Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dTDMXkwh1VNlORnN8TITRb8eV-I.roa
File: dTDMXkwh1VNlORnN8TITRb8eV-I.roa (raw, json)
Hash identifier: DlMY6DKti25TuHXzF9Hc3vdqG7pW374Zi3sMlEUzoWo=
Subject key identifier: 75:30:CC:5E:4C:21:D5:53:65:39:19:CD:F1:32:13:45:BF:1E:57:E2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A070E9BA5FF7F6973D6CFA8308633ECC0C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dTDMXkwh1VNlORnN8TITRb8eV-I.roa
Signing time: Sat 05 Sep 2026 09:32:40 +0000
ROA not before: Sat 05 Sep 2026 09:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 77.81.88.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
78.17.182.0/24 maxlen: 24
78.17.255.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
89.125.20.0/24 maxlen: 24
89.125.252.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
104.143.203.0/24 maxlen: 24
104.143.216.0/24 maxlen: 24
162.35.226.0/24 maxlen: 24
162.35.228.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:e9:ba:5f:f7:f6:97:3d:6c:fa:83:08:63:3e:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 5 09:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7530cc5e4c21d553653919cdf1321345bf1e57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:7b:6f:5c:db:c8:a9:24:92:98:b0:35:3e:
d2:9c:54:31:a7:f8:9c:f1:ba:08:ac:dc:45:94:85:
cf:55:61:73:b7:e4:e5:d0:71:4d:64:da:1b:a6:91:
ef:be:84:5e:44:7b:9c:96:0c:a7:f4:aa:0f:91:a7:
bf:55:ab:12:0f:58:f3:75:c9:c1:84:81:6b:5e:99:
95:44:ab:3b:08:f8:24:d0:33:ea:bd:9f:0c:25:32:
13:3e:ec:5f:a2:c8:8b:a0:a0:67:03:20:aa:66:11:
73:08:f0:70:07:d6:99:91:27:a1:ed:df:ee:9a:1a:
c7:f1:0c:61:7e:25:01:57:88:b4:bc:02:d3:79:3c:
cc:9f:42:aa:a6:64:f5:4b:6e:dc:38:f3:c5:95:c2:
31:12:59:1f:2c:22:10:69:4b:bd:ec:9a:eb:7d:e8:
ed:dc:75:24:0b:c8:bd:7b:d5:68:c0:a0:c1:15:22:
6c:44:99:ea:7d:62:86:c7:ce:52:63:5f:ee:2b:f7:
cf:1d:f8:99:9d:59:8f:a5:03:c8:a6:7f:60:83:84:
32:14:da:77:97:ac:ce:00:a5:ab:00:52:d4:7c:1c:
62:4f:75:40:fd:2e:1f:cd:a4:ff:5b:96:6b:49:a3:
e2:ff:70:77:02:a7:92:af:3e:3d:6b:b0:d4:ee:90:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:CC:5E:4C:21:D5:53:65:39:19:CD:F1:32:13:45:BF:1E:57:E2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dTDMXkwh1VNlORnN8TITRb8eV-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
77.81.100.0/24
78.17.182.0/24
78.17.255.0/24
86.105.4.0/24
86.107.51.0/24
89.37.194.0/24
89.43.62.0/24
89.45.162.0/24
89.125.20.0/24
89.125.252.0/24
93.90.75.0/24
93.115.105.0/24
104.143.203.0/24
104.143.216.0/24
162.35.226.0/24
162.35.228.0/24
188.241.137.0/24
212.192.5.0/24
212.192.10.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b9:5e:0f:de:7f:32:ec:ad:96:f5:c8:f4:f9:92:e9:81:ae:
e5:f0:fb:d6:d9:2b:ef:82:c2:51:20:30:f2:84:45:86:2f:d7:
e6:0d:0e:6e:96:67:44:b4:ec:99:dc:7e:29:7e:09:af:b8:aa:
47:8b:b1:48:99:6f:a9:3a:79:86:80:3c:93:3d:46:29:3b:b5:
0e:a7:66:85:d8:e1:eb:49:35:ce:5c:90:4d:a2:f2:15:5a:dc:
74:00:95:03:61:50:7d:23:01:2b:26:0f:12:80:8e:4d:41:e3:
46:81:d0:ee:64:89:89:c1:0d:98:f1:15:5d:0a:bb:45:97:0d:
fa:b4:3b:f0:51:69:7f:ff:39:a7:d6:79:70:33:c2:63:44:ce:
40:6b:78:dc:8a:14:cb:fe:a6:c8:cb:76:1f:a1:9e:02:62:5b:
ba:91:27:57:c9:fd:b9:81:20:b6:79:73:71:2e:f2:ab:a5:2e:
3e:74:85:96:c9:23:25:f4:ba:1d:a6:86:2e:8c:ae:bf:6b:98:
18:68:23:3e:56:a4:c1:b8:e1:79:98:73:65:4b:7a:51:55:06:
48:81:fb:f9:b8:56:e3:c6:99:3b:33:d7:c5:5e:d7:8f:32:a9:
fc:df:82:f0:59:ec:be:43:68:b0:8b:c8:c4:cb:16:1d:9a:6e:
76:f5:14:9b
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAaBw6bpf9/aXPWz6gwhjPswMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTA1MDkzMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTMwY2M1ZTRjMjFkNTUzNjUzOTE5Y2RmMTMyMTM0NWJmMWU1N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/N7b1zbyKkkkpiwNT7SnFQxp/ic
8boIrNxFlIXPVWFzt+Tl0HFNZNobppHvvoReRHuclgyn9KoPkae/VasSD1jzdcnB
hIFrXpmVRKs7CPgk0DPqvZ8MJTITPuxfosiLoKBnAyCqZhFzCPBwB9aZkSeh7d/u
mhrH8QxhfiUBV4i0vALTeTzMn0KqpmT1S27cOPPFlcIxElkfLCIQaUu97Jrrfejt
3HUkC8i9e9VowKDBFSJsRJnqfWKGx85SY1/uK/fPHfiZnVmPpQPIpn9gg4QyFNp3
l6zOAKWrAFLUfBxiT3VA/S4fzaT/W5ZrSaPi/3B3AqeSrz49a7DU7pBwJQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFHUwzF5MIdVTZTkZzfEyE0W/HlfiMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZFRETVhrd2gxVk5sT1JuTjhUSVRSYjhlVi1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAE1R
WAMEAE1RZAMEAE4RtgMEAE4R/wMEAFZpBAMEAFZrMwMEAFklwgMEAFkrPgMEAFkt
ogMEAFl9FAMEAFl9/AMEAF1aSwMEAF1zaQMEAGiPywMEAGiP2AMEAKIj4gMEAKIj
5AMEALzxiQMEANTABQMEANTACgMEANTA0TANBgkqhkiG9w0BAQsFAAOCAQEAQLle
D95/MuytlvXI9PmS6YGu5fD71tkr74LCUSAw8oRFhi/X5g0ObpZnRLTsmdx+KX4J
r7iqR4uxSJlvqTp5hoA8kz1GKTu1Dqdmhdjh60k1zlyQTaLyFVrcdACVA2FQfSMB
KyYPEoCOTUHjRoHQ7mSJicENmPEVXQq7RZcN+rQ78FFpf/85p9Z5cDPCY0TOQGt4
3IoUy/6myMt2H6GeAmJbupEnV8n9uYEgtnlzcS7yq6UuPnSFlskjJfS6HaaGLoyu
v2uYGGgjPlakwbjheZhzZUt6UVUGSIH7+bhW48aZOzPXxV7XjzKp/N+C8FnsvkNo
sIvIxMsWHZpudvUUmw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:14 2026 by rpki-client