Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/b2afJlhxEQzEsT34QFvWdnw1Ju0.roa
File: b2afJlhxEQzEsT34QFvWdnw1Ju0.roa (raw, json)
Hash identifier: oFCF0FVM+M0W2W0Svm/nmSIwW9VxjqkfhIegSjjsJU8=
Subject key identifier: 6F:66:9F:26:58:71:11:0C:C4:B1:3D:F8:40:5B:D6:76:7C:35:26:ED
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019D953DAD2CDD9827420AA47AFDD9CB878B
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/b2afJlhxEQzEsT34QFvWdnw1Ju0.roa
Signing time: Thu 16 Apr 2026 07:42:20 +0000
ROA not before: Thu 16 Apr 2026 07:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.2.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.41.0/24 maxlen: 24
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.83.0/24 maxlen: 24
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.142.31.0/24 maxlen: 24
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 13:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:3d:ad:2c:dd:98:27:42:0a:a4:7a:fd:d9:cb:87:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Apr 16 07:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f669f265871110cc4b13df8405bd6767c3526ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:a4:9e:16:36:34:18:09:61:aa:24:ea:6f:
31:ca:e6:ca:cc:c0:42:24:fa:30:0b:5a:59:8f:ea:
d7:bb:2e:ad:55:a7:43:ee:4b:a7:6c:6c:3f:12:97:
7e:4a:17:67:80:54:99:61:a4:83:69:4a:05:4d:d8:
67:27:de:02:4e:bf:d8:c3:74:f1:c1:2f:2d:0f:63:
5c:69:a5:6e:44:30:fa:9b:ce:f0:3f:e3:c0:95:60:
c0:b6:dd:e0:4b:37:b2:11:0a:43:6b:98:ba:06:91:
03:e0:e5:3e:8c:83:e2:c0:28:dd:43:20:43:e7:e9:
f9:ca:8e:d1:be:45:d4:27:94:23:c0:d4:af:1f:d5:
48:18:ba:d6:a0:aa:b8:73:48:21:af:61:2c:30:3b:
23:52:cb:c5:bc:8f:63:68:0e:31:d1:63:48:b2:be:
4f:ec:a1:5a:1f:88:24:23:2f:bc:a2:9d:14:6a:60:
48:25:f3:4b:2b:8a:1f:45:8a:f5:03:91:a8:bf:73:
99:27:a4:90:c2:0b:73:88:17:b8:77:fe:c7:34:a5:
8d:1e:9c:00:3d:9b:ed:1a:3e:29:91:3f:0e:8e:81:
da:d5:61:54:49:0b:14:5e:f0:d4:3f:bc:b1:9f:25:
67:39:b5:e0:08:89:31:d6:e1:70:32:26:44:85:68:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:9F:26:58:71:11:0C:C4:B1:3D:F8:40:5B:D6:76:7C:35:26:ED
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/b2afJlhxEQzEsT34QFvWdnw1Ju0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.2.0/23
78.128.12.0-78.128.31.255
78.128.41.0/24
78.128.52.0-78.128.59.255
78.128.83.0-78.128.91.255
78.128.97.0/24
78.128.100.0-78.128.107.255
78.142.31.0/24
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.183.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
59:01:89:54:9b:c0:3f:30:60:29:11:79:3c:f6:59:21:34:36:
82:03:87:6d:ac:23:61:16:f0:39:1c:0e:af:f4:6c:89:23:34:
14:04:32:7a:af:56:45:69:7d:26:d1:40:09:40:0a:01:ff:b8:
5c:47:74:a0:de:df:0d:4e:00:98:81:51:8f:0d:22:fe:e5:53:
80:a5:25:2a:a2:c1:26:08:92:2e:12:c9:03:c1:a1:9f:4d:fa:
4e:a8:d3:6c:48:c7:19:11:a7:13:2e:2a:44:0b:46:93:f3:5d:
18:37:44:92:80:95:12:b3:06:d4:59:7f:03:d4:a6:e8:cc:91:
9e:48:81:26:d4:a8:7c:10:9d:19:2f:05:c2:49:83:74:cc:28:
f5:cf:1d:ce:c8:2d:d0:e8:89:22:c2:87:b8:bf:9d:bd:4c:96:
c0:aa:2d:54:81:69:de:02:d7:9a:10:43:71:15:ba:03:3e:a5:
08:a2:ea:8c:2f:bb:cf:0b:c3:af:b9:f9:8a:bb:02:70:1c:f3:
4c:a4:de:10:d5:a3:9c:d4:05:9b:bd:b3:7e:1c:48:46:01:07:
db:95:cb:c8:a4:d1:c8:01:af:af:b6:96:79:ef:02:dd:17:58:
73:e6:17:a8:09:f6:cb:a5:32:51:46:10:b0:77:45:d8:9b:25:
e8:61:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:47 2026 by rpki-client