Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-FV2dKcYXzrKkOh--v-XykkPVQE.roa
File: 1-FV2dKcYXzrKkOh--v-XykkPVQE.roa (raw, json)
Hash identifier: geHGfyRhWEOOeeZVNUtS38/kNfTY7cLkc9J5qXTS/FI=
Subject key identifier: F8:55:76:74:A7:18:5F:3A:CA:90:E8:7E:FA:FF:97:CA:49:0F:55:01
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A11AE34D9340A680FF730BC342EED94ED3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-FV2dKcYXzrKkOh--v-XykkPVQE.roa
Signing time: Thu 08 Oct 2026 09:41:06 +0000
ROA not before: Thu 08 Oct 2026 09:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39639
IP address blocks: 201.77.57.0/24 maxlen: 24
2a01:7680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:e3:4d:93:40:a6:80:ff:73:0b:c3:42:ee:d9:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 8 09:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8557674a7185f3aca90e87efaff97ca490f5501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:1d:75:21:a0:58:5a:c6:50:66:e3:d7:32:
49:d1:e6:7f:ab:33:fd:2a:e1:62:9b:b0:66:5a:09:
75:66:ff:37:e3:19:49:82:83:b1:90:0a:2d:e7:cf:
21:52:37:d1:a5:5d:f5:38:c0:35:0a:3b:0f:70:30:
9d:6a:39:2d:5e:4d:32:a3:f5:fb:b3:09:fa:54:46:
28:e3:27:73:a8:02:9e:54:fb:9d:f8:23:72:50:55:
6a:27:c2:b2:46:8b:a4:40:10:06:74:ad:c2:65:96:
dc:5e:30:20:34:1f:39:c9:43:d7:e1:4d:d6:c7:90:
59:08:2d:57:b9:26:63:fb:7a:04:11:57:e9:23:dd:
ab:6b:5d:b5:7e:74:c6:71:03:48:e3:f5:98:17:bf:
b2:b4:eb:7b:6f:8b:53:37:28:45:c2:a3:6b:45:13:
56:9b:3c:9f:8a:75:dc:94:23:f2:c9:ee:f4:96:1c:
61:a2:81:43:aa:ec:3b:91:32:2c:36:3e:35:af:de:
be:b4:84:8f:5c:27:1b:8f:a3:f0:a1:d1:9f:e9:b2:
1f:94:dc:ab:92:7b:19:74:3d:49:ba:7d:c8:d3:12:
a6:ab:5f:46:78:df:82:6d:ff:87:e6:42:14:28:54:
70:10:42:76:44:cd:ed:0d:80:d0:32:9a:47:7b:d9:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:76:74:A7:18:5F:3A:CA:90:E8:7E:FA:FF:97:CA:49:0F:55:01
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-FV2dKcYXzrKkOh--v-XykkPVQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.57.0/24
IPv6:
2a01:7680::/32
Signature Algorithm: sha256WithRSAEncryption
07:fa:a2:f2:e5:71:f0:bc:92:34:ea:22:e4:a5:03:0b:45:95:
8b:ef:d0:46:62:b3:a7:39:c5:41:51:8e:a3:57:7e:a2:e3:01:
84:f5:41:eb:14:87:20:41:d5:8e:60:07:a2:76:47:e3:44:bb:
0b:d8:eb:f7:79:77:ed:a6:00:b1:f9:2c:34:bf:f7:ba:50:1a:
b0:2a:f4:2f:a2:54:dd:c1:5c:5a:35:04:78:d1:e9:3f:15:a2:
69:2b:9b:7d:b2:2f:45:66:0b:0f:58:d0:10:91:9d:86:d7:f4:
8f:54:6a:0f:f9:8f:2d:d3:e1:5f:1e:74:70:5c:da:05:aa:72:
8d:1b:e3:80:f0:9b:b8:b9:b4:f1:5a:05:13:93:b2:c1:fd:f5:
ab:bf:d4:9b:60:e4:6d:05:6d:08:0b:b8:75:9e:b8:f4:80:36:
8b:0a:56:82:cb:c7:68:6b:54:36:ab:d4:f0:2a:60:63:cf:4d:
f5:2b:24:73:41:9a:d1:9f:73:b3:02:c3:18:57:e0:89:89:74:
fd:7b:82:e5:be:bd:50:cb:fa:12:4a:49:89:dd:71:ba:5d:27:
f8:56:ea:ce:0a:68:fa:0c:6b:6f:50:97:b0:c4:47:93:46:31:
e0:0d:27:ce:8d:35:24:09:b7:39:55:71:8a:ef:87:62:9e:b6:
41:bc:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:04 2026 by rpki-client