Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/4FvrTlxGhcdz6JszhweukK-HXp4.roa
File: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (raw, json)
Hash identifier: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=
Subject key identifier: E0:5B:EB:4E:5C:46:85:C7:73:E8:9B:33:87:07:AE:90:AF:87:5E:9E
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019C4B9AA99B15DD9FD9ADE77F71245E8882
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/4FvrTlxGhcdz6JszhweukK-HXp4.roa
Signing time: Wed 11 Feb 2026 07:29:13 +0000
ROA not before: Wed 11 Feb 2026 07:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 77.110.64.0/24 maxlen: 24
77.110.65.0/24 maxlen: 24
77.110.68.0/24 maxlen: 24
77.110.70.0/24 maxlen: 24
77.110.71.0/24 maxlen: 24
77.110.72.0/24 maxlen: 24
77.110.74.0/24 maxlen: 24
77.110.75.0/24 maxlen: 24
77.110.77.0/24 maxlen: 24
77.110.79.0/24 maxlen: 24
77.110.80.0/24 maxlen: 24
77.110.82.0/24 maxlen: 24
77.110.83.0/24 maxlen: 24
77.110.85.0/24 maxlen: 24
77.110.87.0/24 maxlen: 24
77.110.88.0/24 maxlen: 24
77.110.90.0/24 maxlen: 24
77.110.91.0/24 maxlen: 24
77.110.93.0/24 maxlen: 24
77.110.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:9a:a9:9b:15:dd:9f:d9:ad:e7:7f:71:24:5e:88:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Feb 11 07:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e05beb4e5c4685c773e89b338707ae90af875e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:dd:d4:43:74:23:b7:71:c4:4c:90:f9:7c:8d:
ba:d4:66:ae:fd:bb:da:46:b3:40:69:07:dc:2d:bb:
e0:6c:74:7d:b4:6b:31:0e:dd:b2:4e:64:28:17:8a:
7c:86:78:73:90:9a:1e:50:f2:8b:78:e8:f2:36:e7:
55:22:39:86:53:b5:d9:c4:a7:77:6c:82:cc:74:6f:
48:60:7f:9a:09:ba:76:28:ec:79:06:45:8b:05:d3:
38:04:8f:e0:74:e0:d9:08:98:44:7b:fc:c5:b7:e2:
95:62:bb:94:e8:e2:ea:06:76:8c:43:f6:cd:cc:fb:
d3:ba:a4:95:ae:ba:22:dd:f9:48:21:dc:6f:df:66:
f2:86:d7:9c:1c:b3:f2:33:36:cf:bf:d2:61:53:71:
5c:9f:a5:d0:d1:f8:d7:23:33:59:b3:5b:1b:00:e7:
bf:37:9a:23:1c:4e:87:67:37:51:41:11:6e:89:09:
49:1e:a7:ba:10:92:be:9f:59:d7:cd:75:86:a1:82:
1c:6f:91:60:17:08:09:b2:56:29:26:cd:f5:7a:a9:
82:6d:5a:e2:f7:b3:34:ae:de:8b:c8:ef:27:be:f0:
ec:61:9d:dd:86:e1:27:71:a2:40:d9:5e:2a:f9:87:
38:23:db:b4:e7:66:92:03:12:a6:12:ea:19:ae:17:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:EB:4E:5C:46:85:C7:73:E8:9B:33:87:07:AE:90:AF:87:5E:9E
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/4FvrTlxGhcdz6JszhweukK-HXp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.64.0/23
77.110.68.0/24
77.110.70.0-77.110.72.255
77.110.74.0/23
77.110.77.0/24
77.110.79.0-77.110.80.255
77.110.82.0/23
77.110.85.0/24
77.110.87.0-77.110.88.255
77.110.90.0/23
77.110.93.0/24
77.110.95.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a0:ba:8d:23:7c:66:3c:98:ac:dc:92:a8:45:c3:ed:76:38:
d1:f9:4e:93:9d:5c:63:2d:ec:40:7a:1a:53:13:18:ca:e5:c6:
aa:2c:71:de:f2:67:06:c6:38:75:0f:0d:03:5e:ed:d1:7f:f3:
dc:4b:83:18:e2:9d:21:4c:79:db:f8:48:09:03:cf:c7:e3:49:
78:cf:ec:92:ee:0f:d1:d9:41:ef:85:25:b1:75:9e:f7:a0:a3:
93:c3:0b:2a:b5:bd:aa:59:c4:aa:f2:86:36:37:b4:b0:79:72:
c8:62:fb:87:48:0c:95:fd:1f:fe:7e:46:61:ee:a3:c1:01:99:
c9:c7:d3:44:59:b6:30:f0:cd:d7:ae:d1:40:7d:18:a7:cd:69:
b8:1f:1e:28:fb:69:8b:c4:d1:f7:b1:ef:da:77:57:58:7d:20:
81:73:5b:30:bd:a3:d5:91:01:ad:09:a6:7a:2c:bf:f6:0a:95:
61:c2:b0:24:ac:92:ad:c1:6b:c1:2c:a0:81:99:70:34:99:82:
b0:34:e3:2f:16:f0:c6:1e:c2:f5:46:a8:02:9d:ca:ef:c8:a7:
fb:a8:e2:d3:ba:88:69:d8:16:5a:0f:43:08:9d:90:31:47:a8:
c8:46:dc:17:e7:30:13:15:a6:98:ba:65:9b:23:46:d6:81:92:
28:a7:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:59:34 2026 by rpki-client