Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/C7ABxIBMFqY6WGHp-m3XASsH6n0.roa
File: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (raw, json)
Hash identifier: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=
Subject key identifier: 0B:B0:01:C4:80:4C:16:A6:3A:58:61:E9:FA:6D:D7:01:2B:07:EA:7D
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019FA3B54802BEE00CB899106FA42B611891
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/C7ABxIBMFqY6WGHp-m3XASsH6n0.roa
Signing time: Mon 27 Jul 2026 13:13:14 +0000
ROA not before: Mon 27 Jul 2026 13:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 80.66.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:b5:48:02:be:e0:0c:b8:99:10:6f:a4:2b:61:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jul 27 13:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bb001c4804c16a63a5861e9fa6dd7012b07ea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:48:b9:fa:f3:39:be:1a:26:23:f7:bb:25:
92:cc:34:55:c4:1a:26:8e:24:36:2b:98:14:68:33:
ab:4b:6e:4b:c6:85:71:8b:09:dc:43:00:a7:18:9e:
da:f2:fc:db:14:db:ec:16:fb:a9:f2:95:92:c8:68:
bd:0f:c2:03:5f:a3:c3:3b:34:eb:ba:17:cd:6f:f1:
64:71:7a:f6:64:e1:3f:f5:f2:3d:15:9b:7d:da:a0:
4b:40:f0:06:9b:06:ec:e5:cb:ce:b4:a3:ef:a5:5b:
34:4d:68:0f:a4:fb:3e:b6:e0:30:e9:07:9e:53:e7:
18:10:95:c5:e8:7b:d5:78:5a:7c:ff:17:64:f1:1b:
f6:79:94:4a:48:bd:6b:9d:d8:4e:f9:60:4d:b2:d6:
d9:59:00:e9:87:f6:f7:fa:5c:8c:47:34:cb:0a:cc:
d9:da:c4:0a:3d:42:b7:74:c0:7a:aa:ec:04:95:d4:
27:fc:59:99:d2:13:35:bc:35:4b:7e:5e:12:ea:4c:
88:80:29:53:49:02:af:93:f8:97:6c:1b:bf:d8:51:
e7:2f:76:05:48:0c:b9:01:60:ef:b2:70:3c:1a:53:
eb:b0:2f:d8:c4:8a:21:0c:f5:e0:ca:2b:f9:50:d6:
90:d5:1c:04:e4:3b:06:80:ce:b0:90:92:e3:05:05:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:01:C4:80:4C:16:A6:3A:58:61:E9:FA:6D:D7:01:2B:07:EA:7D
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/C7ABxIBMFqY6WGHp-m3XASsH6n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fd:32:0e:32:e6:e6:9f:e0:3a:5c:68:61:16:31:80:24:00:
6d:8a:c3:e2:7f:08:47:43:b8:2b:9f:13:31:f9:8f:da:54:44:
0a:ca:9a:68:05:4c:ab:5c:a3:86:b0:42:29:fd:25:34:c5:a8:
8b:0d:cc:f4:98:87:2c:d7:0d:2b:d9:67:d1:44:e7:f1:5b:11:
09:8c:c8:c8:15:aa:c3:2d:7c:28:32:39:49:83:3e:af:61:11:
5f:2f:4c:13:56:fd:f4:b5:75:6b:8c:db:db:c6:31:17:1f:d8:
fe:53:6e:b6:7d:8e:ba:9b:91:34:c2:e7:d0:f8:02:9f:9f:fa:
bb:51:ab:7a:18:73:68:a6:ef:a8:81:62:4d:6e:10:72:cd:e3:
d4:54:7c:c1:3c:07:7b:9c:2f:21:79:b0:14:76:c8:b6:a0:fb:
de:c2:1c:06:34:c7:37:2f:08:59:30:cd:fd:01:1e:0d:24:b8:
29:b3:30:29:d7:82:3c:cb:f6:d4:85:38:28:82:08:15:f0:0d:
0c:5b:64:c5:be:b9:ba:65:a8:75:6f:e3:0b:03:c8:c0:48:49:
62:68:a3:55:b2:79:7c:ed:e3:c7:cc:ce:ef:94:a8:48:39:db:
e2:66:ee:99:1c:87:b9:65:54:74:eb:1b:d3:63:b8:60:6c:cb:
e3:03:48:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+jtUgCvuAMuJkQb6QrYRiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjYwNzI3MTMxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmIwMDFjNDgwNGMxNmE2M2E1ODYxZTlmYTZkZDcwMTJiMDdlYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMJIufrzOb4aJiP3uyWSzDRVxBom
jiQ2K5gUaDOrS25LxoVxiwncQwCnGJ7a8vzbFNvsFvup8pWSyGi9D8IDX6PDOzTr
uhfNb/FkcXr2ZOE/9fI9FZt92qBLQPAGmwbs5cvOtKPvpVs0TWgPpPs+tuAw6Qee
U+cYEJXF6HvVeFp8/xdk8Rv2eZRKSL1rndhO+WBNstbZWQDph/b3+lyMRzTLCszZ
2sQKPUK3dMB6quwEldQn/FmZ0hM1vDVLfl4S6kyIgClTSQKvk/iXbBu/2FHnL3YF
SAy5AWDvsnA8GlPrsC/YxIohDPXgyiv5UNaQ1RwE5DsGgM6wkJLjBQWELQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuwAcSATBamOlhh6fpt1wErB+p9MB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvQzdBQnhJQk1GcVk2V0dIcC1tM1hBU3NINm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJNMA0G
CSqGSIb3DQEBCwUAA4IBAQA1/TIOMubmn+A6XGhhFjGAJABtisPifwhHQ7grnxMx
+Y/aVEQKyppoBUyrXKOGsEIp/SU0xaiLDcz0mIcs1w0r2WfRROfxWxEJjMjIFarD
LXwoMjlJgz6vYRFfL0wTVv30tXVrjNvbxjEXH9j+U262fY66m5E0wufQ+AKfn/q7
Uat6GHNopu+ogWJNbhByzePUVHzBPAd7nC8hebAUdsi2oPvewhwGNMc3LwhZMM39
AR4NJLgpszAp14I8y/bUhTgogggV8A0MW2TFvrm6Zah1b+MLA8jASEliaKNVsnl8
7ePHzM7vlKhIOdviZu6ZHIe5ZVR06xvTY7hgbMvjA0jt
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:01:38 2026 by rpki-client