Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ca8xa9JDiaE37AlgUK6LYbFNiME.roa
File: ca8xa9JDiaE37AlgUK6LYbFNiME.roa (raw, json)
Hash identifier: 3lBYgnOHMNoJpJLLcrvQZzOKdkSFUEb+zTKdQontTOQ=
Subject key identifier: 71:AF:31:6B:D2:43:89:A1:37:EC:09:60:50:AE:8B:61:B1:4D:88:C1
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0C007F10E5740F9443FD51F984A5EC29C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ca8xa9JDiaE37AlgUK6LYbFNiME.roa
Signing time: Sun 20 Sep 2026 18:15:41 +0000
ROA not before: Sun 20 Sep 2026 18:15:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214727
IP address blocks: 77.94.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:07:f1:0e:57:40:f9:44:3f:d5:1f:98:4a:5e:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Sep 20 18:15:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71af316bd24389a137ec096050ae8b61b14d88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:16:48:e7:2f:41:34:a3:10:91:76:8f:4e:
4d:7b:da:cd:43:50:2c:02:21:d4:66:06:34:df:9e:
52:ee:82:52:bc:f4:6b:b3:01:80:87:ff:3b:da:ef:
00:0f:da:6c:8a:63:5f:7a:d1:7e:fa:6c:f9:d0:dc:
b7:37:ec:ec:8a:34:cb:71:e3:b3:ef:b9:87:27:e8:
27:2b:db:03:22:88:57:de:21:8b:9f:f8:2b:31:84:
e1:d5:7a:f3:1a:04:4c:9e:25:71:d0:0f:26:cf:cb:
36:0d:58:67:02:31:9c:4f:60:78:08:77:58:08:aa:
a6:48:20:1d:23:9b:37:67:5e:25:6a:40:6c:e4:02:
2e:ac:26:82:e9:d0:77:47:72:80:fb:f7:9d:25:af:
75:df:e8:48:35:17:5f:16:89:b2:25:89:3d:62:d5:
25:f0:be:4a:b8:f4:b7:ef:06:3a:b0:c9:5c:a0:6e:
55:28:ce:ef:43:fa:d2:3e:f1:cd:ce:ad:14:b0:3f:
d0:9d:b7:fa:c7:1b:73:75:57:7a:59:2e:19:a8:b0:
23:e8:a2:ab:87:8d:57:15:92:06:e7:fc:1e:b9:cf:
1d:f7:4d:c3:60:ed:f7:2b:23:3c:75:e4:4b:d6:9a:
e7:37:6e:78:3e:ef:7e:59:fb:67:ff:43:6d:47:1e:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:31:6B:D2:43:89:A1:37:EC:09:60:50:AE:8B:61:B1:4D:88:C1
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ca8xa9JDiaE37AlgUK6LYbFNiME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.0.0/24
Signature Algorithm: sha256WithRSAEncryption
04:99:7c:f0:95:82:f4:9f:ac:36:b1:4a:cf:05:46:b8:c1:91:
65:c8:62:c6:6c:dc:e7:0a:a6:19:cb:bc:e2:f2:7b:bc:09:98:
c2:54:8e:cf:6a:d9:97:1b:e7:e6:14:f3:e0:cf:d1:f8:b8:57:
c1:31:40:c2:40:a5:4e:2f:62:91:6f:3d:59:22:b9:e8:5d:b9:
59:3c:46:90:f5:2f:a2:68:f1:64:33:0b:c5:11:dd:6c:03:8b:
05:9c:18:80:51:9f:88:6f:1e:62:99:35:36:c6:d8:29:d3:82:
b4:11:c4:7e:1d:1d:73:85:3b:fa:d9:c0:e4:e9:27:18:ee:42:
da:4f:03:d4:60:69:56:db:15:8f:8e:e2:13:d4:7c:53:15:09:
b6:38:c3:25:8d:65:70:75:b8:c7:72:10:7b:31:a2:c5:82:2e:
9a:14:f9:d8:33:8e:38:f0:04:24:f3:19:94:6a:ce:bf:dd:88:
4b:98:a4:27:f1:f0:08:45:65:ad:aa:9e:37:f3:12:1a:04:4c:
f3:16:1f:23:93:d7:0d:f8:35:28:8c:71:0a:bd:74:42:f2:0c:
45:c5:c7:66:8e:0d:f5:6b:4d:99:11:f3:73:04:c5:f9:4e:ea:
1a:c7:60:34:af:5d:4d:c4:a7:83:8a:85:fd:5a:50:cb:4e:b6:
17:6f:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:04 2026 by rpki-client