Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/rfnpKAqIl3YHBE0u0rKLog4npJ8.roa
File: rfnpKAqIl3YHBE0u0rKLog4npJ8.roa (raw, json)
Hash identifier: e2aXB5iCVJvKeAcAsidwehVczzB3FZGwEfrPbuvBxKo=
Subject key identifier: AD:F9:E9:28:0A:88:97:76:07:04:4D:2E:D2:B2:8B:A2:0E:27:A4:9F
Certificate issuer: /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial: 01A00F9747D988786387C60C4F4C10AA55FC
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/rfnpKAqIl3YHBE0u0rKLog4npJ8.roa
Signing time: Mon 17 Aug 2026 11:59:27 +0000
ROA not before: Mon 17 Aug 2026 11:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210750
IP address blocks: 77.235.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:97:47:d9:88:78:63:87:c6:0c:4f:4c:10:aa:55:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Validity
Not Before: Aug 17 11:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adf9e9280a88977607044d2ed2b28ba20e27a49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:3f:b8:d1:1e:d1:dd:98:f9:57:e2:14:f1:
a0:b1:ce:cc:c8:5e:a1:84:ee:da:4c:f9:02:06:4b:
a6:0d:8f:02:cd:3a:e9:9f:7a:15:4f:96:c2:e4:e2:
81:8b:4d:67:af:f7:6d:67:a2:4b:c5:44:54:fc:ab:
60:ce:94:13:6f:b9:57:a3:93:c9:0d:17:2f:36:5a:
10:e6:68:18:08:e4:f1:3c:58:ca:d0:ee:a5:37:b4:
f4:3d:4e:26:c8:e1:df:01:f4:90:20:2c:6e:3f:30:
6c:d6:5e:a7:e0:2e:7e:be:d9:d4:23:bf:4e:24:b4:
8e:58:d4:4d:0f:83:35:f7:b0:14:d2:e9:0f:b9:c7:
99:90:47:bf:e2:ea:e5:14:66:87:09:b2:fc:de:8b:
49:1f:4e:d9:35:9e:c8:26:dc:db:d6:bf:ee:b4:ca:
8f:1b:f8:c3:1a:a8:17:32:c5:c9:4f:49:a9:30:27:
99:a4:6c:d1:46:e6:b5:40:aa:51:dd:2e:e8:e7:5c:
df:0a:a7:36:4a:ad:43:80:e4:ce:85:a6:89:28:a4:
98:2d:30:80:ab:88:ce:b5:73:dc:21:31:b0:64:1a:
bf:ce:12:41:ec:59:b6:e9:5f:e3:fe:5f:3c:e9:62:
fd:33:f5:4c:e8:db:93:dc:07:2f:d0:eb:31:b9:4f:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F9:E9:28:0A:88:97:76:07:04:4D:2E:D2:B2:8B:A2:0E:27:A4:9F
X509v3 Authority Key Identifier:
keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/rfnpKAqIl3YHBE0u0rKLog4npJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.95.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6a:a2:e9:91:16:4b:2c:54:99:46:f0:72:1d:d6:7d:56:64:
a8:77:bb:24:b5:5a:01:2d:98:d5:e7:33:dc:b5:10:f5:2f:f7:
d7:e0:4c:db:b5:6f:59:87:00:c9:ed:57:67:74:34:b9:28:ca:
1e:d8:d4:98:c8:61:0a:24:1e:51:86:11:bf:61:aa:9c:03:e0:
c2:67:d0:57:0f:47:7d:52:d6:9e:0d:f6:4d:01:0b:ba:00:57:
5b:e1:03:aa:3f:70:e0:cb:59:cb:e7:04:09:4a:fa:bf:ee:ef:
1c:4c:9f:1c:7e:45:ad:c0:74:d6:95:24:cf:71:07:50:01:62:
68:3c:44:62:d9:c6:c5:94:d7:e5:fe:06:3e:f0:a0:9b:54:dc:
cf:48:fa:59:25:92:e7:30:c6:b3:cc:1b:c9:97:22:92:05:d7:
99:c6:17:00:7b:eb:92:bf:63:60:df:da:8a:28:ae:fb:a8:d0:
51:25:ba:58:59:2d:22:3e:59:8d:b7:df:19:12:0f:80:88:79:
50:c8:e1:ce:b2:3c:48:5d:6e:35:33:0a:59:30:90:78:8d:2b:
db:22:63:76:a9:87:2b:03:04:58:21:82:4e:c8:6d:fe:03:0f:
38:fe:74:29:19:a9:89:b5:24:37:cf:37:6f:c1:f7:6a:4d:8e:
26:69:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:18 2026 by rpki-client