Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/7Pp8VbVpyOqLvs1kKzvwfwhRkGo.roa
File: 7Pp8VbVpyOqLvs1kKzvwfwhRkGo.roa (raw, json)
Hash identifier: 6Ks2LS2FCnPCE4CsuFiuAe1Op8O0mGMtouDqQZpDygY=
Subject key identifier: EC:FA:7C:55:B5:69:C8:EA:8B:BE:CD:64:2B:3B:F0:7F:08:51:90:6A
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01A0B85B9EB5E323F7B2E7C8638BBCB59897
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/7Pp8VbVpyOqLvs1kKzvwfwhRkGo.roa
Signing time: Sat 19 Sep 2026 06:30:07 +0000
ROA not before: Sat 19 Sep 2026 06:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.110.89.0/24 maxlen: 24
80.71.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:5b:9e:b5:e3:23:f7:b2:e7:c8:63:8b:bc:b5:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Sep 19 06:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecfa7c55b569c8ea8bbecd642b3bf07f0851906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:80:4d:b1:07:1d:cd:cd:b2:3f:2f:24:44:
95:cf:53:6f:af:62:ea:9d:1d:72:d1:f1:25:8c:c0:
26:3a:bf:5e:6c:7b:ee:91:32:e5:43:90:a1:94:71:
d0:1e:20:d4:33:af:c8:f4:73:28:4b:b7:a9:2b:ea:
c3:d0:1f:b6:04:29:c7:ca:ba:cc:ef:1e:87:48:1f:
00:95:2b:b3:95:d0:38:e9:7f:56:31:ee:2a:f6:2c:
c5:24:d6:7f:1d:05:21:cb:1b:63:c9:b1:84:b5:04:
8d:0f:f4:2f:5e:8f:31:f9:97:65:ce:44:a8:d3:94:
3c:a2:c5:78:fe:39:2b:25:7b:34:9c:ba:ac:4c:f9:
10:29:f2:f3:9a:6a:9a:3f:f7:17:a3:c6:32:52:e5:
0d:c0:41:80:6b:69:13:21:35:b1:4c:f6:d7:e6:92:
ee:60:fe:a3:8e:92:f9:9f:6b:d2:8d:de:40:73:a1:
14:00:fe:68:3d:25:ad:6c:93:ae:63:f4:53:f2:3d:
e3:5a:69:74:d5:c7:e5:3e:d7:9f:f8:af:5e:a3:55:
f4:3f:69:9d:ca:04:d0:49:94:16:6b:bd:87:ea:54:
4e:f1:4e:0b:d9:fc:3b:18:15:01:44:61:36:80:d4:
86:ba:8b:08:63:f0:2f:a2:02:1f:97:0a:95:61:5a:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:7C:55:B5:69:C8:EA:8B:BE:CD:64:2B:3B:F0:7F:08:51:90:6A
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/7Pp8VbVpyOqLvs1kKzvwfwhRkGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.89.0/24
80.71.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c6:0e:63:2d:c0:df:25:e9:b1:11:5f:41:a0:4e:b9:fa:ae:
1d:34:3d:3c:01:99:72:3a:2d:19:3c:d1:39:09:6a:69:2b:06:
21:4a:ca:f7:07:c7:ec:b7:18:5b:14:72:08:81:4c:5d:f2:81:
47:d5:10:8f:24:cc:28:04:74:6d:81:50:f6:62:12:dc:6f:68:
0c:d1:fa:31:44:4f:27:7f:c7:53:38:5c:bd:94:e4:31:18:e9:
fa:e0:5f:5c:7a:7e:8d:7e:9a:19:a8:dc:fa:62:10:5b:5c:02:
3d:bb:23:97:f1:02:53:c4:41:17:d6:09:eb:9f:ed:0c:f1:d8:
ca:79:e6:f1:e1:c7:4a:c1:f1:9a:7f:d1:60:1d:c5:00:44:d5:
24:94:09:3c:8c:36:f3:a9:6c:b1:6f:95:90:0e:f7:32:07:5d:
79:76:81:aa:50:08:1e:92:4a:d2:12:06:37:ab:eb:bb:c1:cb:
5e:e1:de:82:a1:f9:53:b3:90:2f:a1:95:49:bf:79:fb:01:1f:
1b:20:59:ff:13:1f:c7:4a:1e:4a:30:f8:39:41:44:36:31:02:
b5:54:eb:20:d5:04:87:da:ed:13:a7:75:05:7a:82:8b:5e:5a:
d4:7d:67:10:5d:01:47:57:47:72:14:f7:d8:9a:7c:b0:25:71:
de:86:e3:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC4W5614yP3sufIY4u8tZiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjYwOTE5MDYzMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2ZhN2M1NWI1NjljOGVhOGJiZWNkNjQyYjNiZjA3ZjA4NTE5MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5OATbEHHc3Nsj8vJESVz1Nvr2Lq
nR1y0fEljMAmOr9ebHvukTLlQ5ChlHHQHiDUM6/I9HMoS7epK+rD0B+2BCnHyrrM
7x6HSB8AlSuzldA46X9WMe4q9izFJNZ/HQUhyxtjybGEtQSND/QvXo8x+ZdlzkSo
05Q8osV4/jkrJXs0nLqsTPkQKfLzmmqaP/cXo8YyUuUNwEGAa2kTITWxTPbX5pLu
YP6jjpL5n2vSjd5Ac6EUAP5oPSWtbJOuY/RT8j3jWml01cflPtef+K9eo1X0P2md
ygTQSZQWa72H6lRO8U4L2fw7GBUBRGE2gNSGuosIY/AvogIflwqVYVosEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOz6fFW1acjqi77NZCs78H8IUZBqMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvN1BwOFZiVnB5T3FMdnMxa0t6dndmd2hSa0dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW5ZAwQA
UEeZMA0GCSqGSIb3DQEBCwUAA4IBAQA+xg5jLcDfJemxEV9BoE65+q4dND08AZly
Oi0ZPNE5CWppKwYhSsr3B8fstxhbFHIIgUxd8oFH1RCPJMwoBHRtgVD2YhLcb2gM
0foxRE8nf8dTOFy9lOQxGOn64F9cen6NfpoZqNz6YhBbXAI9uyOX8QJTxEEX1gnr
n+0M8djKeebx4cdKwfGaf9FgHcUARNUklAk8jDbzqWyxb5WQDvcyB115doGqUAge
kkrSEgY3q+u7wcte4d6CoflTs5AvoZVJv3n7AR8bIFn/Ex/HSh5KMPg5QUQ2MQK1
VOsg1QSH2u0Tp3UFeoKLXlrUfWcQXQFHV0dyFPfYmnywJXHehuPV
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:09 2026 by rpki-client