Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/yQjHyjvXgF1aHy0VHjVrMLShZBc.roa
File: yQjHyjvXgF1aHy0VHjVrMLShZBc.roa (raw, json)
Hash identifier: 276LaieWEdAeRTN0/mq1oTphv+Qzm4WUhdsJeR2LiMA=
Subject key identifier: C9:08:C7:CA:3B:D7:80:5D:5A:1F:2D:15:1E:35:6B:30:B4:A1:64:17
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A1C9BAFB62AF64747E434E379E90F58877
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/yQjHyjvXgF1aHy0VHjVrMLShZBc.roa
Signing time: Wed 11 Nov 2026 08:30:36 +0000
ROA not before: Wed 11 Nov 2026 08:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218780
IP address blocks: 77.216.38.0/24 maxlen: 24
77.216.40.0/24 maxlen: 24
77.216.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:ba:fb:62:af:64:74:7e:43:4e:37:9e:90:f5:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Nov 11 08:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c908c7ca3bd7805d5a1f2d151e356b30b4a16417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:84:0c:ec:16:46:5e:0d:01:58:c7:97:e1:
4c:ed:e7:b9:2c:1a:01:c7:f9:7a:a3:0f:3a:58:51:
9d:f2:41:c4:f1:e9:be:4e:e3:01:69:11:03:e8:18:
d0:8c:73:cb:7f:fa:82:a9:9b:79:58:69:d4:ae:2d:
eb:43:9c:6d:82:0f:20:51:79:8b:eb:c5:e0:75:9c:
7f:94:2d:df:69:99:2d:4a:e2:18:77:0a:83:30:e3:
84:4c:3a:a9:c7:5e:6c:0d:95:ba:da:d5:0b:69:7c:
91:82:35:05:8f:f8:fb:41:7c:f5:51:d7:1f:3b:1b:
22:80:35:64:50:49:e1:b5:0a:94:ac:cb:80:a6:26:
54:09:81:e8:99:04:cf:17:3e:84:99:25:51:2c:e4:
c8:f4:6f:1b:a1:cd:53:1f:34:41:b7:96:10:4f:26:
1e:15:9f:96:48:bd:26:dd:24:0b:3f:65:94:20:7c:
0c:8d:62:18:93:bb:80:46:4f:98:ee:04:38:29:f4:
1b:a1:1f:c8:9e:79:f8:59:d3:2b:c4:4e:79:79:07:
53:0d:13:84:a9:56:34:2d:b6:af:a8:48:79:37:f0:
df:c9:15:9d:aa:8d:f5:72:01:e9:a0:21:89:b1:0b:
47:fb:4d:98:73:48:9a:cb:cc:dd:08:5b:f3:85:2f:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:C7:CA:3B:D7:80:5D:5A:1F:2D:15:1E:35:6B:30:B4:A1:64:17
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/yQjHyjvXgF1aHy0VHjVrMLShZBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.38.0/24
77.216.40.0/24
77.216.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:64:0d:3c:34:c3:f4:90:73:38:4a:b6:04:63:22:bf:f9:c4:
b6:b0:01:c4:be:30:2f:1d:11:f3:78:27:3a:01:7c:a4:3d:eb:
94:f0:57:b1:3f:b9:24:c6:e4:f3:70:c1:23:1e:e6:9d:98:34:
44:56:35:8e:a0:62:44:bc:d8:af:b6:31:b2:71:cc:4f:15:f7:
81:f6:dc:4a:3e:b5:96:04:b9:42:57:1b:73:69:0e:f0:2c:33:
a6:2a:13:7a:8c:a3:17:59:35:90:a3:22:ce:a2:2f:3e:43:34:
aa:9e:94:2a:27:4e:5c:59:d2:bc:4f:91:31:af:5f:91:71:62:
36:aa:8b:eb:6f:7f:79:0d:9c:96:e7:d4:29:5b:30:5b:10:b4:
11:27:ab:fb:0e:57:eb:b4:47:df:db:07:42:95:c2:46:01:db:
11:0c:c7:a8:1e:e4:1a:80:6b:f7:75:5d:73:2e:49:aa:88:21:
ef:7d:23:b3:06:fc:0c:22:d6:1c:8b:7f:ae:59:3b:88:cd:12:
7f:39:0e:a0:3b:0a:cc:86:5f:44:53:19:6e:e8:7d:73:c9:46:
30:3c:1e:d4:b4:1d:8d:0d:05:fe:be:ac:1a:a1:de:5c:c0:12:
19:02:c9:c5:2b:3f:d0:9f:b3:9d:8e:7a:d6:24:5f:e4:af:0c:
89:23:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:25 2026 by rpki-client