Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/69ezvJY8aZV8eEgrj-WQsC1gmeE.roa
File: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (raw, json)
Hash identifier: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=
Subject key identifier: EB:D7:B3:BC:96:3C:69:95:7C:78:48:2B:8F:E5:90:B0:2D:60:99:E1
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019D6804EA59F304F5AE0E3CB78F05B65FB8
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/69ezvJY8aZV8eEgrj-WQsC1gmeE.roa
Signing time: Tue 07 Apr 2026 12:57:25 +0000
ROA not before: Tue 07 Apr 2026 12:57:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39724
IP address blocks: 77.247.100.0/22 maxlen: 22
77.247.100.0/23 maxlen: 23
77.247.100.0/24 maxlen: 24
77.247.101.0/24 maxlen: 24
77.247.102.0/23 maxlen: 23
77.247.102.0/24 maxlen: 24
77.247.103.0/24 maxlen: 24
2a0d:a6c0::/29 maxlen: 29
2a0d:a6c0::/32 maxlen: 32
2a0d:a6c1::/32 maxlen: 32
2a0d:a6c2::/32 maxlen: 32
2a0d:a6c3::/32 maxlen: 32
2a0d:a6c4::/32 maxlen: 32
2a0d:a6c5::/32 maxlen: 32
2a0d:a6c6::/32 maxlen: 32
2a0d:a6c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:04:ea:59:f3:04:f5:ae:0e:3c:b7:8f:05:b6:5f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Apr 7 12:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd7b3bc963c69957c78482b8fe590b02d6099e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:d2:0c:95:b1:9b:2d:e0:42:52:ce:eb:56:
a7:c4:bf:95:dd:7a:bc:f3:02:55:03:23:ea:a8:08:
9a:8f:1b:e2:c4:43:d6:0c:ff:68:15:45:44:82:4b:
8c:0e:22:6e:95:84:26:51:98:51:cb:7c:b0:ae:50:
5e:19:87:9f:d5:e7:08:24:91:57:71:bb:ff:50:93:
b9:95:0a:88:59:05:6c:6a:ee:04:f8:a5:ff:ba:43:
0b:ac:89:3f:11:68:94:85:93:5c:8a:dd:08:93:c9:
be:41:37:73:20:b3:67:96:5c:f2:61:73:23:34:a2:
48:34:6c:1d:a9:93:94:ae:37:ab:17:c8:9e:25:76:
7b:c4:c8:6b:f8:60:ce:3f:31:d7:f1:09:3a:36:15:
9f:74:0a:e6:ca:b2:a7:82:ab:25:a7:cb:b3:57:67:
ad:37:e1:0d:32:21:c3:8e:84:b6:5e:5f:27:0b:46:
01:20:1e:12:c5:48:2a:07:2e:5b:61:c4:5d:1d:60:
08:52:61:60:b0:16:ba:2b:da:bf:a8:c2:76:30:79:
fd:a1:d3:90:4d:72:44:1e:20:15:a3:c2:33:46:2e:
7d:f1:16:73:2a:37:13:3e:ee:48:bc:1a:03:9e:0e:
62:b3:94:7e:63:18:3e:4c:5e:f8:44:d2:e1:3e:cb:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:B3:BC:96:3C:69:95:7C:78:48:2B:8F:E5:90:B0:2D:60:99:E1
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/69ezvJY8aZV8eEgrj-WQsC1gmeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.100.0/22
IPv6:
2a0d:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:34:0b:2f:cc:8c:fd:ca:a6:c8:b6:5d:3c:d2:00:9f:29:d4:
f4:2b:f2:25:fb:e2:ea:4e:54:71:fa:6e:27:9e:b6:9a:1e:c3:
ca:29:36:94:f1:ac:e9:00:ab:2c:3c:8d:f6:23:0f:d7:16:19:
ec:29:6e:99:0d:b3:ac:ae:b1:14:62:48:3e:fd:d9:41:c3:00:
e5:52:3d:a2:2c:d3:59:47:25:b1:7e:45:c2:98:db:05:7d:b8:
30:68:68:eb:ce:db:69:12:3f:d0:8a:37:3e:36:83:05:bd:d6:
75:94:df:04:a2:89:f1:7d:5d:fc:20:53:e8:02:37:cb:5a:5e:
71:27:ba:82:c7:22:1c:44:de:62:43:2b:76:f7:44:25:ca:59:
ff:9b:32:e9:dd:14:09:99:73:79:f4:41:4b:20:55:37:d2:ef:
cb:ae:21:6e:a3:e0:aa:7e:14:33:f7:55:91:6d:e3:a5:9a:6a:
cf:4c:9c:e1:c9:82:db:97:e5:ba:2c:20:6a:a7:47:eb:17:49:
ad:40:88:53:5b:ff:49:89:07:3d:31:60:d2:28:d4:e6:68:2f:
7a:c5:21:f7:f1:9a:fe:98:81:fa:e5:6f:88:dc:2b:6a:b4:81:
40:0d:bd:df:ca:ea:60:c7:5f:89:9f:0d:df:8f:9b:0f:93:bb:
14:e0:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:50 2026 by rpki-client