Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wG_F2AeqH9W4WUcX2W3unuL-tl4.roa
File: wG_F2AeqH9W4WUcX2W3unuL-tl4.roa (raw, json)
Hash identifier: xdF8gB6XXx1a52m4TcRqB+74/DTO9lozN86CKYiYnKE=
Subject key identifier: C0:6F:C5:D8:07:AA:1F:D5:B8:59:47:17:D9:6D:EE:9E:E2:FE:B6:5E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A08F8932199569B666ED22805557D9ED85
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wG_F2AeqH9W4WUcX2W3unuL-tl4.roa
Signing time: Fri 11 Sep 2026 08:15:28 +0000
ROA not before: Fri 11 Sep 2026 08:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400618
IP address blocks: 77.67.126.0/23 maxlen: 24
194.77.76.0/23 maxlen: 24
212.189.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:89:32:19:95:69:b6:66:ed:22:80:55:57:d9:ed:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 08:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c06fc5d807aa1fd5b8594717d96dee9ee2feb65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:2f:a1:cc:36:44:14:20:8f:18:2f:a9:80:
bb:b8:08:33:59:27:9c:fe:df:47:52:03:9f:60:76:
66:71:b6:02:fa:a9:7b:bc:43:b0:9c:4e:2f:90:6c:
17:09:21:c5:5c:4e:2e:9e:6b:15:d9:65:9b:8b:c7:
0a:c6:52:99:0f:1b:e1:68:34:26:bc:2b:86:e8:17:
53:a4:d6:da:66:24:97:d8:2b:a0:50:d4:7f:00:3a:
a0:58:b8:ab:d4:b3:98:4d:43:a7:71:21:31:5f:5c:
06:44:7f:73:02:9e:69:23:ef:99:64:fa:58:8a:4c:
fe:4e:8b:c2:94:0b:79:b9:8f:9a:06:3c:6d:57:f7:
e4:c2:64:8e:b2:0c:ed:51:18:8c:a1:33:c7:dd:6c:
0f:19:f6:43:f5:f7:b3:0b:cf:6e:6b:53:a0:c3:17:
5c:4d:1e:e3:b3:b3:fd:e9:7d:8e:8d:98:1f:a9:e1:
13:d1:d0:1b:e7:40:8c:51:d4:2c:bf:0e:16:b9:32:
91:79:1d:ba:86:a5:c3:c5:ea:d6:fc:53:a7:50:e4:
a5:11:98:7b:65:9a:18:82:d0:00:14:10:54:01:24:
5e:ea:9e:9f:31:ed:98:64:1b:1d:9e:ff:88:4a:96:
cf:55:96:f5:51:f3:35:a2:8a:8a:20:c3:c2:d9:e1:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:C5:D8:07:AA:1F:D5:B8:59:47:17:D9:6D:EE:9E:E2:FE:B6:5E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wG_F2AeqH9W4WUcX2W3unuL-tl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.126.0/23
194.77.76.0/23
212.189.100.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:5b:29:f2:5b:87:4e:b9:24:57:11:8c:bd:95:57:a6:c9:fd:
68:c3:32:a8:f4:70:f6:6c:07:bd:31:fe:59:7b:f8:7f:43:a4:
36:d2:65:9a:62:94:d2:1d:64:cb:b3:b1:9c:04:fd:2b:ef:c9:
e9:5f:9f:ab:d4:42:a3:3f:84:c8:f4:92:9d:8a:06:89:af:30:
a1:97:46:c6:6c:37:28:b4:5a:98:5a:a2:62:13:ea:72:e4:82:
82:b4:82:e0:57:4d:e8:00:d9:1c:34:23:aa:32:c7:a6:ec:15:
3e:64:3f:36:39:69:94:0d:92:fd:21:02:90:4c:25:e4:43:f3:
e4:f4:55:ec:8c:18:64:c0:5f:0c:4c:05:c6:3a:3e:e5:97:f2:
58:43:2e:65:df:33:76:35:dc:84:28:45:ae:b1:7b:f0:32:83:
4c:12:c8:61:3b:33:91:17:4b:8d:0e:c0:48:3e:30:dc:ef:5a:
0f:f2:58:ff:c0:67:95:af:9b:c4:1f:a7:b8:6b:7a:6e:8a:0b:
02:2f:45:28:d7:52:47:1f:81:3b:b3:e3:13:18:f7:cf:e2:77:
d0:19:69:8d:d5:a0:94:97:7c:d1:29:5c:1b:73:ce:ae:a8:38:
66:b9:e8:81:bc:76:e1:2a:16:fe:39:be:1c:6b:62:b7:87:68:
1d:8b:1d:a9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaCPiTIZlWm2Zu0igFVX2e2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTExMDgxNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDZmYzVkODA3YWExZmQ1Yjg1OTQ3MTdkOTZkZWU5ZWUyZmViNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZEvocw2RBQgjxgvqYC7uAgzWSec
/t9HUgOfYHZmcbYC+ql7vEOwnE4vkGwXCSHFXE4unmsV2WWbi8cKxlKZDxvhaDQm
vCuG6BdTpNbaZiSX2CugUNR/ADqgWLir1LOYTUOncSExX1wGRH9zAp5pI++ZZPpY
ikz+TovClAt5uY+aBjxtV/fkwmSOsgztURiMoTPH3WwPGfZD9fezC89ua1Ogwxdc
TR7js7P96X2OjZgfqeET0dAb50CMUdQsvw4WuTKReR26hqXDxerW/FOnUOSlEZh7
ZZoYgtAAFBBUASRe6p6fMe2YZBsdnv+ISpbPVZb1UfM1ooqKIMPC2eH5wwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMBvxdgHqh/VuFlHF9lt7p7i/rZeMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvd0dfRjJBZXFIOVc0V1VjWDJXM3VudUwtdGw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBTUN+AwQB
wk1MAwQB1L1kMA0GCSqGSIb3DQEBCwUAA4IBAQAOWynyW4dOuSRXEYy9lVemyf1o
wzKo9HD2bAe9Mf5Ze/h/Q6Q20mWaYpTSHWTLs7GcBP0r78npX5+r1EKjP4TI9JKd
igaJrzChl0bGbDcotFqYWqJiE+py5IKCtILgV03oANkcNCOqMsem7BU+ZD82OWmU
DZL9IQKQTCXkQ/Pk9FXsjBhkwF8MTAXGOj7ll/JYQy5l3zN2NdyEKEWusXvwMoNM
EshhOzORF0uNDsBIPjDc71oP8lj/wGeVr5vEH6e4a3puigsCL0Uo11JHH4E7s+MT
GPfP4nfQGWmN1aCUl3zRKVwbc86uqDhmueiBvHbhKhb+Ob4ca2K3h2gdix2p
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:26 2026 by rpki-client