Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/flQ-yefSiQHGZz97KO5IHBGjVU8.roa
File: flQ-yefSiQHGZz97KO5IHBGjVU8.roa (raw, json)
Hash identifier: ZG9epgiDm+9lTQmHHzuoui4Fm9q9wphSAijEPm2kePQ=
Subject key identifier: 7E:54:3E:C9:E7:D2:89:01:C6:67:3F:7B:28:EE:48:1C:11:A3:55:4F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019D9C2CEC498265877593C0B26FC006AA26
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/flQ-yefSiQHGZz97KO5IHBGjVU8.roa
Signing time: Fri 17 Apr 2026 16:01:22 +0000
ROA not before: Fri 17 Apr 2026 16:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 77.246.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:ec:49:82:65:87:75:93:c0:b2:6f:c0:06:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 17 16:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e543ec9e7d28901c6673f7b28ee481c11a3554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:b0:35:c0:f4:61:79:ee:08:09:23:35:cf:
db:d3:ae:5f:6f:eb:67:f4:b3:e1:a6:4d:3a:fe:c1:
81:4f:36:97:5e:1b:15:bd:d2:73:73:ba:6c:44:4c:
16:02:09:27:1a:2f:75:ef:d7:f3:71:d1:5d:91:28:
1e:fc:81:83:de:d5:8c:b0:09:3a:3f:8a:40:75:ea:
4d:2f:24:39:dd:a5:99:b8:77:50:53:fb:c3:03:bc:
8b:d2:ae:b5:43:14:73:8a:ec:39:6d:a6:df:9f:26:
cb:0f:10:13:b6:4d:4e:b8:b6:1e:0d:24:ca:a6:bb:
30:81:7d:19:43:95:58:1a:aa:9f:b7:4c:01:8e:26:
81:13:9d:a4:59:c1:85:41:dd:d3:97:96:f8:94:9d:
65:25:9e:53:14:58:c4:84:f3:f9:3c:56:20:7e:1a:
04:12:5f:2b:94:e1:5f:8c:9d:2b:1d:10:5d:b8:6f:
80:63:fe:d5:6a:e8:26:48:ab:2d:9f:6b:fc:d1:68:
d4:20:3d:9c:55:05:6a:29:f2:83:b7:2b:6a:cb:5e:
ae:ca:16:f4:6d:b0:08:9f:73:a5:ac:cc:5d:6d:b7:
88:fb:a6:10:17:2e:20:16:12:69:b1:11:d7:ee:f4:
1e:d6:bf:3f:d7:f5:b6:e4:9a:e4:71:39:a5:7d:8a:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:3E:C9:E7:D2:89:01:C6:67:3F:7B:28:EE:48:1C:11:A3:55:4F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/flQ-yefSiQHGZz97KO5IHBGjVU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:21:4d:b4:2d:47:6f:4d:11:9d:c4:67:74:91:f7:7a:5c:ed:
3d:98:4e:49:06:d1:21:1a:49:74:a6:bd:65:fd:63:2b:a1:08:
94:c1:23:73:c9:19:77:62:3c:55:0c:85:8e:d3:d3:18:63:55:
8b:07:83:30:1a:03:c3:8e:d1:79:4d:ac:3d:29:8b:fe:51:0c:
42:db:31:d3:52:15:6b:a2:68:3c:f1:eb:0b:5b:e3:7a:a5:79:
4a:ed:86:3d:f7:23:d0:0b:65:46:50:eb:d7:70:b2:90:a1:cf:
20:55:e3:76:64:66:fb:0d:c9:e6:b3:2f:60:c7:fd:33:f0:93:
91:0c:df:36:cd:23:b9:6d:f7:4a:f2:f8:a6:f7:da:29:83:0e:
a0:8c:0e:7a:08:65:16:27:6e:49:36:6e:51:b9:e3:d8:94:0e:
01:32:1b:7e:ba:df:c0:d0:3e:e6:bb:d7:25:79:7b:c0:d0:56:
67:cc:2c:35:5a:50:44:80:6e:e1:d0:2b:12:37:49:dc:22:d9:
5b:ef:a6:a6:ab:54:29:58:e1:91:08:4e:36:77:d2:6a:91:f4:
8e:f2:06:1f:82:f2:d3:84:79:b2:76:b7:ad:14:71:f7:e0:f5:
c5:7e:50:8b:c8:cc:86:69:1e:2b:f6:ee:ac:8e:4d:b0:68:01:
37:ef:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:32 2026 by rpki-client