Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/6FlfzCCnvmo896yjB_Ms6PmiMQU.roa
File: 6FlfzCCnvmo896yjB_Ms6PmiMQU.roa (raw, json)
Hash identifier: m7kcAEZtSF+8mAV3wVdGBKonTdxO/mPVuxczf1fwIhQ=
Subject key identifier: E8:59:5F:CC:20:A7:BE:6A:3C:F7:AC:A3:07:F3:2C:E8:F9:A2:31:05
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 019C75CFB762CF484DE5EA26BFDDF32D45AD
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/6FlfzCCnvmo896yjB_Ms6PmiMQU.roa
Signing time: Thu 19 Feb 2026 12:11:13 +0000
ROA not before: Thu 19 Feb 2026 12:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42699
IP address blocks: 77.220.224.0/19 maxlen: 19
77.220.232.0/24 maxlen: 24
2a02:2878::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:cf:b7:62:cf:48:4d:e5:ea:26:bf:dd:f3:2d:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Feb 19 12:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8595fcc20a7be6a3cf7aca307f32ce8f9a23105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:18:c8:16:53:93:72:02:9c:6d:f8:ff:fd:
5c:c0:18:fe:d8:3a:19:2d:1b:b2:b0:52:bf:0e:28:
26:de:dc:24:17:a5:16:8e:9d:2b:7d:83:70:c3:9b:
02:ee:8a:80:2b:22:09:de:da:93:31:77:52:93:23:
a0:d5:0d:df:c4:13:57:00:11:81:b3:6f:16:00:0d:
b1:a7:a2:0b:3b:70:38:bb:56:d0:22:35:00:79:62:
46:13:10:cf:1f:89:cb:0d:34:ca:a0:9d:22:15:24:
c5:58:ea:0f:fc:62:b5:04:94:8f:92:57:12:9a:2d:
1c:b8:ec:15:38:4c:d9:05:02:e4:8e:f0:ab:a6:79:
c1:52:ec:4f:8c:68:1e:a1:71:e7:c3:fb:f4:f0:c3:
b9:fd:19:8c:9c:70:0b:89:75:5d:74:c4:05:17:9a:
6c:f6:e5:58:89:68:4f:51:2c:f1:fe:df:4b:c0:4b:
31:2a:ae:e0:58:a4:e4:cb:65:24:46:dd:cc:08:35:
ca:e4:9f:47:6e:c4:86:d1:45:21:1a:e7:e5:c4:a4:
38:91:a4:8f:d2:42:c8:0e:a5:7a:43:36:00:fb:3a:
a2:ec:8a:ef:f6:99:ba:54:60:99:0a:d1:b7:f9:3d:
87:cf:98:dc:db:5e:4a:d2:ff:82:34:7c:9d:16:9a:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:5F:CC:20:A7:BE:6A:3C:F7:AC:A3:07:F3:2C:E8:F9:A2:31:05
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/6FlfzCCnvmo896yjB_Ms6PmiMQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.224.0/19
IPv6:
2a02:2878::/32
Signature Algorithm: sha256WithRSAEncryption
63:60:c7:8e:2c:c2:2d:c6:bd:1f:82:c6:40:bd:92:13:92:23:
a4:75:b0:5e:0c:9f:e3:8b:31:f4:a1:61:b5:8b:2b:dd:73:bc:
12:1a:4d:ea:fd:91:f3:26:d2:1d:8d:ab:8b:38:d2:da:f9:45:
40:e3:26:15:c3:3b:d9:71:04:dc:8b:38:ec:da:3f:12:46:da:
b2:7e:80:d3:60:f8:f7:8d:c8:cd:07:66:e3:83:06:32:05:ba:
74:10:bf:df:55:c0:bb:1f:16:0a:3c:4f:15:01:28:aa:b1:4e:
e0:6b:c8:9b:9b:7e:ba:ae:65:8a:7e:3e:0f:d9:f7:98:e4:2c:
dd:bc:2c:82:a0:96:de:df:a1:c6:75:b3:27:ca:af:72:57:33:
fe:66:2c:a9:ce:4d:ae:5b:10:2e:74:42:7c:5e:c8:79:5e:93:
a4:a7:34:d1:9b:d6:88:2b:19:9f:88:b0:19:26:9c:25:3b:fb:
79:7e:49:33:55:8b:76:a0:0a:c5:11:c3:26:45:35:af:8d:44:
54:f7:dd:84:1a:e5:85:cc:b1:aa:33:5b:93:02:f6:f8:64:07:
9a:cc:be:d2:03:37:35:01:c5:09:23:e1:a5:da:13:bc:ac:81:
b1:93:1a:f6:2b:60:0f:db:08:00:d3:12:c4:ca:f8:33:58:3c:
f5:4c:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:40 2026 by rpki-client