Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/RRaajtQrss5SvD0UbtCJxO7e-rU.roa
File: RRaajtQrss5SvD0UbtCJxO7e-rU.roa (raw, json)
Hash identifier: 3rTSj5RjYBccOHFc9KbwnqOPuKe1LfVBGgP8gO67rtU=
Subject key identifier: 45:16:9A:8E:D4:2B:B2:CE:52:BC:3D:14:6E:D0:89:C4:EE:DE:FA:B5
Certificate issuer: /CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Certificate serial: 019F236947C9A12B0420798AF78C90210B07
Authority key identifier: 35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/RRaajtQrss5SvD0UbtCJxO7e-rU.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210115
IP address blocks: 77.87.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:47:c9:a1:2b:04:20:79:8a:f7:8c:90:21:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45169a8ed42bb2ce52bc3d146ed089c4eedefab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:1c:68:54:30:b4:fa:dc:b7:d7:8d:60:90:
d0:37:52:77:0e:ac:9e:bc:04:12:53:ca:38:7c:1d:
21:26:f3:b9:c8:b1:e8:06:1f:8a:2e:5e:06:a4:e6:
40:d2:dd:e7:a5:33:b0:9b:6a:32:82:e5:12:f3:1c:
56:a1:11:15:0b:8b:d1:88:7e:c4:f9:d8:36:64:61:
4f:42:b3:96:8b:a3:62:85:bf:16:18:58:d2:bc:ba:
3d:f0:0a:fd:f7:04:f8:da:66:fd:e2:ce:df:af:7b:
b8:e6:35:c0:50:ba:d7:db:01:05:2d:17:06:9a:25:
18:0f:c9:4e:04:f2:a6:d3:6e:7c:a1:af:a6:cf:e9:
4a:7c:ef:10:c4:ca:e6:9b:43:94:96:5c:85:4b:cc:
1f:12:33:04:e3:14:6a:78:2d:d8:86:17:c0:af:50:
59:b5:8e:47:cc:06:79:74:ae:20:2c:a7:81:1c:a2:
11:ca:d8:20:1e:fe:eb:dd:02:2e:2b:07:21:4a:c1:
1d:03:27:ab:05:a7:e1:13:02:ad:3d:54:8f:e7:aa:
63:74:ea:81:57:0a:6d:a7:5d:3c:ed:d8:51:3f:e1:
40:0b:17:63:b4:eb:b2:cf:ca:f7:d0:c6:a6:15:8d:
15:37:2f:5a:62:61:20:3f:19:c7:e0:92:b0:3e:30:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:9A:8E:D4:2B:B2:CE:52:BC:3D:14:6E:D0:89:C4:EE:DE:FA:B5
X509v3 Authority Key Identifier:
keyid:35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/RRaajtQrss5SvD0UbtCJxO7e-rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.32.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:3e:50:19:da:f7:40:4e:e2:a7:5b:5d:eb:d7:7b:ae:30:83:
95:c8:2c:0d:72:ac:a4:c4:34:a9:c7:0f:fe:1f:0d:b2:fe:7c:
9d:19:50:e1:d1:30:88:2e:e4:34:49:65:41:47:f4:05:82:75:
79:8f:be:82:a9:bb:6c:4a:83:f6:d7:4f:04:57:97:c3:2a:75:
70:15:ba:c9:2a:35:09:7e:7b:f0:41:a0:c0:ce:23:02:dd:0b:
1b:ad:0c:77:9e:c5:cb:4e:70:82:ca:c5:fd:8b:fd:21:48:23:
03:44:35:37:5c:d5:e3:d3:cc:26:7b:25:99:a2:49:c6:b4:54:
9c:35:72:5f:d3:c7:1b:e6:25:da:26:32:59:03:bb:73:03:89:
45:ff:26:26:c7:a7:38:b4:c7:3f:41:25:75:22:c4:6f:8a:9b:
e7:3f:37:84:97:99:67:e7:7c:d9:28:e4:32:29:38:08:bd:da:
f2:21:52:42:ae:c9:d5:3a:a7:c1:e3:44:21:4d:b0:11:7e:c0:
df:61:ba:68:ed:44:e8:36:17:12:89:ce:cb:39:d8:c8:11:c8:
ca:9c:29:5b:83:78:64:cd:70:7f:58:76:69:04:29:29:01:e9:
d4:cc:99:79:4e:4c:ac:db:40:6e:36:c8:93:55:dc:8c:46:45:
ca:92:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:09 2026 by rpki-client