Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TqI7FrIznYaO-J_m7lH93pRsl6w.roa
File: TqI7FrIznYaO-J_m7lH93pRsl6w.roa (raw, json)
Hash identifier: n64calHbc4GHk0QY0HmL89DlNdKWugwuXNJcJ2IIMQ8=
Subject key identifier: 4E:A2:3B:16:B2:33:9D:86:8E:F8:9F:E6:EE:51:FD:DE:94:6C:97:AC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019E4AB2DF4865488FBD04381EC126198F0C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TqI7FrIznYaO-J_m7lH93pRsl6w.roa
Signing time: Thu 21 May 2026 13:21:37 +0000
ROA not before: Thu 21 May 2026 13:21:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264783
IP address blocks: 201.77.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jun 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:b2:df:48:65:48:8f:bd:04:38:1e:c1:26:19:8f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 21 13:21:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ea23b16b2339d868ef89fe6ee51fdde946c97ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:06:05:ac:26:db:ec:74:e8:fe:68:43:ae:
6c:0a:5e:0b:54:9c:84:46:54:27:c2:66:26:00:e8:
4d:5d:06:ce:e9:3f:9e:ce:5b:0f:dd:fe:16:a3:51:
1e:ac:e2:39:8f:f6:95:18:46:40:7f:61:ff:d8:7b:
d6:3e:0f:83:7e:af:a7:54:a2:28:45:1a:30:d8:ea:
50:4a:13:a4:e5:1f:55:57:33:cf:81:8b:c8:f3:82:
2c:77:43:5c:20:ee:52:81:69:4d:ee:ec:c6:f9:1d:
1a:2f:c3:eb:45:e4:1d:72:16:ed:bd:17:86:9f:86:
ad:29:b1:bf:0d:3e:c3:9f:64:15:3c:50:34:ae:0f:
6e:5c:54:a7:ba:fc:7a:3f:74:4a:32:8b:ae:57:ba:
5a:ec:6f:99:27:8a:87:df:ba:a0:53:41:46:c5:31:
e8:75:9b:8b:46:ed:1b:79:8c:1d:d1:14:eb:96:f0:
4a:a4:c2:35:04:82:d3:05:e0:67:b0:7a:39:a4:b4:
d5:5a:f8:b9:6e:8f:38:ff:d3:e0:9f:4f:53:8a:cd:
90:3c:8e:1e:74:cb:69:55:ea:7a:b6:3b:b7:90:5c:
d2:59:bd:dd:7b:21:f8:82:fc:ed:e8:52:ba:73:19:
c4:c3:28:0d:9c:5a:04:a8:85:d0:4f:a6:d4:79:ee:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:3B:16:B2:33:9D:86:8E:F8:9F:E6:EE:51:FD:DE:94:6C:97:AC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TqI7FrIznYaO-J_m7lH93pRsl6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9e:3a:a8:ea:ab:d0:30:32:57:9d:45:ca:48:b2:67:ea:c4:
5c:78:cf:ce:fd:b6:9a:8a:c0:06:c3:0b:d9:1d:3b:d0:e8:cb:
9d:0d:17:9a:f4:b4:9b:3c:21:3c:33:e2:48:e4:11:cc:81:49:
cc:04:51:b8:f7:09:5c:f9:19:9e:53:6b:93:a6:db:ca:e1:b8:
0d:23:96:89:d5:25:f0:bd:61:7c:87:85:17:fb:24:ba:9f:b3:
00:ca:b4:e8:7d:41:17:c9:13:3e:32:54:aa:86:4f:99:d7:13:
01:6a:a8:1e:0c:4e:27:fa:e0:6d:ee:5d:40:19:4e:e0:9b:c0:
91:f7:dd:41:d7:2f:e8:6d:79:2f:73:8f:c9:58:25:ae:e3:ea:
89:06:7e:cc:91:5c:87:d3:98:3a:51:18:2d:03:7e:90:86:27:
a3:d0:eb:0b:f6:bc:07:96:f2:4a:56:66:c3:5c:4d:6a:2b:45:
5e:8c:64:1b:92:f4:72:4e:5a:b1:77:f8:42:db:48:39:2f:af:
c8:40:49:2c:42:61:96:f4:00:39:d2:70:d5:f4:17:35:43:79:
aa:f4:01:7a:15:39:40:11:be:d9:36:b0:e1:0c:6f:6c:8b:ed:
83:ca:8a:18:8c:3b:07:f5:61:3f:f3:eb:30:1f:8e:be:ec:42:
28:72:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:43:51 2026 by rpki-client