Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/usnzEjwTf3Hb8Ns9_jne7bL8qtg.roa
File: usnzEjwTf3Hb8Ns9_jne7bL8qtg.roa (raw, json)
Hash identifier: 55lzaab3Q4oNX9z+oCX7fFYT3pDNkQzjAEYIEWThmaE=
Subject key identifier: BA:C9:F3:12:3C:13:7F:71:DB:F0:DB:3D:FE:39:DE:ED:B2:FC:AA:D8
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019FA818A3932ADCF4EA1BF25D3A39E340C4
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/usnzEjwTf3Hb8Ns9_jne7bL8qtg.roa
Signing time: Tue 28 Jul 2026 09:40:14 +0000
ROA not before: Tue 28 Jul 2026 09:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215376
IP address blocks: 77.221.146.0/24 maxlen: 24
109.120.136.0/24 maxlen: 24
176.98.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:18:a3:93:2a:dc:f4:ea:1b:f2:5d:3a:39:e3:40:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jul 28 09:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac9f3123c137f71dbf0db3dfe39deedb2fcaad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:74:7c:27:de:c7:e6:56:72:1e:61:92:b6:6c:
13:93:4c:eb:73:d3:61:75:bb:4f:3d:24:ce:3d:ed:
a7:d1:b5:9e:a3:3a:26:06:a1:2a:88:7f:19:ff:09:
c5:fc:56:60:51:86:d1:8e:83:42:b1:2f:1e:aa:2f:
ae:71:86:b6:78:fb:12:ce:8f:2b:18:e4:9a:5a:c2:
46:4f:89:44:7e:3d:14:db:4f:d3:94:96:1b:26:1f:
a2:e5:f4:e0:34:6d:e0:38:83:b6:18:86:a3:77:14:
59:a6:51:fb:c5:be:0a:13:2f:56:cc:b8:bc:f5:88:
45:62:2c:38:cd:3f:33:43:c3:5d:d9:77:de:97:cd:
fc:a6:96:cc:51:40:cd:26:aa:66:45:d7:a7:01:04:
90:c3:06:f8:ed:77:56:c7:74:c7:ed:4f:dc:61:a0:
6a:53:5c:35:91:97:d4:b2:d6:5c:87:37:d2:1e:38:
98:0d:26:85:e4:80:41:b8:6a:32:fd:83:f9:df:ce:
bb:3e:78:84:e8:47:69:7e:8a:89:2d:d5:1e:5b:32:
cb:d4:57:84:58:11:81:df:46:0f:a7:ec:b3:29:02:
22:40:4a:1c:a1:54:ac:1e:d4:69:dd:db:31:e0:7c:
f9:69:ec:58:1f:4b:10:79:af:a7:5b:00:e9:55:69:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:F3:12:3C:13:7F:71:DB:F0:DB:3D:FE:39:DE:ED:B2:FC:AA:D8
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/usnzEjwTf3Hb8Ns9_jne7bL8qtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.146.0/24
109.120.136.0/24
176.98.187.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4c:10:d0:0e:c2:be:76:f7:ef:45:ee:62:e2:ee:11:df:ec:
5e:af:27:b4:1a:b7:be:c4:c1:f4:b8:98:4d:c5:c3:cc:ca:4b:
96:26:38:60:d5:b4:07:fb:a6:2f:1d:11:b8:6c:00:cc:ab:18:
b4:e8:09:90:27:49:7b:dc:5f:64:2f:d4:7a:17:ef:26:2e:75:
da:1a:20:ad:47:1f:9a:ec:99:a8:09:5e:cd:36:5c:27:7a:a9:
21:e5:53:5c:3e:de:68:5f:76:2f:c6:c6:be:f4:56:6b:92:7e:
f8:df:5a:82:05:92:38:34:f1:97:2b:96:8b:9d:23:64:d8:27:
57:42:11:e5:87:34:92:67:e1:9f:ad:e6:72:df:d7:a5:f4:56:
07:b0:a5:dd:a1:91:1e:3f:88:f7:2b:f3:5d:9a:76:e6:e4:09:
f5:4e:3e:91:9c:f8:08:83:1d:c9:7c:90:56:53:6c:1e:34:a1:
28:ac:f2:5b:fa:89:7f:cc:b2:1d:b1:8a:29:c0:49:40:c6:21:
59:b2:ba:48:d9:47:15:e6:98:99:dd:b2:d5:30:8e:03:9a:7a:
65:ac:8f:03:10:d7:5e:8d:69:6f:a9:1c:c9:30:6f:8a:bc:5e:
a8:1d:23:7a:12:4a:e1:da:06:80:fb:72:05:de:7a:80:db:e6:
7f:b6:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:12 2026 by rpki-client