Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/X0ukLuaxhJZhX6CulSks1xvf6to.roa
File: X0ukLuaxhJZhX6CulSks1xvf6to.roa (raw, json)
Hash identifier: i8e0+zdnzm9uqxIjXioBeuJQQiimfAmF54U9s4/y+dU=
Subject key identifier: 5F:4B:A4:2E:E6:B1:84:96:61:5F:A0:AE:95:29:2C:D7:1B:DF:EA:DA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A17D28C37EE419B71373E042C09EBB66A9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/X0ukLuaxhJZhX6CulSks1xvf6to.roa
Signing time: Tue 27 Oct 2026 11:39:45 +0000
ROA not before: Tue 27 Oct 2026 11:39:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.41.0/24 maxlen: 24
78.128.86.0/23 maxlen: 23
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.31.0/24 maxlen: 24
84.201.224.0/20 maxlen: 20
91.148.163.0/24 maxlen: 24
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:28:c3:7e:e4:19:b7:13:73:e0:42:c0:9e:bb:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 27 11:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f4ba42ee6b18496615fa0ae95292cd71bdfeada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:d9:ba:50:44:ea:34:9d:21:fc:13:6d:14:
90:f7:39:d1:17:5d:7a:d8:69:8e:43:18:6f:a0:22:
b3:a1:43:72:da:db:0f:7b:4d:73:69:e8:3a:3f:f7:
83:ab:d4:a0:93:fd:46:23:6b:71:d3:9e:17:22:cc:
b8:58:bb:7c:0f:85:a2:11:9d:e2:69:48:3b:1d:fc:
d6:9a:b0:2a:72:2f:66:16:8f:7c:08:4b:3f:81:4c:
ce:21:f2:ae:aa:85:95:9f:5e:63:71:85:94:b3:1e:
f2:f7:8d:97:e2:10:0c:62:00:2e:c6:ba:31:49:3f:
f8:7b:a5:e7:db:d8:79:5a:2d:8d:1d:91:7f:65:c3:
88:73:0e:4d:72:2d:43:b4:89:e4:7a:89:78:48:e8:
62:4a:5d:17:63:9e:e0:ad:20:72:a9:4b:1b:49:4d:
d5:40:dc:55:36:83:e7:ed:25:c0:36:2f:8d:3d:15:
bd:6d:4e:69:13:92:37:40:3a:20:ac:08:bc:35:e1:
a7:5f:49:83:26:3b:b8:b1:aa:db:67:96:c1:e2:b5:
ae:b0:02:2b:1c:66:9a:c2:75:4c:24:19:d9:d3:9b:
47:bc:2c:68:3a:1c:44:6e:b2:32:68:ca:2c:7e:ca:
67:9d:aa:51:94:6a:80:67:2a:c4:f1:ea:ff:34:7c:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:A4:2E:E6:B1:84:96:61:5F:A0:AE:95:29:2C:D7:1B:DF:EA:DA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/X0ukLuaxhJZhX6CulSks1xvf6to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.41.0/24
78.128.86.0-78.128.91.255
78.128.97.0/24
78.128.100.0/22
78.128.116.0/23
78.142.31.0/24
84.201.224.0/20
91.148.163.0-91.148.165.255
91.148.169.0-91.148.175.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:51:cd:31:de:dd:0b:5b:65:8f:21:8f:0c:04:c6:32:f8:4e:
f0:83:8d:4b:2f:b5:b7:ac:4a:d1:ac:c2:08:85:09:62:1d:26:
5c:d9:9e:e7:f8:a8:86:73:71:b8:a2:31:3b:e1:5d:92:9c:40:
8b:34:41:fa:1b:b9:21:c4:50:a7:56:f8:82:19:5d:85:08:76:
17:c5:22:37:fd:e7:10:2c:44:54:a2:7c:cb:5f:9e:f3:10:4c:
9d:85:eb:02:a3:79:e1:14:cf:3f:c0:29:21:1e:9e:c1:37:41:
8e:76:05:a1:5d:89:61:d2:3c:12:68:9a:3e:5c:fd:a7:f7:09:
b1:3e:94:09:05:ab:8a:07:03:7f:64:34:9b:a7:20:f6:85:e0:
e9:be:80:46:81:a5:ed:f2:6f:23:e5:06:db:c5:b0:82:29:32:
2d:90:7f:a5:d2:a6:df:2f:5f:79:32:0b:66:ca:78:a1:93:4f:
98:b7:69:19:d0:51:05:b0:ef:e5:63:ae:f7:25:4b:a0:34:c8:
1a:85:6a:80:0c:52:75:8c:2d:5f:20:26:87:b9:9d:94:43:58:
16:60:4d:6d:67:fb:58:e4:1b:06:56:4d:5a:09:4a:60:92:c0:
17:a5:ea:89:af:ae:86:54:73:5a:eb:9d:7e:a4:4d:8e:a9:0c:
40:77:d9:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 08:25:48 2026 by rpki-client