Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/tCazV-5dRuJOYiOtxfNXJnvCC7I.roa
File: tCazV-5dRuJOYiOtxfNXJnvCC7I.roa (raw, json)
Hash identifier: y/rwZFh1ui4+7ldmwAoHRwvjzprP4UVh2Sg2eZ/2bQA=
Subject key identifier: B4:26:B3:57:EE:5D:46:E2:4E:62:23:AD:C5:F3:57:26:7B:C2:0B:B2
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0393BB00415C97876DE5998BA303B9EA3
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/tCazV-5dRuJOYiOtxfNXJnvCC7I.roa
Signing time: Tue 25 Aug 2026 14:03:27 +0000
ROA not before: Tue 25 Aug 2026 14:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51783
IP address blocks: 2a11:77c5::/32 maxlen: 32
2a11:bdc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:3b:b0:04:15:c9:78:76:de:59:98:ba:30:3b:9e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 25 14:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b426b357ee5d46e24e6223adc5f357267bc20bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:f3:87:fd:28:8b:0c:4b:0b:2b:c6:b9:6e:
a7:83:9f:cf:5f:de:e6:64:ee:35:2a:4c:11:34:94:
95:55:f4:7b:c7:e7:b9:38:75:d1:0a:6d:57:41:49:
5b:d7:dd:b4:37:6c:00:7c:9e:d4:db:38:06:83:dc:
ee:17:5c:7f:23:14:6a:0e:df:33:24:10:fa:8c:ae:
79:1f:17:38:1d:c7:af:3a:a4:e6:f0:dd:0d:cf:60:
98:0e:0b:cb:84:35:2f:45:dc:78:e0:52:b7:28:60:
2f:17:0d:58:df:6e:75:ec:aa:63:aa:c9:92:2a:d8:
d4:53:08:83:a3:fb:d6:0c:47:90:70:c3:5d:75:16:
b6:10:37:60:21:9d:e4:9b:da:01:f0:98:d4:9d:df:
a7:b1:b2:69:0f:0f:16:60:b4:46:c7:c3:f1:2d:ef:
dc:ad:28:ba:6d:3a:29:46:00:c8:3a:ff:50:1c:84:
59:a8:d9:a6:12:08:11:bd:01:66:44:40:1f:8a:6f:
8d:8a:e7:93:0d:b2:f8:d1:33:e2:0b:6f:f9:99:cc:
76:60:d2:56:90:06:25:76:92:3c:4a:e7:dd:fb:f2:
2d:c4:3e:31:b4:a7:03:5b:10:aa:c6:20:08:25:48:
69:35:ac:3a:39:11:24:9f:d3:53:db:97:69:27:b1:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:B3:57:EE:5D:46:E2:4E:62:23:AD:C5:F3:57:26:7B:C2:0B:B2
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/tCazV-5dRuJOYiOtxfNXJnvCC7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c5::/32
2a11:bdc6::/32
Signature Algorithm: sha256WithRSAEncryption
9f:d5:02:5a:8f:b9:e2:f9:aa:5f:38:77:06:da:f3:d2:e5:e8:
8f:41:fc:c0:a6:0c:db:0e:41:63:d0:09:e9:81:e0:ce:c6:8a:
84:52:4a:8e:8e:7f:da:77:ee:5f:68:69:47:0c:91:91:4a:84:
4d:a4:98:02:df:e3:11:40:af:95:85:69:ff:de:33:73:37:c4:
31:cd:94:d7:5b:05:5e:c7:6b:49:42:c0:73:62:55:d4:2b:96:
51:5b:6b:e1:58:80:8c:07:53:2d:98:51:2c:e9:53:9f:4d:5e:
df:25:f5:3c:f6:de:c6:22:cd:ad:56:ff:08:96:74:73:65:34:
79:7f:ad:26:2c:a1:16:83:9d:97:30:57:b0:6a:4b:48:89:e0:
4b:10:b2:86:7b:16:c2:00:ea:60:c3:0a:dd:aa:61:d5:2e:97:
c2:ff:56:8a:4c:f4:80:63:9c:b8:9b:f6:06:e9:b3:af:a2:5d:
9c:02:9c:34:7a:73:90:25:5e:fe:f3:1e:e3:c6:a4:ae:db:b3:
71:30:94:db:36:13:3e:aa:55:78:b2:18:fa:db:be:1a:33:a4:
1f:b0:ff:c7:ef:49:57:95:b4:1c:e3:f1:ec:e9:5c:6d:70:68:
fb:3e:f3:da:5c:91:23:5b:3c:db:d3:d9:26:de:64:8b:c1:93:
4e:09:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:03 2026 by rpki-client