Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/Cs9YxhZfyW4Urdc5-fOqJwKIHoU.roa
File: Cs9YxhZfyW4Urdc5-fOqJwKIHoU.roa (raw, json)
Hash identifier: I6N20mO9htN36i6vVwot9Ufj6P1C7DFWXR9BR2KjJ0Q=
Subject key identifier: 0A:CF:58:C6:16:5F:C9:6E:14:AD:D7:39:F9:F3:AA:27:02:88:1E:85
Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial: 019D86D32DF2102B86DF2D9882ED715CF021
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/Cs9YxhZfyW4Urdc5-fOqJwKIHoU.roa
Signing time: Mon 13 Apr 2026 12:31:20 +0000
ROA not before: Mon 13 Apr 2026 12:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.77.72.0/24 maxlen: 24
185.78.207.0/24 maxlen: 24
195.157.4.0/24 maxlen: 24
195.245.201.0/24 maxlen: 24
2001:67c:1088::/48 maxlen: 48
2001:67c:27dc::/48 maxlen: 48
2001:a88:8::/48 maxlen: 48
2a00:62e0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:d3:2d:f2:10:2b:86:df:2d:98:82:ed:71:5c:f0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Validity
Not Before: Apr 13 12:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0acf58c6165fc96e14add739f9f3aa2702881e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:20:80:4a:1c:7a:f9:54:7d:3f:ce:40:38:
ab:6d:bf:30:a1:da:7f:26:0c:5c:d6:ec:a4:a3:d6:
5e:ce:2e:15:e1:7a:ec:16:1c:85:a1:75:ee:b9:93:
15:06:b3:03:41:b7:1f:fe:9e:16:67:22:26:e7:a7:
13:03:e1:31:9a:37:69:4b:25:05:a1:24:e4:13:ba:
21:5d:49:cd:04:d4:7a:97:a6:71:cf:3a:04:f4:94:
d5:1e:53:29:66:f5:01:e7:a4:68:6b:06:28:5d:f4:
14:f5:4c:e3:6f:ed:f2:1a:84:3b:c8:df:04:34:6a:
a6:de:2c:a3:95:46:46:b3:16:1f:24:1a:4f:1d:13:
41:e5:6e:ff:05:8c:03:b5:39:30:d9:85:72:ba:31:
b6:63:ed:d2:9e:5e:c6:c8:6a:90:ca:c8:29:ae:b4:
f8:f0:9c:a3:6b:58:e2:69:2e:58:d3:f8:44:2e:0d:
36:87:40:e6:4e:01:99:13:71:2b:fd:db:bc:1b:14:
26:08:24:fa:35:00:08:30:b2:31:76:fd:f8:ee:40:
78:bd:9a:60:48:11:73:eb:db:21:cb:74:51:ad:0c:
a0:e2:d1:29:c7:9b:83:81:1d:11:07:bc:cb:75:e1:
f9:09:fc:8e:9f:15:96:0d:a7:86:f3:2a:c3:3e:34:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:58:C6:16:5F:C9:6E:14:AD:D7:39:F9:F3:AA:27:02:88:1E:85
X509v3 Authority Key Identifier:
keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/Cs9YxhZfyW4Urdc5-fOqJwKIHoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.72.0/24
185.78.207.0/24
195.157.4.0/24
195.245.201.0/24
IPv6:
2001:67c:1088::/48
2001:67c:27dc::/48
2001:a88:8::/48
2a00:62e0:8::/48
Signature Algorithm: sha256WithRSAEncryption
a6:08:cb:fa:ea:10:c3:3c:9b:76:11:0a:d2:b4:55:1d:22:e8:
8c:4b:76:4d:f7:98:44:d4:a3:29:cd:cb:b4:60:84:fd:ac:70:
60:de:28:14:1c:94:22:fc:60:52:32:0e:fd:34:72:c6:56:e4:
0b:af:8c:17:97:48:9f:71:c7:ee:2e:cd:19:d1:af:75:76:92:
f8:7a:4e:56:1e:da:a4:0c:14:cf:bb:e9:4b:2d:1f:65:2f:fc:
49:34:c9:75:41:7c:88:65:43:fa:c4:93:00:b7:7b:4d:2d:cd:
69:9f:90:d1:ca:7c:b7:57:51:af:9a:9e:75:13:00:fb:d6:87:
96:10:fa:81:b1:98:29:85:e6:e7:73:0e:ed:bc:e0:d4:2a:c5:
a9:78:bb:c0:45:8b:0a:c8:1c:7c:29:14:df:54:ad:cd:dc:7b:
f6:12:42:1d:ea:ac:44:8b:6b:02:3e:c7:44:e7:49:81:a8:06:
90:d3:28:7e:95:9f:de:cc:28:60:d4:99:a7:4e:ae:31:af:57:
5a:0b:a8:29:10:5f:fb:06:4c:b9:1b:1c:cf:df:4c:b8:c6:76:
13:8e:2b:77:b3:7d:0d:1e:23:dd:dd:0b:dc:1d:97:87:02:f8:
97:1d:dc:41:d8:74:df:cc:a2:2d:fb:de:cb:fc:e2:15:5c:ed:
a8:97:b0:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:20 2026 by rpki-client