Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/7P1NmxTBDEHT49XjS37xdv0HWW0.roa
File: 7P1NmxTBDEHT49XjS37xdv0HWW0.roa (raw, json)
Hash identifier: cSJXMiv1wlSUmF1FROdK00apGKOHDsvE7GRfHisp/xM=
Subject key identifier: EC:FD:4D:9B:14:C1:0C:41:D3:E3:D5:E3:4B:7E:F1:76:FD:07:59:6D
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 01A115FEDC088A994EBEB61554D70E3290AC
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/7P1NmxTBDEHT49XjS37xdv0HWW0.roa
Signing time: Wed 07 Oct 2026 10:53:06 +0000
ROA not before: Wed 07 Oct 2026 10:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44431
IP address blocks: 77.70.176.0/22 maxlen: 24
77.70.181.0/24 maxlen: 24
77.70.184.0/21 maxlen: 24
92.43.224.0/21 maxlen: 21
193.220.160.0/24 maxlen: 24
193.220.162.0/23 maxlen: 24
193.220.162.0/24 maxlen: 24
193.220.163.0/24 maxlen: 24
193.220.224.0/20 maxlen: 24
193.220.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:fe:dc:08:8a:99:4e:be:b6:15:54:d7:0e:32:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Oct 7 10:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecfd4d9b14c10c41d3e3d5e34b7ef176fd07596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:71:5d:a2:ad:6a:6c:05:fa:8d:e6:0d:cc:
f3:24:c7:c9:fd:da:6c:13:f5:8c:1e:b6:b5:4a:94:
bd:d1:e8:44:e1:6c:55:76:8f:80:cb:c2:94:9d:b7:
e4:0f:4f:5e:6d:5e:31:86:71:29:27:f6:9e:d5:fc:
eb:9d:be:c2:9f:53:46:e6:47:bf:0e:f9:07:be:d6:
65:94:32:bd:3d:18:52:f6:a5:4d:48:73:8b:c5:7c:
d4:bd:fe:94:37:d6:7e:95:2c:ca:33:bb:e0:2c:e9:
10:07:a0:85:50:49:ed:46:ec:bc:fe:09:39:1a:e5:
8a:1b:00:68:ca:37:74:b3:bd:b4:ed:db:c3:60:19:
f2:50:8d:aa:32:a5:a2:05:cb:d5:6d:a7:4a:1c:87:
dc:c3:d6:de:7d:8e:ce:c7:d3:6d:41:dd:9a:40:29:
18:c2:0f:0c:13:91:d9:ab:db:4f:61:db:a8:b7:39:
b0:53:90:51:da:22:ac:1b:14:58:be:9e:6d:9a:45:
65:ea:55:d5:87:e6:62:ba:10:50:1b:23:0a:5f:71:
af:31:56:1d:61:5c:5e:29:8e:10:c5:66:ed:15:0e:
ba:a5:14:2b:0f:e7:81:8e:84:e4:58:33:c8:bf:c0:
7b:32:be:8e:d1:a5:8c:3e:13:bd:a0:42:a3:d0:2d:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:4D:9B:14:C1:0C:41:D3:E3:D5:E3:4B:7E:F1:76:FD:07:59:6D
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/7P1NmxTBDEHT49XjS37xdv0HWW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.70.176.0/22
77.70.181.0/24
77.70.184.0/21
92.43.224.0/21
193.220.160.0/24
193.220.162.0/23
193.220.224.0/20
Signature Algorithm: sha256WithRSAEncryption
21:95:a0:ed:f6:59:9b:0a:ac:49:0c:2d:e9:0d:16:43:9c:11:
f9:db:c3:09:bb:79:dc:12:10:bf:e1:52:37:46:42:42:69:ba:
f1:b1:04:c5:08:09:2f:5f:e1:f9:ad:5f:66:f3:1a:79:73:ee:
9c:d5:f6:63:21:5c:38:84:ee:90:be:54:37:b2:f0:f3:8e:5d:
fc:f5:d8:a3:4a:b5:56:b4:4f:0c:84:a7:71:f7:ad:37:9a:53:
ff:3f:29:01:8c:f3:c3:f6:af:18:11:80:7e:55:c4:46:33:78:
74:93:75:95:c8:c5:fd:5c:24:3a:96:f1:6f:ae:76:93:51:08:
c3:7c:1c:e6:25:52:2d:46:93:81:30:b8:2d:75:c0:25:5b:58:
bb:e4:29:64:97:7e:e0:72:bc:46:4d:66:7d:da:cd:e5:98:e8:
65:01:3a:11:37:a4:6a:b3:fc:5e:61:d8:f3:99:9b:6a:d6:a9:
f1:9a:b9:78:e0:d3:6d:50:26:f6:dc:0f:a8:db:ba:13:7b:fe:
2c:0d:b1:c6:d6:a2:65:bb:13:83:3e:4b:5b:47:4f:26:51:d6:
87:f4:bc:ee:5e:07:29:26:00:62:4c:1a:a9:27:42:21:a9:f6:
3e:d1:4b:5e:b3:19:1a:71:92:4a:bf:06:03:f8:5d:c0:04:f0:
b8:c3:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:11 2026 by rpki-client