Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/jykdObNTS5gmXRPSDIZXjYSqda0.roa
File: jykdObNTS5gmXRPSDIZXjYSqda0.roa (raw, json)
Hash identifier: SW4SpJaZp/J1DP1bUCqihY22gKLr+T1xUxA+SyKRU44=
Subject key identifier: 8F:29:1D:39:B3:53:4B:98:26:5D:13:D2:0C:86:57:8D:84:AA:75:AD
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A15CECF02219EED5FD148663F71082015D
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/jykdObNTS5gmXRPSDIZXjYSqda0.roa
Signing time: Wed 21 Oct 2026 05:26:34 +0000
ROA not before: Wed 21 Oct 2026 05:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 77.216.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:ec:f0:22:19:ee:d5:fd:14:86:63:f7:10:82:01:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 21 05:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f291d39b3534b98265d13d20c86578d84aa75ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:d6:28:ce:e9:ea:f0:70:b3:72:09:f0:ab:
7d:7d:5b:04:bb:f7:dc:f8:3a:42:b0:dd:82:03:a1:
f4:b4:61:04:84:7e:ef:a2:24:f2:e6:04:8f:00:31:
ce:fc:01:59:55:5c:a5:18:9c:37:f0:07:52:53:44:
3a:48:f1:0b:19:e4:dc:31:e5:9c:99:14:57:ea:24:
34:d2:a0:9d:c7:47:9c:08:7b:a8:d7:cc:f5:7b:c7:
9e:2e:0b:4f:71:e2:32:ff:58:18:fb:8f:d9:40:9d:
8b:85:53:fb:b4:ac:65:b0:e9:d8:8c:a5:04:7d:48:
f6:e1:b2:ad:e1:8b:6b:4a:c5:9e:a3:98:b9:c0:5b:
8f:be:32:15:4f:cc:45:29:de:e5:cb:9e:f7:37:0d:
e2:26:56:1b:5c:11:2c:46:1a:94:1a:25:2a:9c:62:
cd:23:61:d1:b4:0e:86:58:7e:ad:2c:04:c9:d3:6f:
11:00:5f:fe:ce:97:e9:8e:a4:7b:53:11:3a:38:e2:
7a:65:88:75:5d:c3:ae:d7:e1:85:b5:cf:4e:9b:d8:
86:d0:91:07:27:79:84:55:25:0e:f6:17:cc:75:67:
7e:ba:bc:f8:f8:4c:08:c5:d0:33:24:e2:03:5c:12:
e2:4f:65:f6:59:30:49:b8:77:9e:94:72:ef:d9:a1:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:1D:39:B3:53:4B:98:26:5D:13:D2:0C:86:57:8D:84:AA:75:AD
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/jykdObNTS5gmXRPSDIZXjYSqda0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1a:51:04:99:90:5c:05:1e:dd:f3:6e:6d:07:f1:79:66:ce:
a8:20:ba:06:fe:c1:b9:76:21:03:8e:e9:18:96:54:f4:10:25:
d0:d4:de:a0:b8:b4:e8:ae:1e:94:6b:30:b4:1c:0a:fc:74:c0:
f6:6f:26:da:0c:45:5c:da:0f:f9:51:e3:00:84:cb:79:e9:e9:
5f:89:37:75:1b:82:77:1a:92:64:9a:cc:73:63:b0:15:77:5c:
53:73:d2:ca:77:af:97:e5:29:39:e3:f5:cc:50:41:23:f1:3c:
62:22:c9:4f:bd:47:c0:e4:e2:09:6f:c3:6f:10:6e:fa:b2:4f:
c7:60:5e:94:e8:33:e6:b1:b6:c9:3f:6a:d3:fc:8d:4c:d8:41:
7e:92:33:c3:b5:4c:a1:41:89:19:dd:b5:20:40:5c:93:f3:45:
ed:32:5e:55:92:f0:17:d9:f4:e1:8e:17:ab:d7:cf:e1:05:a1:
d2:b4:25:81:1c:ce:5a:62:61:9c:61:c1:de:a3:c5:f4:b3:ff:
e7:34:4e:fa:1e:39:6a:89:6f:94:86:b6:f8:71:ec:16:bf:ee:
e0:b8:d0:f6:3a:f8:07:5b:b6:2f:56:c2:43:1d:18:2e:18:56:
14:db:9d:6e:6b:e7:f4:45:9d:f7:ea:eb:a1:35:40:c7:cc:dd:
7f:33:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:46 2026 by rpki-client