Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/TFrFCFoNGOrEr-0X10FQhSCvIIM.roa
File: TFrFCFoNGOrEr-0X10FQhSCvIIM.roa (raw, json)
Hash identifier: 7CgOjycwa7iUcHPLxP4Ia/ozXApop9buE9JwEyEF3YM=
Subject key identifier: 4C:5A:C5:08:5A:0D:18:EA:C4:AF:ED:17:D7:41:50:85:20:AF:20:83
Certificate issuer: /CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Certificate serial: 019F236900124DE4E872F81CEEAFC24BCCEF
Authority key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/TFrFCFoNGOrEr-0X10FQhSCvIIM.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 2a09:77c4::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:12:4d:e4:e8:72:f8:1c:ee:af:c2:4b:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5ac5085a0d18eac4afed17d741508520af2083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:93:23:53:62:2a:a2:05:7f:a3:73:46:64:
68:4f:b2:1d:6f:4a:3b:76:67:0b:b4:5f:a6:d2:09:
a4:56:57:85:f6:24:ba:55:3a:1d:e9:70:61:75:0d:
6a:8f:b2:25:65:2c:da:0e:74:8e:22:80:67:5c:e6:
e1:b8:68:e8:d2:71:0f:15:f0:27:4f:df:dc:d2:01:
fe:26:90:3e:3a:4b:c2:ee:1f:07:49:68:e2:5e:21:
a2:97:7e:d1:15:01:25:c7:e8:66:75:62:05:f2:4a:
40:a3:7b:28:43:55:bd:5a:c9:f7:f6:ed:dc:bb:5d:
c2:e7:6d:56:75:2f:e6:e1:03:34:be:5e:00:ba:47:
81:14:21:54:30:ff:b5:f8:e3:b5:0e:47:0a:6a:3b:
0f:d0:a0:8a:7b:3a:cf:c1:5e:cc:60:2e:2e:cf:b2:
71:57:08:a3:17:35:0a:79:11:5e:b5:25:f0:03:31:
15:67:58:59:30:62:24:f2:a4:2c:cb:b0:47:68:48:
7e:1f:3b:03:5e:39:c3:4d:95:98:c6:6b:c1:c7:92:
c5:3a:f9:22:a3:57:25:42:3d:8b:c0:9b:3a:66:bb:
9f:6c:c7:dd:fb:61:9e:b6:d1:ca:d3:ce:80:bc:96:
e6:cf:be:85:9b:a7:2c:8f:c6:55:8a:af:f8:3b:f2:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:C5:08:5A:0D:18:EA:C4:AF:ED:17:D7:41:50:85:20:AF:20:83
X509v3 Authority Key Identifier:
keyid:17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/TFrFCFoNGOrEr-0X10FQhSCvIIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:77c4::/30
Signature Algorithm: sha256WithRSAEncryption
7f:86:94:5c:43:3a:d1:4e:f0:8e:7f:b6:c8:78:5b:96:96:85:
44:c9:c1:c5:b0:9c:9b:af:62:40:c7:f6:c9:41:fa:ad:5f:d7:
1f:bf:0c:51:66:76:42:8c:c7:d9:d4:50:9d:78:3f:cc:ee:21:
ab:32:ea:ab:06:a1:20:ed:74:5f:53:d9:23:9a:19:fe:bf:a0:
dc:56:43:ad:a7:c2:12:5b:d5:b3:6f:69:b2:9d:64:4a:00:79:
65:dd:c8:e7:b6:0b:2b:8d:17:1c:72:0c:7f:a2:eb:87:8d:17:
ee:13:e0:6b:2c:31:e5:c2:59:ef:6f:d1:0f:f9:0a:78:6f:ef:
16:7a:6d:8f:c9:91:9a:39:9e:92:46:51:3e:42:4f:41:26:8c:
7b:41:ca:23:f0:dc:56:77:87:a6:0c:f7:83:ae:a3:10:e9:84:
e4:e3:0e:9b:68:6b:ea:8a:20:3b:74:d2:a4:ef:bf:a6:96:c1:
0d:03:bb:46:f1:c9:54:ff:96:c8:24:33:8b:7a:ce:ee:5c:d4:
35:36:69:51:15:cf:a3:50:e3:97:4e:df:d0:e9:bf:4c:71:f0:
6d:d0:9c:1c:52:3f:43:e6:75:b2:63:f9:16:06:8c:a1:03:66:
2f:2b:fd:13:dd:3e:7b:1c:8c:f3:5b:ef:3d:fb:26:00:18:59:
b2:70:c1:7c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaQASTeTocvgc7q/CS8zvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MmRhOWE3YmJjOGUxNjM2OWI0MDZiZDI1NmUyYTMwMDJj
YmRkNzgwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzVhYzUwODVhMGQxOGVhYzRhZmVkMTdkNzQxNTA4NTIwYWYyMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBKTI1NiKqIFf6NzRmRoT7Idb0o7
dmcLtF+m0gmkVleF9iS6VTod6XBhdQ1qj7IlZSzaDnSOIoBnXObhuGjo0nEPFfAn
T9/c0gH+JpA+OkvC7h8HSWjiXiGil37RFQElx+hmdWIF8kpAo3soQ1W9Wsn39u3c
u13C521WdS/m4QM0vl4AukeBFCFUMP+1+OO1DkcKajsP0KCKezrPwV7MYC4uz7Jx
VwijFzUKeRFetSXwAzEVZ1hZMGIk8qQsy7BHaEh+HzsDXjnDTZWYxmvBx5LFOvki
o1clQj2LwJs6ZrufbMfd+2GettHK086AvJbmz76Fm6csj8ZViq/4O/L71QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFExaxQhaDRjqxK/tF9dBUIUgryCDMB8GA1UdIwQY
MBaAFBctqae7yOFjabQGvSVuKjACy914MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvVEZyRkNGb05HT3JFci0wWDEwRlFoU0N2SUlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgl3xDAN
BgkqhkiG9w0BAQsFAAOCAQEAf4aUXEM60U7wjn+2yHhblpaFRMnBxbCcm69iQMf2
yUH6rV/XH78MUWZ2QozH2dRQnXg/zO4hqzLqqwahIO10X1PZI5oZ/r+g3FZDrafC
ElvVs29psp1kSgB5Zd3I57YLK40XHHIMf6Lrh40X7hPgaywx5cJZ72/RD/kKeG/v
Fnptj8mRmjmekkZRPkJPQSaMe0HKI/DcVneHpgz3g66jEOmE5OMOm2hr6oogO3TS
pO+/ppbBDQO7RvHJVP+WyCQzi3rO7lzUNTZpURXPo1Djl07f0Om/THHwbdCcHFI/
Q+Z1smP5FgaMoQNmLyv9E90+exyM81vvPfsmABhZsnDBfA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:59 2026 by rpki-client