Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Nh0l-ywgiXhQ5q97R0ydlnKU_Ks.roa
File: Nh0l-ywgiXhQ5q97R0ydlnKU_Ks.roa (raw, json)
Hash identifier: CIaFk2XyNErzZ3XJsX24zdwvYGz9erc56xXYXwgyrnU=
Subject key identifier: 36:1D:25:FB:2C:20:89:78:50:E6:AF:7B:47:4C:9D:96:72:94:FC:AB
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019CB0AE6CCC46930B746EF18DA888BF288B
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Nh0l-ywgiXhQ5q97R0ydlnKU_Ks.roa
Signing time: Mon 02 Mar 2026 22:32:26 +0000
ROA not before: Mon 02 Mar 2026 22:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 266539
IP address blocks: 77.110.67.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.73.0/24 maxlen: 24
77.110.78.0/24 maxlen: 24
77.110.86.0/24 maxlen: 24
77.110.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ae:6c:cc:46:93:0b:74:6e:f1:8d:a8:88:bf:28:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Mar 2 22:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=361d25fb2c20897850e6af7b474c9d967294fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:ea:ab:0f:0b:c1:23:df:fe:b9:60:c2:82:
b7:d1:51:ab:f0:22:c3:4e:44:ba:96:38:78:b7:6d:
2c:04:2f:fc:a1:7f:3e:00:a0:ad:25:3d:06:14:33:
57:17:e8:8a:3b:a5:b7:39:4b:0b:f8:02:ab:7a:5b:
27:d3:a4:82:d7:75:c6:40:30:1b:c8:f2:3b:0d:4f:
9a:19:b6:6f:06:d7:7d:64:58:1c:e7:2b:ec:e1:10:
4e:c5:ff:85:3e:d5:0c:90:2c:1d:4e:d7:b1:b4:22:
f5:7c:ed:75:89:12:b2:e0:6a:63:f6:92:8b:62:72:
3f:45:ef:ae:4d:bb:bd:73:8e:b8:1b:7c:5a:05:a2:
be:9d:aa:e0:1e:ae:f3:db:90:8a:1c:3c:0c:70:f7:
ca:20:32:22:03:19:61:76:91:00:ee:20:23:a7:4c:
81:d3:8a:18:d9:77:57:86:53:61:51:2f:43:de:ff:
e4:ba:80:e4:10:d8:0a:c1:b5:9e:0f:4d:b7:ae:46:
db:aa:2b:53:fc:9e:ef:51:f8:b1:6a:29:ac:30:62:
2b:8e:e9:a0:b6:b0:2a:ba:cf:cd:25:8c:d9:ab:46:
72:84:8a:72:00:24:91:57:84:6d:f9:bc:26:56:86:
35:a0:d2:31:13:9c:4d:44:de:ca:4d:48:4e:ce:c3:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:25:FB:2C:20:89:78:50:E6:AF:7B:47:4C:9D:96:72:94:FC:AB
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Nh0l-ywgiXhQ5q97R0ydlnKU_Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.67.0/24
77.110.69.0/24
77.110.73.0/24
77.110.78.0/24
77.110.86.0/24
77.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d1:b0:eb:1c:40:7b:51:ec:dd:f6:e1:40:3a:b0:22:d8:3e:
77:60:ec:ef:a8:57:a1:42:1c:0f:cc:b0:4e:20:6e:d9:2b:df:
c0:0f:ae:f6:f0:b6:75:a4:73:69:f2:19:16:04:58:2e:a9:28:
33:15:22:c5:99:f0:af:d7:b8:32:bf:fb:af:78:63:6f:dd:04:
7f:9b:49:91:cd:9b:34:d0:33:6a:99:0d:75:06:dc:bc:d0:4f:
11:eb:19:a8:95:43:7b:09:ee:8b:3b:ec:e2:ea:85:e5:88:4e:
85:9b:6d:84:f5:3d:1a:70:7b:e4:b1:24:50:86:3c:82:94:3c:
64:56:48:ad:73:e6:9e:99:03:c5:0c:db:57:03:26:77:3e:87:
69:50:c8:9b:a4:30:1e:27:28:f8:f2:b5:7b:cb:26:24:84:d8:
7d:ab:91:d6:2a:56:a8:26:85:6a:a7:51:c4:44:e3:70:7c:b6:
48:96:76:f1:10:13:c7:10:34:07:cd:93:51:86:77:3c:0d:16:
fe:41:11:c0:cd:3e:6b:35:00:a3:4f:66:a8:9f:2a:3b:cb:7c:
a7:55:14:23:1e:46:91:38:a5:63:cf:2e:8e:9c:8b:b5:9a:13:
61:8d:2b:e5:e2:50:cb:a2:73:90:51:b7:82:55:33:e0:31:7e:
e6:43:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:13:32 2026 by rpki-client