Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/cjmMHNCt7ftsAclZWv1yu3UDwe4.roa
File: cjmMHNCt7ftsAclZWv1yu3UDwe4.roa (raw, json)
Hash identifier: mykIvp5CRZypfUSTPKMqrSzVuYDXX5lzutyA9f3+D/A=
Subject key identifier: 72:39:8C:1C:D0:AD:ED:FB:6C:01:C9:59:5A:FD:72:BB:75:03:C1:EE
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 019C75CECD25A1E1215947D970FAF5C45B50
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/cjmMHNCt7ftsAclZWv1yu3UDwe4.roa
Signing time: Thu 19 Feb 2026 12:10:13 +0000
ROA not before: Thu 19 Feb 2026 12:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62310
IP address blocks: 77.220.248.0/21 maxlen: 21
2a02:2878:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:ce:cd:25:a1:e1:21:59:47:d9:70:fa:f5:c4:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Feb 19 12:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72398c1cd0adedfb6c01c9595afd72bb7503c1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:99:06:b8:f4:1a:f3:8f:70:f7:99:ab:13:
09:9f:6a:c0:e8:29:16:ae:29:0c:88:bd:1a:96:68:
95:78:09:d3:42:f9:a5:f8:5c:42:6f:86:85:51:4b:
d5:6a:d5:cb:cb:c4:b9:b3:fd:35:29:0f:92:2f:89:
61:8d:f0:45:41:e7:3a:dd:0f:e6:fd:3f:02:59:00:
57:ac:4c:8e:5b:b0:46:44:59:10:86:e6:20:2e:ac:
6b:9c:af:c2:86:24:b4:ef:66:80:11:4d:78:4a:63:
09:0d:3c:1c:67:98:ad:21:4b:92:57:e8:62:7e:69:
27:27:d2:8c:3f:96:4a:19:84:a5:9c:eb:ad:3e:d7:
01:97:90:29:13:d2:6e:d6:7c:b6:28:c3:cf:f9:fd:
78:bf:e4:d2:36:2d:3b:ef:ff:14:41:f5:d4:e8:01:
ee:13:cf:c7:6a:e7:09:1a:42:14:69:da:4f:da:08:
fb:b4:16:2f:8a:bf:1b:2f:72:1c:6a:9d:d8:97:84:
15:10:88:2e:9a:eb:a6:8d:b9:a4:4c:04:b4:38:12:
70:69:e8:fe:df:2b:e0:a7:62:b5:b6:ac:61:4b:ce:
2f:ad:e6:a1:33:63:3e:2b:ef:fe:b2:37:5e:a2:26:
39:9f:c7:da:d6:e3:46:42:3f:ba:1d:b5:93:9d:7c:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:8C:1C:D0:AD:ED:FB:6C:01:C9:59:5A:FD:72:BB:75:03:C1:EE
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/cjmMHNCt7ftsAclZWv1yu3UDwe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.248.0/21
IPv6:
2a02:2878:8000::/34
Signature Algorithm: sha256WithRSAEncryption
13:5a:a3:c4:c0:06:e0:ee:fa:69:ad:96:cb:e3:11:53:c2:23:
b4:64:0d:b4:d6:73:09:a5:64:5b:7e:2d:8d:76:f7:cb:ec:be:
38:e0:3e:85:7d:dd:af:7d:3b:fe:d8:dd:50:47:6a:98:1e:6c:
f3:2e:2a:19:28:e0:99:9d:b0:ab:ad:70:ee:48:62:85:6c:40:
9b:19:76:e1:3d:9e:eb:8e:24:3e:cf:23:ba:49:81:1b:5b:ed:
e8:69:b5:d1:83:98:55:c7:26:c4:2e:c4:f4:00:68:73:18:49:
a5:5e:a5:ee:19:8d:48:c6:d1:38:ff:ae:7b:e6:ea:d0:f6:05:
58:7b:f2:db:cb:a9:2e:fc:14:22:a4:04:40:f6:58:1e:36:95:
84:8e:af:79:b5:98:e8:da:5b:d5:09:28:2a:d3:e0:43:fb:af:
f2:18:7c:14:e3:a2:e8:e9:45:89:0b:c3:23:9c:90:39:41:d7:
b9:f1:ce:f3:14:a9:d1:dc:ec:9a:af:8f:4b:ee:94:a6:c1:af:
e9:2b:18:41:c9:65:bd:1d:39:bb:e8:31:be:93:f5:f7:5e:69:
7e:90:ab:25:e5:9d:82:dc:2e:0d:80:1b:3e:ba:5c:ad:7d:d6:
bc:08:9e:c8:ba:af:e3:a5:bf:19:46:0a:ac:51:c1:8d:be:1a:
00:ba:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:04:01 2026 by rpki-client