Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa
File: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (raw, json)
Hash identifier: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=
Subject key identifier: 63:76:A8:22:5A:8D:08:DA:61:B2:20:8A:6B:63:7F:66:5B:B9:A5:34
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 019E8413710AB23695FB8C6D9D965D904CFD
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa
Signing time: Mon 01 Jun 2026 16:45:27 +0000
ROA not before: Mon 01 Jun 2026 16:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197189
IP address blocks: 5.77.144.0/20 maxlen: 20
5.77.144.0/24 maxlen: 24
5.77.145.0/24 maxlen: 24
5.77.146.0/24 maxlen: 24
5.77.147.0/24 maxlen: 24
5.77.148.0/24 maxlen: 24
5.77.149.0/24 maxlen: 24
5.77.150.0/24 maxlen: 24
5.77.151.0/24 maxlen: 24
5.77.152.0/24 maxlen: 24
5.77.153.0/24 maxlen: 24
5.77.154.0/24 maxlen: 24
5.77.155.0/24 maxlen: 24
5.77.156.0/24 maxlen: 24
5.77.157.0/24 maxlen: 24
5.77.158.0/24 maxlen: 24
5.77.159.0/24 maxlen: 24
5.77.160.0/20 maxlen: 20
5.77.160.0/24 maxlen: 24
5.77.161.0/24 maxlen: 24
5.77.162.0/24 maxlen: 24
5.77.163.0/24 maxlen: 24
5.77.164.0/24 maxlen: 24
5.77.165.0/24 maxlen: 24
5.77.166.0/24 maxlen: 24
5.77.167.0/24 maxlen: 24
5.77.168.0/24 maxlen: 24
5.77.169.0/24 maxlen: 24
5.77.170.0/24 maxlen: 24
5.77.171.0/24 maxlen: 24
5.77.172.0/24 maxlen: 24
5.77.173.0/24 maxlen: 24
5.77.174.0/24 maxlen: 24
5.77.175.0/24 maxlen: 24
5.77.176.0/20 maxlen: 20
5.77.176.0/24 maxlen: 24
5.77.177.0/24 maxlen: 24
5.77.178.0/24 maxlen: 24
5.77.179.0/24 maxlen: 24
5.77.180.0/24 maxlen: 24
5.77.181.0/24 maxlen: 24
5.77.182.0/24 maxlen: 24
5.77.183.0/24 maxlen: 24
5.77.184.0/24 maxlen: 24
5.77.185.0/24 maxlen: 24
5.77.186.0/24 maxlen: 24
5.77.187.0/24 maxlen: 24
5.77.188.0/24 maxlen: 24
5.77.189.0/24 maxlen: 24
5.77.190.0/24 maxlen: 24
5.77.191.0/24 maxlen: 24
188.115.226.0/24 maxlen: 24
188.115.227.0/24 maxlen: 24
188.115.228.0/24 maxlen: 24
188.115.229.0/24 maxlen: 24
188.115.230.0/24 maxlen: 24
188.115.240.0/20 maxlen: 20
188.115.240.0/24 maxlen: 24
188.115.241.0/24 maxlen: 24
188.115.242.0/24 maxlen: 24
188.115.243.0/24 maxlen: 24
188.115.244.0/24 maxlen: 24
188.115.245.0/24 maxlen: 24
188.115.246.0/24 maxlen: 24
188.115.247.0/24 maxlen: 24
188.115.248.0/24 maxlen: 24
188.115.249.0/24 maxlen: 24
188.115.250.0/24 maxlen: 24
188.115.251.0/24 maxlen: 24
188.115.252.0/24 maxlen: 24
188.115.253.0/24 maxlen: 24
188.115.254.0/24 maxlen: 24
188.115.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:13:71:0a:b2:36:95:fb:8c:6d:9d:96:5d:90:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jun 1 16:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6376a8225a8d08da61b2208a6b637f665bb9a534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:72:fb:a0:37:24:5c:79:fc:d1:12:18:d4:
a8:68:58:a2:97:b0:10:e7:b4:50:63:00:f9:60:dd:
27:0e:e9:d4:31:73:cd:84:00:9d:c5:89:ff:74:ab:
20:2c:f7:9a:5f:19:5c:ed:9b:81:e4:2e:98:b5:ab:
69:ab:b4:ca:74:37:45:13:36:9a:93:74:5c:af:1a:
4c:6b:36:1d:c2:a7:6a:d3:41:69:0a:da:ab:68:81:
6f:9f:1c:67:c7:47:d9:96:b5:f4:ae:6e:30:03:71:
ab:99:8e:f2:d0:fc:2c:6b:a8:71:4f:52:b5:f3:40:
b6:aa:18:94:f1:26:39:b4:64:fb:70:b6:fd:03:85:
77:97:3f:59:b0:b0:11:79:c9:fa:32:cb:e2:fc:72:
b6:11:c4:e5:62:df:c7:48:4a:c7:72:72:7f:34:5d:
68:be:12:da:41:50:ef:ad:5e:26:bb:ef:88:36:e0:
d4:45:33:73:6a:f0:02:52:49:00:d8:d9:c7:d8:c1:
69:3d:d4:5c:c6:c6:19:7a:d8:1d:0c:57:61:f4:21:
3a:47:07:79:bd:3b:0b:c5:ec:a5:8d:6b:a8:63:85:
a9:87:67:62:0c:d1:7a:bc:41:4d:b3:d3:40:8c:9d:
09:b0:87:4b:f6:6c:c4:08:0f:37:f1:97:4e:da:9b:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:A8:22:5A:8D:08:DA:61:B2:20:8A:6B:63:7F:66:5B:B9:A5:34
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.77.144.0-5.77.191.255
188.115.226.0-188.115.230.255
188.115.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:7c:c4:a3:95:30:9d:e7:11:67:8e:45:43:7c:46:b2:78:58:
d8:d4:25:ef:04:ab:bf:7e:e8:28:d1:19:df:d1:60:9e:77:22:
90:d7:57:d1:46:9b:ed:23:ab:64:9f:01:6d:ef:e5:63:0f:3b:
35:ad:b5:d2:e0:d5:7a:67:7b:fc:b2:e6:b6:cf:cb:ac:45:c5:
b9:52:25:77:7b:02:fd:30:6b:5c:6a:d6:bd:d8:91:ef:25:29:
44:62:eb:d2:3c:b6:6c:67:01:11:38:17:58:34:41:7f:31:2e:
b8:66:59:f2:1e:7a:36:b9:c3:3e:57:c6:01:a8:47:e0:54:14:
42:65:bc:91:ce:cb:26:6f:ce:81:ee:78:0b:b8:c2:36:b1:87:
be:42:b8:12:c8:f3:27:1d:17:0c:29:fb:9b:c8:24:a9:4c:0b:
57:24:26:9d:6d:94:58:8c:a1:8c:39:c7:10:9d:ee:b6:90:50:
41:1a:66:63:b4:3e:d2:4e:d1:eb:af:7c:e1:0f:64:a6:2a:e1:
82:a3:c7:e9:f7:4a:bc:7a:39:85:84:7d:80:c2:2e:e8:17:d7:
1d:53:81:44:5c:73:f1:ac:9a:61:ea:fe:59:48:be:8b:40:b6:
c5:c1:49:cb:f4:c7:e0:fb:1c:75:3d:23:23:9d:75:e3:64:51:
c0:5d:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:16 2026 by rpki-client