Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa
File: c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa (raw, json)
Hash identifier: KT9KE79BSMnOUe9aMNfX3v6pUeJuFhmDw4RlRZ4SGW4=
Subject key identifier: 73:46:61:69:A6:4B:22:AD:79:3A:1F:C4:82:94:C7:9B:50:74:73:76
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C42B0B46315D2171F4999853036F
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa
Signing time: Sat 29 Aug 2026 21:58:12 +0000
ROA not before: Sat 29 Aug 2026 21:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50396
IP address blocks: 77.91.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c4:2b:0b:46:31:5d:21:71:f4:99:98:53:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73466169a64b22ad793a1fc48294c79b50747376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:6d:c6:29:da:dc:77:60:fa:1f:02:66:08:
d5:48:1d:ec:de:c3:d0:86:47:f8:fb:1a:33:1d:57:
65:56:6e:21:21:7b:f3:57:31:45:1c:e1:f2:1d:85:
5a:b0:fb:f5:c9:7a:af:c2:25:63:50:36:fa:05:7c:
05:02:b4:df:7a:11:88:34:78:b1:87:1e:a1:1a:f2:
57:3e:4b:6a:3f:c8:ed:06:77:f9:12:52:ae:31:17:
eb:f8:8f:e2:6f:6a:fa:96:57:2c:4d:7e:44:6a:63:
84:35:2a:88:a0:53:67:9f:cf:a7:9c:17:45:9d:93:
98:c7:8d:a9:31:f1:fd:4a:1a:ff:0d:e6:06:cb:fe:
6d:5c:dc:a1:ed:ad:c8:59:b6:0d:7d:36:c9:fe:b4:
93:a9:c6:20:2d:a6:43:0e:c8:b6:64:e3:2b:e7:d1:
a8:41:d1:8b:8e:4d:1a:b9:39:e1:aa:5d:f7:98:c5:
40:e7:12:d7:51:5a:09:7e:85:06:02:10:85:d2:58:
52:30:68:d6:22:0b:96:34:d0:c5:9a:91:e9:54:73:
6c:b0:15:47:48:5d:52:a1:67:58:c3:54:b0:e9:fd:
25:69:7b:90:8b:cc:cb:9f:32:69:49:4d:b9:14:c9:
28:43:b7:e3:f9:32:17:89:c3:8e:5b:06:fe:b0:e1:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:46:61:69:A6:4B:22:AD:79:3A:1F:C4:82:94:C7:9B:50:74:73:76
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b9:69:82:65:16:c6:74:b3:3f:33:42:89:a9:0e:8b:1e:e0:
fe:9e:32:a4:5e:8d:fe:65:1b:2e:77:22:08:e9:5b:8e:e4:5b:
24:c4:6c:9d:8a:51:a8:e9:44:3d:7f:2d:64:80:08:f9:4d:75:
b9:48:ee:e8:2d:6c:4c:a3:4d:27:68:e1:4f:fa:d8:19:c7:3c:
95:e0:e2:7a:f0:29:9d:2c:7e:87:6b:93:c4:53:51:5b:f0:32:
9e:39:bd:5e:c8:77:c5:76:39:30:cc:e1:e2:1e:a8:76:1d:29:
ba:82:f3:82:2a:d5:6a:99:4e:42:9f:3c:30:c1:99:80:d2:12:
5c:71:4b:5f:eb:31:27:e8:b5:1b:93:82:ef:4c:be:4b:91:a0:
8d:6e:97:51:77:38:f3:eb:b5:77:c0:8c:8d:bd:d4:60:e3:71:
81:4a:19:b0:40:f8:df:c9:30:6f:ff:63:a3:d8:77:4b:80:52:
c5:21:8b:32:33:14:f5:e3:04:75:d1:e6:bd:5d:14:5f:eb:0e:
56:2d:13:6e:ac:b8:27:9f:f3:f6:57:6e:88:c6:1c:c2:89:6b:
6a:4a:9d:be:cc:fd:9e:b6:93:75:11:4c:90:01:f9:7c:69:24:
fd:82:86:ca:c9:13:92:67:0e:e5:30:85:cf:f0:ff:cc:cc:9f:
a7:5c:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:42 2026 by rpki-client