Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/tprxZOo9re_pAd0H5O0KS7lvtng.roa
File: tprxZOo9re_pAd0H5O0KS7lvtng.roa (raw, json)
Hash identifier: b/mBBVk4ZIf+C5qZ91Z02yrJaguZVBlQuFtL4TP4qq8=
Subject key identifier: B6:9A:F1:64:EA:3D:AD:EF:E9:01:DD:07:E4:ED:0A:4B:B9:6F:B6:78
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019F654B0845BEA3BF39A86A1658A444445B
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/tprxZOo9re_pAd0H5O0KS7lvtng.roa
Signing time: Wed 15 Jul 2026 10:20:43 +0000
ROA not before: Wed 15 Jul 2026 10:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25577
IP address blocks: 62.69.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:4b:08:45:be:a3:bf:39:a8:6a:16:58:a4:44:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jul 15 10:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b69af164ea3dadefe901dd07e4ed0a4bb96fb678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:d1:b7:74:ef:d9:bb:31:39:b8:d6:03:d1:
f1:8c:28:b7:4e:73:46:f6:ba:29:07:e2:0e:30:7f:
2c:03:bc:b5:7e:1c:cf:05:50:67:e9:37:b9:3f:62:
e1:bb:ce:ae:ec:39:51:14:b1:90:67:34:f1:39:bb:
91:67:2a:0a:69:16:1a:e5:bb:64:a7:ea:2d:b7:b9:
e6:7e:2d:1c:53:6b:47:0c:a8:6e:56:50:ed:c5:8c:
77:d9:57:0a:bb:c7:29:35:67:a0:fd:80:bf:a7:9b:
3b:db:f7:3e:a0:d4:fd:ca:65:66:8f:2b:70:6d:9e:
de:09:e8:65:0d:06:a1:cc:b9:86:da:97:27:64:8b:
ff:3f:ca:77:9b:87:72:79:92:a0:f5:a5:63:9e:fb:
a4:d5:4e:2e:fb:51:0b:b0:c8:05:ee:b7:ce:72:4b:
04:1c:81:46:3d:7d:85:99:f5:16:f5:b8:53:e4:75:
7a:1d:46:3c:cf:38:dd:04:15:f6:7c:6c:1c:be:e0:
5f:2a:c9:5f:2c:14:7e:e3:36:5d:07:b1:38:82:22:
d0:95:8e:07:cc:1e:01:ea:f5:bc:da:58:f1:39:d1:
67:ee:6f:f5:ae:f1:7a:cd:58:90:34:bd:48:5d:9b:
b7:91:f5:9e:f3:c8:43:7e:ee:17:50:5e:a2:75:bb:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:F1:64:EA:3D:AD:EF:E9:01:DD:07:E4:ED:0A:4B:B9:6F:B6:78
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/tprxZOo9re_pAd0H5O0KS7lvtng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.143.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:74:a6:7b:60:ef:f2:03:91:41:81:cf:97:9f:f9:5c:19:03:
2e:fb:ac:09:64:de:c2:b9:65:20:95:82:cd:67:c8:28:25:d6:
b4:9f:f3:4b:36:9e:eb:3e:cc:12:f4:0a:d3:36:af:4b:c1:e2:
73:f6:f2:63:9f:08:97:9b:01:42:dc:3c:a1:f8:a3:32:e8:fe:
64:41:bd:ef:7e:43:89:62:9a:62:bd:19:bc:5b:39:26:ba:ec:
01:51:ff:97:22:a5:e0:36:7c:4a:a6:63:d3:1d:7b:73:bf:66:
1f:4a:7c:91:c9:a1:75:40:d1:37:77:38:ed:97:6b:b5:af:a3:
85:55:da:c1:52:04:c4:ea:d4:ed:a8:cc:31:76:8f:e9:b7:e2:
c4:d9:7c:08:9a:77:9b:ac:65:fb:c5:67:92:db:49:9c:3a:35:
ff:52:f0:ef:5e:02:ec:a7:95:ee:b4:24:09:19:05:fc:68:8d:
c8:5f:26:04:72:a8:7b:44:2c:3a:c5:df:24:a3:10:93:7d:a3:
ce:7a:26:fd:c6:8d:ab:77:db:6d:fc:a5:d7:9a:26:1b:be:79:
75:e2:9d:b5:6e:e0:1e:0e:7d:13:f6:e4:06:dd:d3:11:a7:f8:
6c:32:a7:55:77:91:61:b4:c6:8c:d2:77:96:02:1c:d4:3b:27:
29:bd:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:20 2026 by rpki-client