Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/07W2K7A8Xe28sAtikyjxrZCEYlA.roa
File: 07W2K7A8Xe28sAtikyjxrZCEYlA.roa (raw, json)
Hash identifier: +fCOYk2USu1OXIHjHmc1WZ/uquX/PPpmsNsCh5uJZos=
Subject key identifier: D3:B5:B6:2B:B0:3C:5D:ED:BC:B0:0B:62:93:28:F1:AD:90:84:62:50
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A181E5BEC1855C23317C0C585A972D5EB2
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/07W2K7A8Xe28sAtikyjxrZCEYlA.roa
Signing time: Wed 28 Oct 2026 09:44:39 +0000
ROA not before: Wed 28 Oct 2026 09:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 77.216.15.0/24 maxlen: 24
77.216.16.0/24 maxlen: 24
77.216.18.0/24 maxlen: 24
77.216.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e5:be:c1:85:5c:23:31:7c:0c:58:5a:97:2d:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 28 09:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b5b62bb03c5dedbcb00b629328f1ad90846250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:0d:c4:19:22:55:b8:ed:79:08:4f:17:f7:
87:a3:84:40:f8:39:33:1e:56:c3:63:9c:8e:1f:ee:
7b:a0:b7:63:d8:02:58:1f:e2:e5:0a:bb:99:9d:11:
81:ca:49:72:66:de:92:95:75:27:84:7e:58:11:47:
02:1e:f0:70:c4:05:56:2f:6a:c9:1e:37:13:96:f4:
02:6e:77:50:d2:df:52:b5:55:21:d8:f9:bf:9a:48:
dc:8b:91:94:ed:d6:bc:20:bf:93:d4:cc:ec:4c:20:
f8:92:97:da:81:39:b2:05:34:b9:08:58:5d:2d:40:
4b:a5:e6:40:b4:ff:0a:c7:67:e1:25:8d:6b:1c:e0:
86:31:60:63:b5:16:a5:b7:29:e4:c6:d4:82:fa:41:
a0:a4:74:6a:ef:cd:ce:68:1a:50:cd:91:e8:00:30:
02:9b:a5:7e:c3:76:83:e5:af:7c:de:80:fe:f9:cd:
33:5c:e5:e9:62:d0:9b:46:ee:ee:22:ac:e5:4a:d6:
c7:53:75:2d:6f:3b:21:6c:ea:4b:35:e1:92:d2:18:
4a:36:65:c7:cb:dd:2e:03:49:ab:c8:ac:7a:3e:08:
a8:ee:d5:40:33:35:8f:4c:b4:cc:98:1d:8d:6c:02:
87:38:cf:03:e4:07:a0:ec:ea:98:30:cf:68:3d:87:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:B6:2B:B0:3C:5D:ED:BC:B0:0B:62:93:28:F1:AD:90:84:62:50
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/07W2K7A8Xe28sAtikyjxrZCEYlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.15.0-77.216.16.255
77.216.18.0/24
77.216.22.0/24
Signature Algorithm: sha256WithRSAEncryption
39:85:43:ac:dc:91:f0:32:ca:a8:42:a9:5e:97:a4:41:2a:e3:
5a:67:ff:a5:8a:2a:f6:ac:c4:12:57:09:ef:5f:b3:69:23:6b:
15:dc:85:c6:e0:98:39:cb:b3:65:0b:f8:18:76:1a:4a:b4:da:
f9:82:ca:bf:15:ef:2b:c1:2e:d2:77:36:7f:03:6b:a9:66:0e:
65:5b:e9:a2:0f:bb:7c:f2:95:93:06:a4:c8:b8:1f:ca:f1:8e:
1b:84:34:f2:27:e2:36:b5:f1:27:ec:fd:65:cd:ce:b8:4c:47:
88:95:d2:1d:f0:54:b9:29:44:3a:68:fc:0f:b1:75:45:06:76:
c1:45:82:d5:68:d0:05:8b:3b:2b:8d:48:63:ce:3a:1b:3f:f5:
44:31:58:b0:56:ee:c8:5f:3a:09:34:c8:af:1b:54:c7:5e:40:
29:db:79:58:07:22:50:45:db:d4:0b:20:5b:3f:8d:2e:06:41:
5b:af:b1:b6:6b:26:d0:2a:30:44:0d:4f:30:98:84:b1:a1:4d:
18:41:ca:5a:aa:1a:48:cb:ae:c0:05:f4:8b:19:ec:b4:b6:79:
a6:40:2b:7a:57:3f:57:84:90:ef:96:8a:49:2c:25:d1:3c:b5:
da:cc:85:71:76:f3:72:23:89:44:55:83:30:55:a6:f7:1e:90:
0e:49:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:25 2026 by rpki-client