Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/177Mk1AVlniYqoBQnaXYI4Vpgjg.roa
File: 177Mk1AVlniYqoBQnaXYI4Vpgjg.roa (raw, json)
Hash identifier: GVoqQRdpz3B/4adthgW8dLMcjC/7VRwkH7qkvRK1NHs=
Subject key identifier: D7:BE:CC:93:50:15:96:78:98:AA:80:50:9D:A5:D8:23:85:69:82:38
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 019B7B368F4261516A733C1EEC2B5991BA61
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/177Mk1AVlniYqoBQnaXYI4Vpgjg.roa
Signing time: Thu 01 Jan 2026 20:18:51 +0000
ROA not before: Thu 01 Jan 2026 20:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51960
IP address blocks: 64.190.141.0/24 maxlen: 24
91.222.24.0/22 maxlen: 22
185.78.72.0/24 maxlen: 24
185.78.73.0/24 maxlen: 24
185.78.74.0/24 maxlen: 24
185.78.75.0/24 maxlen: 24
193.9.123.0/24 maxlen: 24
193.84.1.0/24 maxlen: 24
193.84.6.0/24 maxlen: 24
193.84.11.0/24 maxlen: 24
193.84.16.0/24 maxlen: 24
193.104.5.0/24 maxlen: 24
194.106.198.0/24 maxlen: 24
195.206.116.0/22 maxlen: 22
195.242.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:8f:42:61:51:6a:73:3c:1e:ec:2b:59:91:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Jan 1 20:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7becc935015967898aa80509da5d82385698238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:a7:73:0b:58:23:6a:3c:f0:f9:b6:21:72:
3b:fb:f0:66:77:df:0f:d3:b9:50:cb:6b:8d:60:44:
68:6c:21:9d:75:2c:03:fe:c8:9e:bb:4f:41:8e:9a:
9f:5f:14:68:7b:55:b1:c1:c3:19:85:58:95:6b:a2:
18:fa:42:66:f6:7e:b9:e1:7e:64:f0:78:fd:07:d5:
c5:0a:fd:f7:de:b4:1d:4a:2b:53:48:b8:56:41:35:
53:07:09:10:62:d8:4f:5a:e2:28:6b:e6:37:2b:cf:
80:d2:12:8a:b9:ef:79:fb:c8:77:1f:12:65:f2:38:
b2:73:13:ba:9e:40:79:2c:b0:84:59:81:83:84:ea:
ec:de:79:a3:34:34:0c:46:46:c7:75:e3:0f:19:10:
71:69:d8:29:10:e3:34:a1:8f:49:a8:71:b2:d5:21:
a2:6d:de:bd:38:80:d6:9b:b8:46:d3:48:76:29:9d:
ba:fa:ff:1b:0b:ce:46:f1:48:8f:5a:d8:95:ce:fd:
a1:6c:e1:52:17:1a:8e:d8:fe:19:88:7e:d0:cb:8c:
39:9a:c6:f9:07:45:fd:bb:6e:b0:b9:b4:08:1d:15:
37:54:c7:89:33:4e:7d:87:ef:53:6b:b6:57:3e:d7:
0c:7c:f0:ab:ba:04:f5:cf:15:34:ef:c9:aa:2f:b4:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:CC:93:50:15:96:78:98:AA:80:50:9D:A5:D8:23:85:69:82:38
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/177Mk1AVlniYqoBQnaXYI4Vpgjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.141.0/24
91.222.24.0/22
185.78.72.0/22
193.9.123.0/24
193.84.1.0/24
193.84.6.0/24
193.84.11.0/24
193.84.16.0/24
193.104.5.0/24
194.106.198.0/24
195.206.116.0/22
195.242.108.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:45:a4:f3:44:c9:c3:b5:ec:fe:4b:2b:e7:56:d9:7f:c0:86:
ad:4b:43:c4:6d:00:2b:be:83:f0:50:2b:4c:d0:ea:8c:83:00:
57:9f:46:23:f4:8f:dd:41:ad:8b:28:8f:06:d8:e6:6b:1f:bf:
e9:c1:8b:63:dd:06:fc:a2:c1:3d:e4:d1:da:ce:3c:5a:91:62:
58:47:aa:7c:34:60:6a:57:ff:38:f4:65:74:f8:e0:dc:84:35:
c7:44:b0:a6:d4:7a:45:41:5d:46:e2:af:c7:6e:2c:67:7c:dd:
f1:c1:a4:a6:fc:12:e7:a6:1e:7f:72:05:12:54:67:f2:a3:02:
6b:47:ac:57:01:e7:6b:54:4d:83:c1:fb:2e:f5:ce:3c:b6:58:
14:88:8f:0d:b5:96:cd:07:f7:59:f9:4b:cf:7b:e5:d5:57:43:
33:6c:fe:c2:0d:0c:f8:72:d2:22:3d:6f:5d:eb:9d:0d:01:85:
e2:1f:62:fd:16:96:fd:10:be:bf:22:44:01:80:b4:07:9c:4e:
6f:f1:06:5d:e7:e0:83:8a:1b:01:be:e9:a2:9a:85:c2:04:09:
3a:95:bd:8d:95:6e:88:4c:ce:7b:c0:eb:d7:e7:19:49:a7:db:
ab:df:e7:11:84:a2:57:86:cf:b7:9f:7d:e9:a8:30:86:50:dc:
f6:ee:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:22 2026 by rpki-client