Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/F1V0wynnOSlQInBaxuhzJDgcy9k.roa
File: F1V0wynnOSlQInBaxuhzJDgcy9k.roa (raw, json)
Hash identifier: CX2eKYxqSZgkOz1N9A39C2K0ZG5W0zjtqHz0CSxsQVI=
Subject key identifier: 17:55:74:C3:29:E7:39:29:50:22:70:5A:C6:E8:73:24:38:1C:CB:D9
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019CA117A4B344483E5D717B22D40C524DC0
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/F1V0wynnOSlQInBaxuhzJDgcy9k.roa
Signing time: Fri 27 Feb 2026 21:53:27 +0000
ROA not before: Fri 27 Feb 2026 21:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 77.110.67.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.73.0/24 maxlen: 24
77.110.78.0/24 maxlen: 24
77.110.86.0/24 maxlen: 24
77.110.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a1:17:a4:b3:44:48:3e:5d:71:7b:22:d4:0c:52:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Feb 27 21:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=175574c329e739295022705ac6e87324381ccbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:12:f1:ba:75:1d:44:88:31:72:6b:69:9a:
0a:18:05:43:20:9a:5a:a9:c2:94:b6:61:0a:dc:cb:
75:fb:33:d1:e1:04:f5:d9:13:27:67:de:1c:41:a6:
cc:d2:e5:f5:0f:6a:a9:cd:f5:a4:27:18:8f:34:93:
b3:48:b5:3f:2f:34:cb:cb:78:98:16:ef:0c:eb:20:
88:97:5b:ad:b0:e1:6c:4d:46:4d:35:27:b5:2b:58:
d0:55:d1:5b:7b:2e:9f:f3:e8:69:90:88:07:c1:8f:
98:f9:ca:a5:49:60:98:e4:df:55:d9:f0:05:f1:de:
91:e9:1f:a4:e7:22:48:87:0b:41:34:e3:34:6a:65:
53:c6:6a:ae:bb:33:e9:d3:11:9a:4f:05:b4:14:f7:
f4:93:34:7f:3f:b6:14:33:41:87:66:14:26:01:91:
07:28:81:d9:06:d1:33:e0:b1:db:9a:4b:44:21:b5:
22:a0:d7:d6:f4:2d:99:50:47:3d:44:2b:ab:86:8e:
56:24:53:fb:a3:95:9c:36:6c:a2:27:95:a4:77:1c:
70:99:1b:c8:03:5f:ba:16:b1:5d:b3:ab:14:4d:a1:
63:40:dd:6e:e2:ba:04:fd:c5:7f:68:13:28:42:a6:
b6:ba:2f:70:d3:04:49:f5:4c:da:e2:23:5a:dd:bf:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:74:C3:29:E7:39:29:50:22:70:5A:C6:E8:73:24:38:1C:CB:D9
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/F1V0wynnOSlQInBaxuhzJDgcy9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.67.0/24
77.110.69.0/24
77.110.73.0/24
77.110.78.0/24
77.110.86.0/24
77.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9f:87:34:d0:21:12:0c:a0:47:24:d5:db:22:c0:3c:81:85:
1f:8d:ef:85:df:2e:b7:72:c0:36:19:30:76:3c:61:6c:aa:9c:
fc:e3:f1:ab:84:cd:33:05:b0:b7:96:4b:9f:aa:6d:04:97:89:
25:fe:a6:8f:ad:cb:27:a4:ad:1c:81:98:a3:71:9f:e0:2b:85:
db:6b:02:bc:c7:10:ef:e0:a3:19:d7:d4:9d:c8:a9:97:f8:07:
72:d0:07:b5:e8:66:f2:2d:e6:9e:ef:26:71:c5:ba:7e:59:ca:
af:96:09:dd:bb:64:cb:96:ca:ef:a3:e0:c7:a7:5b:34:01:db:
b6:a4:bc:39:1c:15:4e:cc:b5:8c:f8:34:92:a3:07:8e:3c:a7:
a9:3f:39:f3:a2:20:b7:51:da:eb:10:64:a3:a5:31:94:ec:bd:
2e:5a:01:3f:da:74:93:fb:87:f6:de:c3:38:d3:27:d2:9a:f1:
4c:6e:a8:e3:08:96:15:f9:bb:fe:f8:25:2d:73:64:3f:02:b4:
0b:ee:04:8a:fd:28:7e:76:08:e4:35:b2:1c:b8:b9:47:01:b7:
0e:57:7d:49:f2:d2:53:f1:98:50:45:1a:05:5a:ad:de:c4:b7:
4e:d9:bd:1e:8a:1a:04:ed:11:81:ed:9a:bc:ee:c0:fe:aa:75:
b0:63:bd:50
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZyhF6SzREg+XXF7ItQMUk3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjYwMjI3MjE1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzU1NzRjMzI5ZTczOTI5NTAyMjcwNWFjNmU4NzMyNDM4MWNjYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv54S8bp1HUSIMXJraZoKGAVDIJpa
qcKUtmEK3Mt1+zPR4QT12RMnZ94cQabM0uX1D2qpzfWkJxiPNJOzSLU/LzTLy3iY
Fu8M6yCIl1utsOFsTUZNNSe1K1jQVdFbey6f8+hpkIgHwY+Y+cqlSWCY5N9V2fAF
8d6R6R+k5yJIhwtBNOM0amVTxmquuzPp0xGaTwW0FPf0kzR/P7YUM0GHZhQmAZEH
KIHZBtEz4LHbmktEIbUioNfW9C2ZUEc9RCurho5WJFP7o5WcNmyiJ5WkdxxwmRvI
A1+6FrFds6sUTaFjQN1u4roE/cV/aBMoQqa2ui9w0wRJ9Uza4iNa3b/xVwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBdVdMMp5zkpUCJwWsbocyQ4HMvZMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvRjFWMHd5bm5PU2xRSW5CYXh1aHpKRGdjeTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQATW5DAwQA
TW5FAwQATW5JAwQATW5OAwQATW5WAwQATW5cMA0GCSqGSIb3DQEBCwUAA4IBAQBE
n4c00CESDKBHJNXbIsA8gYUfje+F3y63csA2GTB2PGFsqpz84/GrhM0zBbC3lkuf
qm0El4kl/qaPrcsnpK0cgZijcZ/gK4XbawK8xxDv4KMZ19SdyKmX+Ady0Ae16Gby
Leae7yZxxbp+Wcqvlgndu2TLlsrvo+DHp1s0Adu2pLw5HBVOzLWM+DSSoweOPKep
PznzoiC3UdrrEGSjpTGU7L0uWgE/2nST+4f23sM40yfSmvFMbqjjCJYV+bv++CUt
c2Q/ArQL7gSK/Sh+dgjkNbIcuLlHAbcOV31J8tJT8ZhQRRoFWq3exLdO2b0eihoE
7RGB7Zq87sD+qnWwY71Q
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:36 2026 by rpki-client