Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa
File: 1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa (raw, json)
Hash identifier: lwxtwCNle18YFsAjD50qJJ41jy6oJAGh+Vhp9fwJVGo=
Subject key identifier: FA:11:F4:39:D4:EC:EB:A6:47:02:81:77:2F:13:7A:1B:31:91:18:B0
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019D7B2F2540FFD3B79D006468AFB95C8A7E
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa
Signing time: Sat 11 Apr 2026 06:16:20 +0000
ROA not before: Sat 11 Apr 2026 06:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55154
IP address blocks: 77.110.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:2f:25:40:ff:d3:b7:9d:00:64:68:af:b9:5c:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 11 06:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa11f439d4eceba6470281772f137a1b319118b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:72:2e:c8:6b:6f:38:fc:3c:60:77:0c:7d:
f4:75:e5:33:ce:d5:64:41:17:4b:15:48:ac:28:eb:
a6:60:7a:70:2b:16:3e:d7:57:cf:6e:c1:1b:0e:b3:
f3:99:31:1f:39:c6:ad:91:9d:df:6a:67:37:df:ac:
ba:c0:1b:90:a9:b5:00:6e:ba:fa:60:0a:a1:52:bb:
75:10:ab:8b:3f:3a:3c:ea:33:88:e1:3a:a4:3b:80:
b0:c7:be:e4:43:e3:c9:a2:50:e2:8b:9a:20:22:d2:
60:7f:a7:27:a7:24:cb:90:26:1b:09:11:33:86:2b:
be:24:ad:ff:33:a5:9b:83:ee:a4:f9:3f:39:6d:f4:
c3:78:1f:f7:71:5c:ed:34:04:29:31:51:1c:dc:67:
96:55:9d:e1:7d:db:86:71:44:4a:f3:e0:2a:5f:9f:
d5:7a:b0:34:91:92:17:e9:a9:0e:0c:25:f4:5f:61:
01:50:a7:67:0a:f5:1e:8a:13:9b:75:20:e2:02:00:
ee:d9:0e:20:f0:04:01:9b:4c:c1:ec:5b:f4:74:9b:
a8:26:f7:57:c3:dd:f0:36:e5:29:21:42:ed:c3:92:
d4:bb:54:2a:30:ca:7b:5f:fb:16:66:d4:b5:d7:20:
0b:60:c3:cd:14:e8:d1:86:fc:26:d9:f4:0f:ef:60:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:F4:39:D4:EC:EB:A6:47:02:81:77:2F:13:7A:1B:31:91:18:B0
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.66.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9f:6d:b9:c8:a4:58:e0:3e:ab:2e:bc:48:41:0e:f0:71:8a:
09:87:8d:06:78:2d:ab:b0:de:47:f3:dd:17:38:7c:f7:ee:d9:
25:ba:d0:8a:da:67:bd:02:88:80:44:ff:29:cc:47:4f:94:81:
a1:dd:79:09:22:52:88:a4:e9:07:e0:6e:19:04:62:03:a6:af:
ed:cd:97:89:73:04:65:3b:64:cc:76:2f:7a:56:52:cd:4f:1c:
d0:fb:2a:4c:35:07:50:4c:1b:52:af:7c:e9:f9:69:75:78:c3:
5b:3f:ad:96:e5:5a:a3:02:67:5e:09:8d:67:ae:33:8c:dc:97:
f1:e3:89:cf:f8:8d:27:ce:2c:d1:ec:74:7c:cb:a7:54:48:86:
34:ef:7f:5b:47:e0:e8:71:ed:80:88:fa:e7:c2:da:ea:96:37:
1d:fd:aa:04:6b:ce:fb:6f:b9:57:d6:8b:5d:d3:bc:56:4e:ad:
ec:3b:cc:5b:d0:2f:d5:3f:17:87:d4:f1:7d:c8:6e:ba:6a:85:
ea:d7:0b:65:2b:52:8f:f4:9d:aa:a1:3b:de:dc:2d:f1:ae:81:
89:8c:82:ca:98:b0:dd:21:28:6f:e8:0e:5e:d6:04:90:75:3b:
68:ed:0c:b4:6e:3b:eb:48:ba:15:32:a6:61:84:ae:51:8a:55:
99:83:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:45:41 2026 by rpki-client