Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/51xyZMsxaXGKNdh97lcPN-9H0EY.roa
File: 51xyZMsxaXGKNdh97lcPN-9H0EY.roa (raw, json)
Hash identifier: tXYqOu4Zd5nQ610cw+x8LOJEcFbWtVFQWv9fUOA5TZE=
Subject key identifier: E7:5C:72:64:CB:31:69:71:8A:35:D8:7D:EE:57:0F:37:EF:47:D0:46
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019D8668FAFD004E7796DBE05FF0FFE2B671
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/51xyZMsxaXGKNdh97lcPN-9H0EY.roa
Signing time: Mon 13 Apr 2026 10:35:20 +0000
ROA not before: Mon 13 Apr 2026 10:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:68:fa:fd:00:4e:77:96:db:e0:5f:f0:ff:e2:b6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 13 10:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75c7264cb3169718a35d87dee570f37ef47d046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:1c:3e:38:56:bb:8c:3e:ba:76:18:32:6f:
3c:1e:24:5a:f2:2c:bc:9a:d6:bf:3d:8c:c1:35:a3:
3c:f6:c6:3d:b5:e3:a5:de:5d:79:7d:e3:c9:cc:17:
a3:da:71:b2:ad:74:20:b5:be:cc:f0:af:ce:66:9d:
2d:2c:03:bf:1a:66:c1:32:94:e1:cc:e1:e8:db:0b:
18:cc:6e:21:a3:8c:b3:fe:2b:14:58:35:40:1e:20:
09:3a:38:5e:4b:7c:93:66:80:fe:37:61:ac:ce:33:
64:58:bf:bd:03:86:38:db:b8:79:17:76:8a:c7:1c:
bb:f1:03:79:ab:3a:98:2a:c8:4a:0c:df:fc:2b:72:
e4:69:9b:fd:01:52:5b:c6:4f:8f:6a:56:2d:1a:99:
9d:9b:08:0d:43:b1:0f:73:25:0f:88:96:32:b6:37:
18:30:7d:a1:05:37:5a:61:ad:8a:4f:2b:b9:7b:bb:
ea:11:31:ca:a3:2f:38:51:15:38:3f:10:bf:e8:c5:
8f:3b:c1:c7:01:92:c3:0d:7f:93:f7:9c:ca:17:68:
19:04:7c:ed:1d:8a:67:a7:7d:b5:f4:2b:29:1b:47:
fe:b6:66:05:ae:dd:3a:d3:fc:64:f5:13:24:d6:c9:
96:e9:bd:fe:85:ef:84:cd:11:3d:4a:97:70:b4:ec:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:72:64:CB:31:69:71:8A:35:D8:7D:EE:57:0F:37:EF:47:D0:46
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/51xyZMsxaXGKNdh97lcPN-9H0EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.152.0/22
77.47.178.0/24
77.47.210.0/23
77.47.242.0/24
77.47.252.0/22
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.144.0-195.178.149.255
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.200.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
18:80:cc:5b:43:51:cf:95:76:aa:be:fe:0e:91:a5:0c:4b:c3:
ea:48:66:32:9a:8a:89:ae:00:a7:9f:ac:c0:03:1f:a3:88:ee:
cf:b0:67:f2:9e:a1:d0:00:cc:3a:7e:88:b2:aa:10:17:23:8f:
85:ed:c8:8f:e9:5f:82:87:fb:2e:2d:c2:1e:0e:3f:df:a4:ab:
d4:0d:1c:9c:a5:8e:4e:0c:d0:82:ad:76:22:ab:be:f9:fd:02:
dd:8f:f2:c4:0e:ad:f7:43:42:1d:ef:0d:2e:7c:60:eb:8c:d1:
ba:8f:39:45:48:59:25:55:56:77:ba:5a:de:95:f5:c3:2e:5c:
45:15:de:6d:f4:e1:d8:60:fd:86:43:1f:40:b0:a5:5a:1e:f9:
d0:27:c5:46:98:df:62:63:cd:7c:62:ae:a8:fe:6a:86:6a:d0:
c9:16:70:02:b7:52:93:7e:af:77:5e:3a:a7:fd:e5:73:bf:c2:
14:d5:be:67:80:32:d5:4f:e4:fe:4e:6f:81:e7:e9:36:e1:8c:
ca:b2:b1:9c:a8:d2:cb:ff:26:e3:07:f4:33:14:a6:e9:d7:20:
df:eb:b8:b0:45:49:af:89:ff:54:98:86:7d:5a:ef:6a:53:b5:
dc:03:fd:5e:df:64:9f:c2:2a:60:67:7f:3b:72:61:e0:6d:bb:
c7:22:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:12:02 2026 by rpki-client