Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa
File: fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa (raw, json)
Hash identifier: 0Cel+oB84KUJsE+NVR0+1YgTW5yxAFtMO6zocsewmpI=
Subject key identifier: 7D:09:AD:AF:3A:DB:CF:0E:20:58:10:88:59:7F:0B:74:91:62:28:41
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 019E315D45C22D4EAFE5A3680BE4C7FFCD6B
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa
Signing time: Sat 16 May 2026 15:17:36 +0000
ROA not before: Sat 16 May 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202168
IP address blocks: 77.73.10.0/24 maxlen: 24
2a0f:2340::/32 maxlen: 48
2a0f:2345::/32 maxlen: 48
2a0f:2346::/32 maxlen: 48
2a0f:2347::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:5d:45:c2:2d:4e:af:e5:a3:68:0b:e4:c7:ff:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: May 16 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d09adaf3adbcf0e20581088597f0b7491622841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:29:c9:6c:18:e9:a8:10:94:6d:57:b1:63:
f0:af:77:0a:ff:57:2d:91:29:dc:6d:2f:3c:b0:aa:
4d:32:fd:3a:20:fe:8d:f1:24:27:0c:c4:87:1d:f2:
0c:eb:8f:90:03:65:bf:39:51:66:bc:84:0e:f6:12:
14:aa:5d:f2:bd:28:07:37:31:46:26:4a:8a:84:f1:
76:05:72:63:ba:ae:a8:49:b4:cd:c4:11:58:73:35:
c3:c4:34:a7:87:a6:ab:e6:f7:eb:e3:69:d9:25:71:
75:0c:3c:ca:35:7a:7a:71:05:a2:fe:a5:aa:34:1b:
1b:39:97:5e:60:d1:2d:44:ae:59:d7:4a:1b:b6:5d:
ec:92:b3:97:73:b3:0a:e6:ff:b1:41:ee:d6:76:c5:
b4:2f:8b:58:54:3d:94:29:28:7c:98:5b:7d:ed:58:
e8:cf:53:df:cd:a4:76:60:e8:3a:54:3d:1a:d7:f6:
69:07:c2:e5:83:7a:10:23:6d:e3:13:6c:4c:0c:fb:
41:0f:9b:b7:8e:03:a2:f6:10:65:34:6d:5f:a3:b5:
cc:ad:a4:cf:63:50:4f:a2:27:3c:52:0e:c7:dd:b2:
86:46:c8:54:7a:01:51:b8:e7:bb:4c:7f:42:11:d7:
6d:dc:46:0a:46:a5:cd:42:22:2a:3b:c7:16:cd:67:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:AD:AF:3A:DB:CF:0E:20:58:10:88:59:7F:0B:74:91:62:28:41
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.10.0/24
IPv6:
2a0f:2340::/32
2a0f:2345::-2a0f:2347:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:3e:72:6d:b0:2b:e5:f3:c6:7f:17:b3:92:9a:d7:6f:26:d9:
5b:ae:34:81:74:50:41:43:41:2d:df:71:da:27:49:d9:6a:11:
ea:8f:8e:87:7f:40:98:0b:f1:a9:ae:e0:9f:4f:5e:98:b1:73:
79:f1:09:64:be:81:c5:33:dc:67:fc:9d:f7:a2:11:b1:d7:e0:
9c:5c:39:6a:6d:5f:30:d9:21:a1:8a:eb:f4:1b:ec:be:eb:7b:
5f:6c:d1:27:cc:5e:88:d3:e0:06:8b:7e:38:d5:11:f6:97:4f:
b3:1e:4f:75:73:28:ed:1a:8f:c8:07:b0:d5:1a:35:e2:83:65:
0c:1d:6e:f6:a5:7d:71:4e:ff:35:fe:f5:e3:d8:00:ee:f1:6b:
0c:18:c6:b8:45:d7:38:d9:ae:0a:ed:49:b0:08:5b:03:1f:f3:
54:6b:ae:ed:38:c0:30:62:b9:9c:29:6e:9c:83:71:ad:58:29:
65:bc:0b:8d:a9:22:3e:c7:b9:7e:c7:ce:d3:c8:f4:f9:e8:a7:
0f:be:96:7f:d9:62:fa:ac:21:a2:1d:6b:cc:f7:ff:49:1b:f8:
f3:f8:5d:46:01:77:c8:33:4c:e6:54:11:5b:c1:05:b8:33:16:
f8:f5:c6:0d:91:fc:f7:4a:12:96:98:e9:20:6a:45:d2:bf:9f:
09:13:e2:ab
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZ4xXUXCLU6v5aNoC+TH/81rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDVlYTNjNzUzMGZkMDhjMjk5ZDgwODc1M2Y0N2I4ZGZi
ODRlMGIwHhcNMjYwNTE2MTUxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDA5YWRhZjNhZGJjZjBlMjA1ODEwODg1OTdmMGI3NDkxNjIyODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrApyWwY6agQlG1XsWPwr3cK/1ct
kSncbS88sKpNMv06IP6N8SQnDMSHHfIM64+QA2W/OVFmvIQO9hIUql3yvSgHNzFG
JkqKhPF2BXJjuq6oSbTNxBFYczXDxDSnh6ar5vfr42nZJXF1DDzKNXp6cQWi/qWq
NBsbOZdeYNEtRK5Z10obtl3skrOXc7MK5v+xQe7WdsW0L4tYVD2UKSh8mFt97Vjo
z1PfzaR2YOg6VD0a1/ZpB8Llg3oQI23jE2xMDPtBD5u3jgOi9hBlNG1fo7XMraTP
Y1BPoic8Ug7H3bKGRshUegFRuOe7TH9CEddt3EYKRqXNQiIqO8cWzWdeZwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFH0Jra86288OIFgQiFl/C3SRYihBMB8GA1UdIwQY
MBaAFC3V6jx1MP0IwpnYCHU/R7jfuE4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUt
ZmVmMjRjMzk1ZjkxLzEvZlFtdHJ6cmJ6dzRnV0JDSVdYOExkSkZpS0VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUtZmVmMjRjMzk1Zjkx
LzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQATUkKMB0E
AgACMBcDBQAqDyNAMA4DBQAqDyNFAwUDKg8jQDANBgkqhkiG9w0BAQsFAAOCAQEA
lD5ybbAr5fPGfxezkprXbybZW640gXRQQUNBLd9x2idJ2WoR6o+Oh39AmAvxqa7g
n09emLFzefEJZL6BxTPcZ/yd96IRsdfgnFw5am1fMNkhoYrr9Bvsvut7X2zRJ8xe
iNPgBot+ONUR9pdPsx5PdXMo7RqPyAew1Ro14oNlDB1u9qV9cU7/Nf7149gA7vFr
DBjGuEXXONmuCu1JsAhbAx/zVGuu7TjAMGK5nClunINxrVgpZbwLjakiPse5fsfO
08j0+einD76Wf9li+qwhoh1rzPf/SRv48/hdRgF3yDNM5lQRW8EFuDMW+PXGDZH8
90oSlpjpIGpF0r+fCRPiqw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:09:26 2026 by rpki-client