Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/o5yRFway_Mq4Zv67kRx2PYktbeM.roa
File: o5yRFway_Mq4Zv67kRx2PYktbeM.roa (raw, json)
Hash identifier: zQW10wrSEKeyvQ38K+r4CPtwwl2dzrWMOfH6m94zpX4=
Subject key identifier: A3:9C:91:17:06:B2:FC:CA:B8:66:FE:BB:91:1C:76:3D:89:2D:6D:E3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EFE120873293D6E72A52C4FDDCF011699
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/o5yRFway_Mq4Zv67kRx2PYktbeM.roa
Signing time: Thu 25 Jun 2026 09:17:35 +0000
ROA not before: Thu 25 Jun 2026 09:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 77.83.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:12:08:73:29:3d:6e:72:a5:2c:4f:dd:cf:01:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 25 09:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a39c911706b2fccab866febb911c763d892d6de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:76:5c:5c:f1:03:4c:08:cd:03:0b:84:34:
f7:3f:dc:1e:88:8e:4f:18:8f:a2:c9:e0:e2:b3:60:
a5:34:91:c8:b0:7f:b0:0b:19:b6:b9:78:27:98:db:
61:04:80:32:fc:f9:f5:43:91:b2:1a:44:62:b2:4d:
2f:80:e3:77:48:7c:02:bb:94:be:4b:54:02:0a:e6:
76:72:66:4b:4b:c8:fd:9d:87:75:b8:68:1b:86:37:
11:aa:ef:7f:5e:cc:1b:dc:df:a8:87:36:2d:af:36:
ea:3f:c4:a3:9e:22:9f:2e:8b:0d:8e:ec:78:49:86:
c8:fe:f9:15:bc:d0:37:74:0a:ac:4e:7c:f9:1c:1f:
63:b7:28:b3:38:ba:c2:ad:8c:4b:58:dd:63:0f:ab:
f0:08:df:39:f2:c6:9d:0b:b5:a2:5c:7f:da:09:a9:
68:29:11:52:a6:dd:34:74:d6:17:e9:69:52:46:6d:
57:fc:f4:70:8c:29:0b:4b:6c:b0:13:e3:cd:59:4c:
35:4a:f4:4f:68:24:42:4c:6d:a4:a6:a6:ab:44:62:
c1:7b:eb:85:a5:47:f6:6c:ec:84:0f:d9:72:3d:31:
5e:82:c6:7a:8f:06:29:9a:47:66:fd:46:b8:8d:b1:
3a:90:c7:56:07:8c:f7:57:ea:71:28:d3:df:dc:e4:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:91:17:06:B2:FC:CA:B8:66:FE:BB:91:1C:76:3D:89:2D:6D:E3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/o5yRFway_Mq4Zv67kRx2PYktbeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f5:da:d7:19:75:23:c3:5a:8c:41:3e:8e:35:51:0b:aa:46:
6d:90:e4:b3:07:1d:41:67:71:b6:13:c9:99:1e:3d:f1:58:80:
f0:08:56:5d:6c:63:69:f1:2b:82:6e:d6:34:dd:bf:cd:7d:1b:
0c:37:1a:d1:f0:b5:a3:8c:1d:b3:0b:b9:07:4b:8c:74:aa:73:
8f:9d:c9:0e:3f:51:43:98:88:6a:01:a1:ca:20:f1:44:9f:dd:
43:f1:18:22:35:f1:04:cd:0e:6d:92:01:5a:c2:c0:03:36:c4:
5b:b0:d5:bd:f0:98:86:34:52:bd:31:a9:0c:af:b2:b6:e6:a1:
16:9c:09:2f:26:90:c3:c7:1d:9b:05:85:de:dd:a4:d5:53:35:
9c:0a:40:2e:b1:d7:0a:43:91:de:2a:2c:fb:03:d6:44:4d:a2:
a8:72:e5:1e:45:16:a5:88:42:a5:dd:e8:d5:ff:2e:ae:d1:4d:
13:4e:6a:0f:3e:a4:8f:90:4b:e2:ea:5c:e5:9a:13:cd:6b:07:
72:a9:26:52:b9:7c:c4:4a:cf:18:49:66:2a:26:2b:00:68:24:
eb:0e:7f:d6:4d:ce:69:f3:c7:94:c1:36:20:e1:59:bf:51:2c:
b0:b3:2e:d5:85:f6:aa:e1:f6:63:bf:f2:33:e4:c7:fe:33:08:
f1:a8:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:57 2026 by rpki-client