueHwMA0GCSqGSIb3DQEBCwUAA4IBAQBmN1spq1S3pkdkOb6B
jvQH2dswmXNgkqtlH0bU7THUdXPsDDc50h+5eUL281M+xOWjJabBjTzFjaxhK2FT
WIkXqSVssxis3b3h52OGW0sg9W0acHkjXmawZPkdF8K9SdKXyCPZr3x5lH6Q88Be
g0sRPhayTNpgHUHgfIsBQ+XkDTip5HUJ0hL85BH54rgkT1AgZ6edFnp2lTss2TDu
0++2EPprt7F3MrM2oxATASKlNvIZ1z74sZZZ12/PbVi4h0JRc3IcBrnQDjZrG7C5
O4hiFj+WoHAfxBpcvxCCSL5pWbdzUGbnI6QM6EYYgFKsb6o8sNNk44u27gx49Lmz
wpeE
-----END CERTIFICATE-----
Generated at Thu Aug 13 05:33:24 2026 by rpki-client