Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tvqls0P_j2bnPmIh9i5DUzkTTDY.roa
File: tvqls0P_j2bnPmIh9i5DUzkTTDY.roa (raw, json)
Hash identifier: 0QPf7wnnWRtnPIHbg3fbL9NLCdOGi9yIL2Iu9G9JVnE=
Subject key identifier: B6:FA:A5:B3:43:FF:8F:66:E7:3E:62:21:F6:2E:43:53:39:13:4C:36
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019CD8809558DB66E9C6787EA3B6501F2F1E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tvqls0P_j2bnPmIh9i5DUzkTTDY.roa
Signing time: Tue 10 Mar 2026 16:07:11 +0000
ROA not before: Tue 10 Mar 2026 16:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201153
IP address blocks: 93.177.105.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:80:95:58:db:66:e9:c6:78:7e:a3:b6:50:1f:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 10 16:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6faa5b343ff8f66e73e6221f62e435339134c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:e4:3a:a5:e9:1e:fe:d1:d8:41:21:5b:6a:
6c:45:b1:5c:2c:87:33:64:38:89:e6:8d:cd:eb:4e:
dd:0a:fe:e3:5f:41:c2:4c:f6:9d:ce:00:ce:da:d5:
9c:08:a1:76:9f:e7:ee:82:09:d3:d6:5f:ab:ec:42:
e5:7b:9a:1e:74:4c:34:ad:e7:fc:72:61:da:c6:bf:
ef:d6:4e:b7:c2:c8:c5:3c:9e:b0:3b:f8:ab:52:24:
0c:9b:88:07:e4:fc:22:05:c3:e4:f0:8e:b1:eb:54:
3d:5c:1f:39:7c:1e:d3:75:c5:56:88:79:0d:fb:e3:
d7:40:46:7e:be:05:3c:20:e2:c6:77:45:ed:f9:a2:
4f:e2:e7:a4:53:dd:89:c4:7e:15:24:41:e2:a2:5d:
e9:dd:f3:b5:cc:87:d8:e8:2c:f7:8b:20:6f:a0:e2:
ef:d5:fb:f8:ca:37:48:a6:a0:71:5b:0e:b4:74:04:
da:bd:00:24:8b:a8:05:8a:fb:90:f4:ba:9c:bb:ef:
70:2f:a8:86:ce:86:7b:90:ce:34:90:76:a8:33:e8:
d5:22:c1:86:3a:f8:e2:eb:82:2f:40:f5:f1:08:ec:
17:82:65:26:f2:8c:53:e9:ef:03:f5:a4:51:95:cb:
64:9a:7d:5a:6e:38:59:fe:fe:ba:84:0e:1e:8f:0e:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:A5:B3:43:FF:8F:66:E7:3E:62:21:F6:2E:43:53:39:13:4C:36
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tvqls0P_j2bnPmIh9i5DUzkTTDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:07:7b:9f:f4:c7:0b:84:ef:15:02:01:b6:99:f1:17:56:06:
36:cc:fb:00:b2:cf:d3:37:ee:d0:43:95:d6:fd:9e:3f:a2:c8:
a6:45:bb:80:f0:76:ca:1a:cc:ae:7a:6b:80:7d:69:8a:0f:db:
fd:3b:e3:00:f4:de:7d:bc:79:53:fa:8a:d8:f2:86:1f:34:a7:
f8:02:70:8e:48:c7:cb:37:4c:c2:67:dd:b2:83:49:bd:c5:fe:
49:38:f7:fb:85:3e:6b:ee:7a:1f:ac:7e:de:b2:91:91:cf:c8:
0f:3c:ea:0b:36:3e:da:6f:15:12:ad:ea:7f:89:66:9a:25:32:
02:19:8d:bf:da:52:12:4d:1f:29:15:5a:44:2c:84:55:94:75:
16:bd:56:cf:9a:32:54:ce:53:a2:10:b5:af:4f:d3:26:40:af:
a9:15:8b:d8:73:5d:89:18:c7:37:6c:24:20:1b:f4:da:81:28:
51:10:c4:33:65:cb:2f:ae:1e:21:85:81:27:f4:96:31:05:69:
8a:ba:33:01:ec:be:58:d8:ce:54:61:5e:e0:0c:75:cb:60:ae:
8c:f0:c8:6b:92:c2:9b:0f:59:7b:e6:7e:8f:f0:87:bd:3b:02:
a3:3f:9b:91:6c:70:2b:38:c0:3a:01:ed:04:b1:96:c7:1a:e9:
93:3c:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:23:35 2026 by rpki-client