Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1ZkYJuhh01I2ywyWWDUMERgPTSU.roa
File: 1ZkYJuhh01I2ywyWWDUMERgPTSU.roa (raw, json)
Hash identifier: GFdGAvRms/uf+mlsPPV4zRxmAIFw7yh8QsJAEmEiqi4=
Subject key identifier: D5:99:18:26:E8:61:D3:52:36:CB:0C:96:58:35:0C:11:18:0F:4D:25
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A167A1B7B4C94E94F831F7946B0F32FD89
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1ZkYJuhh01I2ywyWWDUMERgPTSU.roa
Signing time: Fri 23 Oct 2026 07:20:13 +0000
ROA not before: Fri 23 Oct 2026 07:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58325
IP address blocks: 77.216.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:a1:b7:b4:c9:4e:94:f8:31:f7:94:6b:0f:32:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5991826e861d35236cb0c9658350c11180f4d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:8e:d6:b9:e5:cd:cb:a5:0e:67:1d:44:98:
16:bc:48:c6:f9:a0:26:2d:6b:05:d1:87:a1:e5:08:
7f:f0:8a:38:b8:52:50:d3:c6:f2:13:e5:72:72:cf:
73:89:ca:eb:b3:b0:25:d1:9a:d5:64:da:10:78:74:
0a:76:80:fd:a2:fb:d5:ae:ff:27:97:7c:fd:cf:75:
f7:4d:51:21:40:c5:8c:c6:3b:6f:47:11:e2:5c:dd:
ed:13:1b:b3:a2:0b:88:63:86:c7:d9:22:c1:de:77:
11:ad:eb:e8:fc:55:7c:50:e5:b6:24:46:9b:c9:23:
6a:43:96:02:bc:f3:29:38:ab:e3:51:20:4b:7c:a6:
c2:04:30:3a:f3:d3:91:06:88:40:ee:30:28:64:1f:
d3:b5:98:65:8a:f0:0b:35:f2:bc:ea:0a:db:5e:31:
19:22:e2:1e:00:57:a9:4b:7a:19:17:d1:40:2e:54:
f2:1d:9d:e5:a5:96:07:73:a7:71:1f:dc:0d:84:41:
00:6f:44:ba:9b:d9:45:66:be:f6:cd:11:b1:c5:dd:
ec:3a:84:20:4d:9e:e0:ef:7e:0a:7e:4d:d3:fa:16:
6d:b6:bc:86:88:6c:db:2c:4b:4d:aa:66:20:3e:58:
58:20:9c:06:5d:17:1e:02:74:95:1f:46:5a:7e:8a:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:18:26:E8:61:D3:52:36:CB:0C:96:58:35:0C:11:18:0F:4D:25
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1ZkYJuhh01I2ywyWWDUMERgPTSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8e:a2:23:83:cc:ed:a4:64:64:9d:5d:39:6e:00:e8:5d:43:
65:07:77:4a:60:e9:b1:97:21:31:e9:94:20:28:dd:6c:30:f1:
76:27:97:ce:7d:ca:7f:11:24:f5:a3:8e:08:95:0b:50:85:64:
54:6b:5a:07:e2:1a:3b:1d:9a:2c:ba:6b:ba:be:74:4e:54:c3:
41:5e:45:67:1b:c8:aa:a5:7f:26:12:05:9c:ca:6a:f1:1a:a7:
fc:6d:5e:85:5e:b5:ab:00:65:ee:30:3b:b6:96:22:c2:1c:38:
f6:a4:36:1b:21:28:c7:dc:bc:3c:c5:73:2d:44:6a:bb:f7:32:
a8:52:0f:c4:30:b3:17:a8:49:06:6c:f6:a9:0d:2d:b5:6b:03:
c1:5e:3f:d6:e3:d8:b4:ec:c8:e1:17:aa:68:4d:ce:28:ef:ed:
81:05:c8:04:6c:37:7d:d6:cf:1a:6e:3f:c7:3a:5c:df:fd:da:
67:68:73:4d:66:d0:c2:15:68:5c:38:34:2a:a7:09:d9:76:87:
a4:9c:58:09:84:86:bc:86:aa:ea:dc:e2:ca:3d:7b:e7:f2:47:
e5:00:37:52:25:a3:73:55:06:b6:b1:22:8d:79:7c:ec:32:7a:
64:9a:3e:e6:70:78:73:a2:a9:fb:b0:c5:ff:0c:45:6f:33:77:
f8:4e:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:05:22 2026 by rpki-client