Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/OFtVY85hllJ2JhFdY0oBrhrDglk.roa
File: OFtVY85hllJ2JhFdY0oBrhrDglk.roa (raw, json)
Hash identifier: ixOZNGs39FuvyZqt7XpiB2gK7lU4Kgko6Nu9gQDJIEg=
Subject key identifier: 38:5B:55:63:CE:61:96:52:76:26:11:5D:63:4A:01:AE:1A:C3:82:59
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019D86DC55ED85E5A9C1AF3826BD2285BB00
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/OFtVY85hllJ2JhFdY0oBrhrDglk.roa
Signing time: Mon 13 Apr 2026 12:41:20 +0000
ROA not before: Mon 13 Apr 2026 12:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42868
IP address blocks: 77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:dc:55:ed:85:e5:a9:c1:af:38:26:bd:22:85:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Apr 13 12:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=385b5563ce6196527626115d634a01ae1ac38259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:5a:d7:34:78:db:0c:84:a5:7f:67:8b:77:
d9:52:d6:56:f0:67:50:1b:77:38:9e:f1:80:8c:e5:
9e:26:f4:c0:87:6a:a7:62:45:08:5b:7e:68:5c:7e:
16:84:ce:80:0a:cd:0b:80:10:b7:98:bd:b6:55:f9:
57:32:54:e8:ff:8b:47:0f:1e:23:a7:19:53:d7:eb:
99:b3:f4:c4:dc:2e:a8:7a:34:49:e2:9f:5c:7d:8c:
a9:b6:96:ee:1b:d9:fb:0d:3a:2b:99:2e:b8:72:12:
6b:dd:ef:d8:19:3b:ff:c9:56:55:4c:15:27:90:da:
ac:00:7f:c5:6d:5c:46:54:22:2f:2a:b6:dc:57:3a:
15:35:ac:8e:b7:4f:7a:9a:9e:bc:4b:36:aa:7e:23:
ac:28:42:3d:d9:eb:b8:20:f5:e0:04:5b:77:ae:fc:
17:ab:0b:d6:4f:4b:60:09:de:3e:a8:00:92:27:e4:
a0:0d:ee:5a:e2:a7:d7:9c:bd:33:5a:f3:7d:a5:88:
47:ac:8d:62:13:86:31:e6:55:70:6f:de:4a:35:79:
21:76:f1:7c:28:43:dd:44:dd:7c:43:9e:ab:ac:46:
3f:7f:ac:e4:10:d9:76:66:ab:d9:be:d2:79:94:56:
8e:09:29:dc:0e:8f:fe:7a:2f:ea:1b:88:a9:95:78:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:55:63:CE:61:96:52:76:26:11:5D:63:4A:01:AE:1A:C3:82:59
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/OFtVY85hllJ2JhFdY0oBrhrDglk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0-77.245.156.255
77.245.158.0/23
178.210.161.0/24
178.210.168.0/24
185.87.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:92:70:10:9d:37:b2:28:52:13:a5:0a:b3:5d:cd:b3:05:02:
a1:62:cb:d8:51:ce:1a:b9:e8:08:77:33:7f:dd:0a:d5:1c:6f:
e9:b2:24:e7:d0:f7:ea:6d:52:ef:6f:f2:31:66:fc:f6:88:89:
46:1f:8a:f5:d8:6e:c5:b2:7c:93:5f:46:63:2a:8f:0e:1e:fb:
f2:15:9e:a4:88:f0:62:66:40:b6:4d:d5:68:8c:4b:5e:32:31:
7e:60:5d:7c:c2:2d:f1:bd:41:01:e4:8d:d3:3b:fb:57:16:ac:
5d:f9:33:d9:fe:92:d1:45:a2:5c:c1:b6:4a:82:05:b2:64:15:
e9:0c:a0:a7:9d:56:68:98:2e:5e:96:44:8e:b5:38:55:6a:0c:
66:e3:49:2f:6a:7a:33:72:68:d5:76:21:f5:59:7f:ec:04:b3:
c8:df:21:56:23:2b:68:1c:d9:34:73:a0:21:2d:2c:ac:c3:ed:
e8:b7:ea:21:e1:ed:db:e4:c0:a8:ba:80:e8:07:3d:6d:07:0c:
92:5d:91:56:8e:23:72:b2:97:a4:a3:13:95:ea:ae:22:27:80:
08:2a:fa:9c:cb:37:31:f3:cc:23:ac:8b:43:70:a8:54:73:ba:
6f:1c:c0:f4:64:de:b2:64:be:42:86:45:ea:9d:5b:22:f2:66:
13:d0:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:56 2026 by rpki-client