Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa
File: tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa (raw, json)
Hash identifier: caiAj7bgVqN8bpYH0jeyQ8RkddSmx6SR+nS6M3Lebv4=
Subject key identifier: B5:94:E7:0B:94:9B:35:37:8B:E8:F2:7B:44:AD:95:B3:AF:19:BA:BD
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019C6DA67ADE3F0427FA3D240A58D7213CE9
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa
Signing time: Tue 17 Feb 2026 22:09:12 +0000
ROA not before: Tue 17 Feb 2026 22:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 77.91.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6d:a6:7a:de:3f:04:27:fa:3d:24:0a:58:d7:21:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Feb 17 22:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b594e70b949b35378be8f27b44ad95b3af19babd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:fb:f6:88:37:ef:43:2c:18:4e:1e:14:3e:
94:9e:97:bf:6e:6e:c1:35:7a:23:21:f3:dc:51:64:
63:bd:36:78:3e:3c:8d:40:36:39:34:ad:cc:3c:59:
1f:2e:92:4c:8a:a7:59:ee:67:9b:2f:fc:8f:a4:e6:
e8:8d:d0:6c:77:69:9a:33:0b:35:15:0a:c1:93:1d:
b2:98:e2:28:a4:64:d0:b9:41:56:b3:3b:e4:a6:d6:
9e:0e:db:47:dd:98:a4:7b:50:b6:36:a4:ca:81:50:
0e:85:ac:e3:73:bc:ed:8b:b0:63:13:e1:06:31:d0:
18:df:26:cb:5f:eb:3b:1e:ac:09:0a:81:d5:ea:2f:
be:65:b7:41:34:78:fd:a4:31:1d:c4:cb:d2:9e:2c:
54:b0:21:e7:f4:08:40:f3:78:34:6c:89:d8:22:8a:
04:10:b4:07:26:b6:51:1b:a4:9a:3a:c1:09:8b:0c:
b0:e5:e5:43:b8:6d:f4:27:86:4b:a7:f6:f2:a9:45:
33:7b:21:72:62:fa:9d:83:36:da:c8:a7:92:d9:d1:
8c:c4:29:cf:41:ab:66:14:8a:28:28:98:07:87:e0:
ea:9e:64:94:3c:11:61:7a:0f:ac:cc:c4:ab:b5:39:
c0:7d:51:90:6c:98:55:a1:2e:b0:2f:44:b5:e5:0d:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:94:E7:0B:94:9B:35:37:8B:E8:F2:7B:44:AD:95:B3:AF:19:BA:BD
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.79.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bf:e5:51:2d:86:35:78:3b:2b:b6:d7:a6:76:1a:fd:dd:7e:
4a:ca:31:88:8d:3b:3b:a2:c5:2d:60:7b:40:c5:74:ab:43:c0:
d8:35:7f:0c:81:d8:a5:b8:a2:9f:a3:38:29:f4:63:6e:cf:b4:
e6:a7:63:4b:c1:f4:f5:b4:49:ce:30:b1:c6:28:47:96:0a:f1:
f4:6b:5b:f1:e0:fa:be:dd:e6:ef:ac:fa:c6:48:b5:17:93:4d:
18:b3:2c:90:91:d5:6b:87:0e:4d:0c:57:9c:fa:b3:b8:08:be:
4f:39:74:b9:ff:c6:8c:0e:e1:d2:03:64:67:9c:9d:60:0b:e8:
a6:a6:5e:f1:4e:da:36:f0:ad:67:a9:f7:14:f6:0f:5c:89:5a:
cc:01:78:b1:54:86:47:73:e6:48:06:31:78:23:c1:45:de:ed:
32:ab:92:c3:55:80:39:82:58:7a:f0:09:80:fe:53:bc:ec:d1:
13:81:c5:d4:e4:f4:1e:92:e6:c7:df:64:15:ca:f2:c4:ae:42:
39:13:30:17:b7:84:a8:63:98:2d:e8:b2:12:f0:1f:b6:d1:c7:
44:35:a7:9e:71:65:49:86:a6:51:32:11:0f:88:f3:9f:a3:a1:
a2:23:91:b0:1d:a7:4f:56:bc:27:17:1d:8a:ae:94:0d:49:13:
e0:f7:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:23 2026 by rpki-client