Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/n24rpKw-gK2As8dq1f65xDlyLmg.roa
File: n24rpKw-gK2As8dq1f65xDlyLmg.roa (raw, json)
Hash identifier: 7YG0l5UwcmGtwI4tXmm6RQMgPqe0InES4/ba+ypR3Fk=
Subject key identifier: 9F:6E:2B:A4:AC:3E:80:AD:80:B3:C7:6A:D5:FE:B9:C4:39:72:2E:68
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019EAB60DA32711CE486848944CA9F7FC72B
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/n24rpKw-gK2As8dq1f65xDlyLmg.roa
Signing time: Tue 09 Jun 2026 07:55:11 +0000
ROA not before: Tue 09 Jun 2026 07:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41965
IP address blocks: 77.95.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:60:da:32:71:1c:e4:86:84:89:44:ca:9f:7f:c7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jun 9 07:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f6e2ba4ac3e80ad80b3c76ad5feb9c439722e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:a1:aa:ed:0b:91:81:04:d4:f8:0f:78:11:
44:26:72:e8:54:25:a6:64:35:83:70:67:7d:67:72:
f6:2a:57:c1:5e:3e:0c:63:40:6b:54:8b:7a:4a:54:
31:df:69:ec:ac:4a:de:c0:b6:81:c7:92:a4:a1:fb:
55:00:11:86:00:c8:0a:96:cc:08:59:11:54:fb:bb:
da:f4:7e:60:66:b9:96:23:e1:3f:4b:25:68:73:5c:
2d:81:97:c1:39:0f:ad:0b:b8:ab:e7:ad:b4:7a:d6:
38:52:86:90:6b:86:89:94:c6:09:9a:ab:5f:7b:d7:
a8:d6:48:48:d0:f7:a2:6c:d4:da:29:fb:3b:70:0a:
e0:01:9b:b4:23:1a:23:48:a7:8b:79:b6:7b:d4:21:
1d:33:3f:65:3f:07:6a:29:2f:7e:29:4e:4d:6e:92:
20:75:a8:50:3e:21:85:3a:ac:56:48:3e:43:b2:fb:
1d:a7:0c:b6:55:f6:fe:b2:27:33:c5:c2:ed:39:40:
55:84:ea:4f:0f:a5:32:76:fc:43:b4:15:3c:a2:7d:
0b:55:3b:34:f4:94:8d:96:53:10:d7:6b:6e:0c:81:
5e:44:c3:41:99:70:bb:4e:3d:66:ba:b3:63:d5:37:
d6:72:58:fc:a0:d4:5b:6e:10:2e:29:45:4e:40:27:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:2B:A4:AC:3E:80:AD:80:B3:C7:6A:D5:FE:B9:C4:39:72:2E:68
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/n24rpKw-gK2As8dq1f65xDlyLmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f0:e3:c2:d1:98:42:d6:21:c4:28:9f:63:41:cf:bb:40:51:
19:09:da:45:61:cc:9b:3d:a0:cd:24:4f:ea:0b:3b:44:df:1e:
c1:21:9e:26:6f:24:9a:e0:59:7d:77:44:df:d7:6c:a8:99:3a:
8c:70:99:35:15:07:76:dd:dc:bf:11:0b:ef:87:6d:e9:f2:39:
db:fe:8d:92:c5:6d:59:97:b7:58:e2:70:ec:75:15:94:9c:b2:
95:44:82:6b:f5:f9:ef:f3:66:d9:8e:7e:84:38:32:f7:37:35:
5c:ac:55:8e:51:6f:83:9a:22:49:e4:d3:95:2c:0c:d6:c7:59:
39:2c:28:97:b7:aa:dc:c2:4d:34:3c:3e:f0:59:47:72:23:84:
e9:5f:cb:ff:80:b0:9a:19:9d:fa:9b:2f:98:a1:a2:ea:7f:10:
61:a9:58:a9:9c:31:5f:42:e9:0c:1f:9b:7a:cd:a3:6d:2f:a6:
cb:a3:81:5d:20:87:94:84:8c:78:27:60:67:2e:3f:b5:27:e9:
ec:27:b9:d8:0d:c6:29:80:a1:09:18:f8:64:fd:ec:27:87:3f:
ce:34:08:ab:03:cc:17:21:9d:49:c1:45:ba:0d:05:05:87:ab:
80:83:95:5a:cf:5c:5b:8d:69:33:58:7b:98:af:bc:7d:2e:cc:
8a:95:7b:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6rYNoycRzkhoSJRMqff8crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjYwNjA5MDc1NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjZlMmJhNGFjM2U4MGFkODBiM2M3NmFkNWZlYjljNDM5NzIyZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilyhqu0LkYEE1PgPeBFEJnLoVCWm
ZDWDcGd9Z3L2KlfBXj4MY0BrVIt6SlQx32nsrErewLaBx5KkoftVABGGAMgKlswI
WRFU+7va9H5gZrmWI+E/SyVoc1wtgZfBOQ+tC7ir5620etY4UoaQa4aJlMYJmqtf
e9eo1khI0PeibNTaKfs7cArgAZu0IxojSKeLebZ71CEdMz9lPwdqKS9+KU5NbpIg
dahQPiGFOqxWSD5Dsvsdpwy2Vfb+siczxcLtOUBVhOpPD6UydvxDtBU8on0LVTs0
9JSNllMQ12tuDIFeRMNBmXC7Tj1murNj1TfWclj8oNRbbhAuKUVOQCfyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9uK6SsPoCtgLPHatX+ucQ5ci5oMB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvbjI0cnBLdy1nSzJBczhkcTFmNjV4RGx5TG1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTV+8MA0G
CSqGSIb3DQEBCwUAA4IBAQCm8OPC0ZhC1iHEKJ9jQc+7QFEZCdpFYcybPaDNJE/q
CztE3x7BIZ4mbySa4Fl9d0Tf12yomTqMcJk1FQd23dy/EQvvh23p8jnb/o2SxW1Z
l7dY4nDsdRWUnLKVRIJr9fnv82bZjn6EODL3NzVcrFWOUW+DmiJJ5NOVLAzWx1k5
LCiXt6rcwk00PD7wWUdyI4TpX8v/gLCaGZ36my+YoaLqfxBhqVipnDFfQukMH5t6
zaNtL6bLo4FdIIeUhIx4J2BnLj+1J+nsJ7nYDcYpgKEJGPhk/ewnhz/ONAirA8wX
IZ1JwUW6DQUFh6uAg5Vaz1xbjWkzWHuYr7x9LsyKlXsd
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:16:40 2026 by rpki-client