Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/d-ZqqORaz3ph08om-TNqwy5rKhI.roa
File: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (raw, json)
Hash identifier: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=
Subject key identifier: 77:E6:6A:A8:E4:5A:CF:7A:61:D3:CA:26:F9:33:6A:C3:2E:6B:2A:12
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019CA5EAAFF0E09C112AFEFD99458642C797
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/d-ZqqORaz3ph08om-TNqwy5rKhI.roa
Signing time: Sat 28 Feb 2026 20:22:26 +0000
ROA not before: Sat 28 Feb 2026 20:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214941
IP address blocks: 77.110.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a5:ea:af:f0:e0:9c:11:2a:fe:fd:99:45:86:42:c7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Feb 28 20:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77e66aa8e45acf7a61d3ca26f9336ac32e6b2a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:ab:04:8f:b2:a2:12:3f:a2:9b:2e:60:30:
51:cc:d8:45:a1:fc:43:eb:e2:92:fa:87:75:8f:24:
b6:b0:94:d3:e8:a4:59:5a:9c:ff:1e:eb:5b:35:1a:
38:90:b5:18:59:1a:14:5d:d5:a4:1c:ed:df:b5:e5:
f7:98:da:33:f4:cb:75:85:fa:24:cc:e8:a7:f8:ce:
83:4c:66:df:30:a7:79:e1:c6:62:d5:72:fb:e1:79:
b5:d7:ba:f5:b4:54:fa:78:a7:12:60:ca:6e:c5:fd:
fa:7e:0a:20:6a:d4:0c:97:df:14:40:ef:a8:8c:53:
0d:81:7c:1c:67:f0:24:f2:49:ee:1c:d8:4a:5d:f8:
65:33:33:60:01:19:07:57:ea:e7:ab:ef:e9:85:89:
3f:60:dc:64:2c:c2:90:97:d3:39:2a:c5:e7:3b:3f:
e4:62:94:95:07:64:89:f7:91:4c:a9:65:8e:71:92:
57:83:05:95:08:41:de:3e:f6:2f:3f:64:b7:83:d1:
27:3a:3b:64:8c:4a:ec:e6:4a:2b:e9:3a:35:37:8e:
13:40:05:f0:64:5d:6b:89:b4:e5:2e:8a:e6:5a:5d:
f0:d3:c2:0b:a5:27:42:52:b6:56:d8:fb:81:db:5b:
f2:87:55:dd:59:5a:60:2d:45:92:e8:fc:96:ea:d5:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E6:6A:A8:E4:5A:CF:7A:61:D3:CA:26:F9:33:6A:C3:2E:6B:2A:12
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/d-ZqqORaz3ph08om-TNqwy5rKhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:00:9c:95:6b:09:d7:dc:55:23:f5:72:c3:e5:a9:81:de:
00:82:a3:4e:f6:1d:cf:cd:ba:0d:6b:b3:ae:7c:91:80:85:6c:
5b:c4:27:99:a3:d3:90:0f:89:76:2f:c6:2b:ef:d5:e7:5e:cc:
ea:65:dd:42:03:cb:5d:86:2f:dc:29:a8:f2:c2:bc:10:13:85:
60:3f:9e:ad:98:73:c8:08:56:b7:91:ab:c8:8a:16:e2:9e:b3:
bd:a6:cf:35:fb:e5:7f:09:f7:e0:0b:f5:4a:28:1e:c9:19:71:
5a:6a:9c:6f:7e:d6:3f:b3:25:ef:91:52:08:ff:8c:2f:07:d7:
f8:08:38:6a:f7:c0:e7:6c:f6:8f:e2:d6:ca:d8:ac:ae:e0:d2:
12:69:18:69:cf:88:41:4a:17:4b:e1:86:ee:3c:ac:9d:5c:a2:
b1:9e:b0:8a:0f:ca:53:f4:97:2c:e4:1d:15:fe:31:de:61:4c:
f2:85:c5:c5:62:d7:c0:99:f3:4a:a9:13:32:78:51:7e:bb:93:
7b:55:9e:c4:98:e1:4b:ec:69:22:70:7f:dc:7e:3c:9b:9d:44:
8b:f4:bd:e9:3b:33:50:94:c0:38:b9:a5:f0:09:33:f1:f1:c9:
35:17:40:b6:4d:85:c9:e5:48:12:82:de:c3:ee:b1:82:d7:b5:
1d:fa:c6:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyl6q/w4JwRKv79mUWGQseXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjYwMjI4MjAyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2U2NmFhOGU0NWFjZjdhNjFkM2NhMjZmOTMzNmFjMzJlNmIyYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroyrBI+yohI/opsuYDBRzNhFofxD
6+KS+od1jyS2sJTT6KRZWpz/HutbNRo4kLUYWRoUXdWkHO3fteX3mNoz9Mt1hfok
zOin+M6DTGbfMKd54cZi1XL74Xm117r1tFT6eKcSYMpuxf36fgogatQMl98UQO+o
jFMNgXwcZ/Ak8knuHNhKXfhlMzNgARkHV+rnq+/phYk/YNxkLMKQl9M5KsXnOz/k
YpSVB2SJ95FMqWWOcZJXgwWVCEHePvYvP2S3g9EnOjtkjErs5kor6To1N44TQAXw
ZF1ribTlLormWl3w08ILpSdCUrZW2PuB21vyh1XdWVpgLUWS6PyW6tU5WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfmaqjkWs96YdPKJvkzasMuayoSMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvZC1acXFPUmF6M3BoMDhvbS1UTnF3eTVyS2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW5ZMA0G
CSqGSIb3DQEBCwUAA4IBAQB/FQCclWsJ19xVI/Vyw+Wpgd4AgqNO9h3PzboNa7Ou
fJGAhWxbxCeZo9OQD4l2L8Yr79XnXszqZd1CA8tdhi/cKajywrwQE4VgP56tmHPI
CFa3kavIihbinrO9ps81++V/CffgC/VKKB7JGXFaapxvftY/syXvkVII/4wvB9f4
CDhq98DnbPaP4tbK2Kyu4NISaRhpz4hBShdL4YbuPKydXKKxnrCKD8pT9Jcs5B0V
/jHeYUzyhcXFYtfAmfNKqRMyeFF+u5N7VZ7EmOFL7GkicH/cfjybnUSL9L3pOzNQ
lMA4uaXwCTPx8ck1F0C2TYXJ5UgSgt7D7rGC17Ud+sbo
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:44 2026 by rpki-client