Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ilX2exgz1gr_3kZHtDepucCBXo8.roa
File: ilX2exgz1gr_3kZHtDepucCBXo8.roa (raw, json)
Hash identifier: njHZm6/hS/ykZh8N013sWNLiYKs0l6hyMF6teKMaR5w=
Subject key identifier: 8A:55:F6:7B:18:33:D6:0A:FF:DE:46:47:B4:37:A9:B9:C0:81:5E:8F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA7635F4A6A05E23947B1F08106B6DA22
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ilX2exgz1gr_3kZHtDepucCBXo8.roa
Signing time: Tue 28 Jul 2026 06:22:15 +0000
ROA not before: Tue 28 Jul 2026 06:22:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 77.67.1.0/24 maxlen: 24
77.67.18.0/24 maxlen: 24
77.67.49.0/24 maxlen: 24
194.77.2.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.91.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
212.189.54.0/24 maxlen: 24
217.8.196.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:63:5f:4a:6a:05:e2:39:47:b1:f0:81:06:b6:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 28 06:22:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a55f67b1833d60affde4647b437a9b9c0815e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:3a:4f:93:13:9e:dc:5d:6e:38:b4:2e:15:
f4:1b:99:99:4b:76:47:70:94:bc:e8:57:ef:10:ab:
71:79:ef:2d:a4:5c:75:b5:0e:de:ae:13:a8:f4:84:
8e:1c:6a:22:16:f6:f7:dc:22:35:8b:e0:3b:af:f2:
18:ca:4b:c6:9e:2b:e4:dd:11:07:b9:0f:38:1d:ed:
2d:fd:94:e2:b5:11:19:d9:b2:bd:43:af:8e:22:50:
61:c3:8e:18:c8:f5:20:9b:0f:08:0a:ca:28:d5:49:
79:53:8f:3d:20:7c:48:0d:2d:34:cd:59:34:be:92:
47:c1:56:28:25:83:ec:8c:2b:15:a6:cb:79:b2:d2:
76:ba:5f:90:e6:bd:b6:6a:ae:ce:f0:dc:7d:5e:cd:
73:b4:c1:49:26:19:d1:a4:6b:81:3e:d0:91:00:9b:
7c:3c:0a:89:dc:93:2c:cd:41:ea:a1:7a:62:95:4e:
05:ad:d5:98:66:a0:9a:a9:6e:8d:16:c1:3c:67:d4:
6b:7b:5f:77:4a:76:63:2e:8c:ef:a7:e0:7f:ed:17:
de:19:5f:ca:7e:58:6f:93:98:13:90:d2:20:1b:8e:
26:ba:65:b4:7e:1e:18:fd:57:25:87:5e:63:35:18:
32:ac:ab:0d:7f:96:7d:1a:c5:51:6b:13:04:fd:06:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:F6:7B:18:33:D6:0A:FF:DE:46:47:B4:37:A9:B9:C0:81:5E:8F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ilX2exgz1gr_3kZHtDepucCBXo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.1.0/24
77.67.18.0/24
77.67.49.0/24
194.77.2.0/24
194.77.26.0/24
194.77.91.0/24
194.122.85.0/24
212.189.24.0/24
212.189.54.0/24
217.8.196.0/24
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:f2:e9:88:ca:23:27:7b:43:10:95:a3:68:f1:00:71:27:ff:
25:d0:ee:fb:4a:7f:97:45:15:ff:67:26:41:50:42:6b:3c:90:
6a:5b:94:27:21:28:1f:e0:06:85:c9:87:cf:fd:c8:e8:c7:04:
48:a7:f8:26:c4:ab:2d:4f:55:27:4c:ad:39:bb:a6:d8:0b:51:
96:2c:bf:b9:0e:05:43:f7:d5:b1:7c:b4:f2:50:3b:b7:02:d9:
c7:5a:70:6b:ce:4c:e2:c6:6f:80:b9:25:62:01:0f:89:6b:b0:
9e:84:ee:c3:5c:68:01:fa:69:44:cf:da:e7:f8:9b:eb:87:8a:
a9:3d:20:af:6a:eb:22:39:fe:be:ba:ce:ef:ac:61:b8:b7:dc:
0c:56:a6:a6:d0:4c:20:2f:3f:e7:fb:2c:13:b8:90:c1:94:c0:
ad:8d:ad:82:96:2c:ea:ec:9d:e8:4c:6c:74:a6:18:72:1c:4c:
e6:31:b0:f0:aa:54:93:63:60:89:30:32:36:b1:11:7f:f4:ae:
96:5a:47:56:f1:b7:ff:6a:1c:bf:d5:a9:13:37:13:9c:04:7c:
f1:0e:0c:56:86:a6:6f:50:08:ed:e3:2f:b6:b6:1a:16:d9:91:
50:c3:4c:b6:5b:62:f3:6b:3f:86:85:fe:e1:0c:87:43:ea:2e:
a3:50:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:19 2026 by rpki-client