Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/fro6TGls5A_k6d-cTWMJbP0QioE.roa
File: fro6TGls5A_k6d-cTWMJbP0QioE.roa (raw, json)
Hash identifier: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=
Subject key identifier: 7E:BA:3A:4C:69:6C:E4:0F:E4:E9:DF:9C:4D:63:09:6C:FD:10:8A:81
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019D7AFF892C5A123B4B84D30F61B868C9B8
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/fro6TGls5A_k6d-cTWMJbP0QioE.roa
Signing time: Sat 11 Apr 2026 05:24:20 +0000
ROA not before: Sat 11 Apr 2026 05:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 77.110.67.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.73.0/24 maxlen: 24
77.110.78.0/24 maxlen: 24
77.110.86.0/24 maxlen: 24
77.110.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7a:ff:89:2c:5a:12:3b:4b:84:d3:0f:61:b8:68:c9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 11 05:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eba3a4c696ce40fe4e9df9c4d63096cfd108a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:eb:dc:64:7f:d8:86:35:b6:ab:ea:46:91:
b8:9b:11:c2:69:de:5e:5e:bf:b3:5a:e3:45:20:92:
7a:94:2c:f0:99:64:ce:4c:b8:51:00:71:e7:4d:29:
35:46:4b:83:b0:1e:12:86:16:21:13:42:90:34:4a:
d9:52:fd:42:f8:8a:09:0c:0b:06:bb:dd:71:f5:b1:
9a:98:c8:05:7e:87:45:b2:07:bf:c0:c8:8f:95:6a:
07:9b:ee:ab:02:66:b7:67:2a:ce:42:d3:bd:6e:12:
74:12:6b:f0:47:b3:c0:be:3d:84:b4:65:7a:72:f1:
0c:15:87:93:d1:ed:23:04:39:62:6d:7a:20:c0:4c:
62:9e:f7:e6:29:e9:57:bc:94:ee:80:7d:9a:9d:37:
6c:45:42:eb:29:72:df:a9:8c:ac:4e:c7:36:69:89:
7f:4b:ef:1b:9f:26:35:20:4d:d2:73:86:63:98:13:
e5:66:ec:9e:6a:99:21:3d:be:bc:b2:85:c1:97:27:
64:3f:76:ec:8e:dd:40:58:22:5a:b3:70:f4:fe:a0:
df:b7:77:09:18:5b:06:f0:35:4a:5e:86:b3:bb:7f:
5d:3f:50:c3:cb:85:88:80:7c:a9:48:4c:c3:43:bf:
8b:93:94:fa:58:40:90:fc:2c:b7:93:4c:15:86:1c:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:3A:4C:69:6C:E4:0F:E4:E9:DF:9C:4D:63:09:6C:FD:10:8A:81
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/fro6TGls5A_k6d-cTWMJbP0QioE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.67.0/24
77.110.69.0/24
77.110.73.0/24
77.110.78.0/24
77.110.86.0/24
77.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ea:84:c8:a4:55:f5:5a:85:e9:ca:a1:de:db:c9:db:f0:f1:
70:28:dc:2c:90:41:1c:13:c5:df:dd:db:7a:f6:db:a6:99:50:
34:35:40:75:bd:f0:cf:98:bf:17:51:e9:32:ea:26:f6:91:2e:
8a:25:f6:47:1a:ba:ad:e2:bf:67:66:e7:af:23:43:3e:a5:c1:
69:77:2c:32:81:a0:c0:89:e9:b8:59:47:9b:e2:b2:f2:ae:f7:
20:5d:e8:88:ed:d3:bd:07:bf:7b:d1:85:89:e9:b5:84:4e:59:
68:33:91:00:04:53:f2:26:73:03:0b:d5:2a:53:2f:d3:24:86:
0a:2f:e3:07:da:13:0a:79:17:b2:ae:2c:f1:d4:12:f2:69:12:
63:23:50:31:84:60:b4:60:a7:01:e8:04:60:ef:13:d4:31:66:
75:f9:fd:5d:ec:e4:d1:ce:c3:37:19:de:87:ad:cf:c6:b8:33:
f3:32:04:9d:2d:29:c1:99:01:53:a7:03:1f:cb:2d:6b:5f:b7:
16:aa:f2:08:dc:be:66:42:19:5a:fc:19:98:36:b7:1a:0c:b8:
a7:f2:ce:dc:31:29:a7:d7:ab:1e:5e:bf:1a:94:62:d7:a5:82:
53:d7:36:cf:76:32:dc:bb:c6:73:65:6d:4a:3a:88:51:a1:2b:
66:0a:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:48 2026 by rpki-client