Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa
File: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (raw, json)
Hash identifier: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=
Subject key identifier: 4F:3E:F3:EE:79:E9:3A:8F:BF:EF:FE:3D:A5:4F:13:45:08:31:E0:3E
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 019CDBE3947DD33E31F1AFC7B2E87B5A52C9
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa
Signing time: Wed 11 Mar 2026 07:54:10 +0000
ROA not before: Wed 11 Mar 2026 07:54:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34309
IP address blocks: 2a05:a880:dc20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:e3:94:7d:d3:3e:31:f1:af:c7:b2:e8:7b:5a:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Mar 11 07:54:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f3ef3ee79e93a8fbfeffe3da54f13450831e03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:29:fb:36:48:ba:50:43:5c:36:6d:d2:12:
e1:c4:0d:f8:cb:25:a3:8e:1d:7a:32:d0:dd:14:92:
83:0c:fd:c1:c7:b2:b6:42:69:eb:5c:60:53:c5:68:
9f:cc:eb:bb:9a:4e:c5:62:fa:04:be:f4:cf:ac:4a:
fe:35:6a:0a:55:b6:83:06:d6:87:af:f1:b7:36:84:
a2:db:b2:a6:ab:59:9f:e2:8d:dd:d9:39:1b:35:b0:
be:b4:4e:66:60:46:f5:1d:b2:6a:57:36:00:a7:2e:
78:1a:0d:8d:9c:3e:b1:a1:10:0e:48:6c:b4:fe:70:
08:e2:0b:10:94:e6:34:2f:e9:fd:c2:8f:e3:42:64:
f8:0f:32:e8:8a:d9:28:38:b8:b3:5b:4c:e5:4c:14:
c3:fa:82:61:75:cc:e1:e7:7f:14:88:5d:2f:0e:0d:
74:19:57:56:f8:7d:10:a4:2e:2a:cd:6a:78:34:b1:
ed:73:58:3b:86:da:f7:19:30:49:43:9a:c9:2d:82:
d3:90:5c:59:c0:f9:82:b6:c9:e3:1d:20:9d:1c:1c:
7b:49:58:5b:c9:bc:33:95:95:c6:5a:06:55:3a:7b:
34:ff:86:f0:a3:ca:d1:87:7f:3e:73:d9:e9:f0:44:
f2:25:bd:94:fd:db:49:02:3a:46:92:e3:d1:34:6d:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:F3:EE:79:E9:3A:8F:BF:EF:FE:3D:A5:4F:13:45:08:31:E0:3E
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:a880:dc20::/48
Signature Algorithm: sha256WithRSAEncryption
b3:15:6d:b5:6e:a9:64:29:84:ce:0d:37:a1:66:8d:9c:20:fa:
b0:6d:24:89:17:7b:70:da:43:e3:fa:d0:69:ac:82:4d:38:77:
6e:13:75:c3:77:0a:fc:d1:38:95:7b:1b:31:15:d9:34:8c:dc:
cb:28:99:f1:63:0b:ed:67:f4:00:98:61:74:e3:88:73:55:7f:
cc:3c:73:8b:a9:9b:1e:88:6a:65:04:91:5c:48:47:54:b4:0e:
33:1d:ea:2c:2c:f6:b4:16:59:41:13:90:6c:8b:bc:49:27:ec:
ab:2d:11:22:5d:b0:92:0d:cb:56:ef:c8:42:46:9e:fe:1d:3e:
cf:85:eb:df:17:c5:0d:fa:b5:c3:7a:b7:62:b3:52:c9:79:b4:
e0:e6:7c:5b:4b:ed:95:4a:64:76:c4:ac:f4:34:67:16:44:56:
b1:69:69:80:2e:27:9b:73:de:b1:29:df:75:a9:44:47:49:02:
5a:eb:f7:41:15:28:1a:1c:43:60:4a:11:11:07:7a:5d:86:61:
f3:f6:f6:32:a4:51:0f:b9:b2:b0:45:1b:4b:40:8c:4a:06:c5:
d7:e4:05:40:85:58:98:4d:2d:56:24:55:a7:73:9a:0b:0e:0f:
ad:2c:d2:aa:0e:50:de:49:a2:62:bc:34:24:79:b6:6f:66:11:
ae:d6:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 09:32:51 2026 by rpki-client