Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/Tue_PWy7segmnsovxaPWBkZUzrU.roa
File: Tue_PWy7segmnsovxaPWBkZUzrU.roa (raw, json)
Hash identifier: 5O5QW8lDnCwWoCWxPj6d01is7KFtD9QmFsNqHDAkbBI=
Subject key identifier: 4E:E7:BF:3D:6C:BB:B1:E8:26:9E:CA:2F:C5:A3:D6:06:46:54:CE:B5
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C4AA027E36CE8C5307EC133B547F
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/Tue_PWy7segmnsovxaPWBkZUzrU.roa
Signing time: Sat 29 Aug 2026 21:58:12 +0000
ROA not before: Sat 29 Aug 2026 21:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50867
IP address blocks: 77.91.91.0/24 maxlen: 24
77.91.92.0/24 maxlen: 24
77.91.93.0/24 maxlen: 24
77.91.94.0/24 maxlen: 24
77.91.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c4:aa:02:7e:36:ce:8c:53:07:ec:13:3b:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee7bf3d6cbbb1e8269eca2fc5a3d6064654ceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:b0:f4:00:5f:27:0b:59:80:c6:be:f0:9b:
6a:81:05:e8:9f:ca:94:15:5c:e5:ea:d0:0b:8b:a9:
95:6a:d8:72:59:b5:20:ed:72:47:57:8a:c8:3c:59:
6e:8e:40:ec:81:a2:ab:f9:5d:2a:08:9a:0d:0f:2e:
3a:d0:a4:05:40:48:e5:0f:59:90:8f:21:a2:b6:e4:
27:07:d0:4b:e7:86:79:01:f7:fa:8e:39:55:f3:1f:
86:90:66:a9:bb:05:60:fd:e1:1c:74:c5:90:13:03:
2b:85:8e:fc:2a:f8:ba:8f:be:40:de:20:d3:3c:60:
7b:27:67:fb:b2:d6:12:90:fe:44:db:9d:4f:79:2f:
e8:34:84:dc:26:81:5d:58:e3:c2:bf:eb:67:9f:70:
29:dc:67:34:58:4c:3b:0a:16:67:f3:f6:bf:e2:86:
f6:a6:8a:29:9b:2b:d6:54:ae:32:f5:74:80:f8:48:
d2:21:48:97:54:eb:9f:56:60:d3:2a:f5:68:3b:36:
43:0b:91:20:dd:f5:55:ac:f2:4c:41:97:6a:92:d1:
70:60:fa:26:3c:e2:e8:8a:a2:2c:2c:a2:a7:fe:92:
75:ec:b8:3c:ec:93:38:ca:b0:e2:d7:2c:17:01:ea:
15:2d:2b:85:ea:39:9b:c7:bd:ae:d0:56:17:62:4e:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E7:BF:3D:6C:BB:B1:E8:26:9E:CA:2F:C5:A3:D6:06:46:54:CE:B5
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/Tue_PWy7segmnsovxaPWBkZUzrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.91.0-77.91.95.255
Signature Algorithm: sha256WithRSAEncryption
12:d1:0d:08:31:17:2f:03:68:79:15:9f:22:51:30:44:99:69:
7e:65:5f:1c:12:d0:b3:05:87:95:75:90:c9:9f:79:98:e8:e3:
d8:6e:da:43:f9:e9:34:b7:3e:1a:79:f6:e8:8e:28:fb:3f:67:
d4:76:33:0b:e3:2e:da:25:77:e9:84:fa:33:2c:80:e7:63:cc:
9b:4a:b1:e5:30:69:c1:dc:ef:a2:76:06:3b:9e:59:ad:35:fe:
f7:38:e1:8e:7a:5a:c6:4e:8a:b9:bb:1e:27:7d:a7:9e:06:f6:
40:61:0c:ec:1f:bd:52:01:25:a1:22:87:eb:dc:8a:09:c7:6a:
c7:f1:71:dd:c0:45:1a:a1:87:73:0c:90:f4:e6:ec:ed:5b:59:
69:4b:bf:69:2e:f2:97:d3:31:0a:f6:a3:11:79:2e:cb:0e:85:
e8:08:b4:02:7e:64:85:a2:aa:9c:17:15:7b:10:a3:15:23:fa:
cf:8e:75:9d:3c:03:48:bb:65:dd:91:e6:bc:73:9b:20:45:3f:
2a:bc:0a:e1:99:41:4b:df:f9:24:36:8e:8f:80:51:16:b7:26:
dc:ce:b1:be:6c:39:4b:ec:e3:88:06:97:fa:b7:fa:0d:17:c8:
0b:b7:f6:f2:6e:29:44:d6:27:38:af:8c:d0:3f:4d:59:08:5e:
9e:d6:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:40 2026 by rpki-client