Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7Qdxrl_UwNOjwzKd29vC-tTmMQ.roa
File: G7Qdxrl_UwNOjwzKd29vC-tTmMQ.roa (raw, json)
Hash identifier: 3QD3w/m5CZVRSJ1nwa1qp7w+DLSY20DLROu1XYgmBg8=
Subject key identifier: 1B:B4:1D:C6:B9:7F:53:03:4E:8F:0C:CA:77:6F:6F:0B:EB:53:98:C4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D28A33ADF405CAF78229BB2ADC461F081
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7Qdxrl_UwNOjwzKd29vC-tTmMQ.roa
Signing time: Thu 26 Mar 2026 05:34:39 +0000
ROA not before: Thu 26 Mar 2026 05:34:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274865
IP address blocks: 201.77.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:a3:3a:df:40:5c:af:78:22:9b:b2:ad:c4:61:f0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 26 05:34:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb41dc6b97f53034e8f0cca776f6f0beb5398c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:63:a6:55:77:dc:17:69:34:24:47:7b:b3:
dc:43:d1:09:65:bd:b4:e4:35:d2:e5:be:47:f1:5e:
b5:91:4a:9a:dd:00:c0:cf:87:48:f2:29:a7:fe:8b:
44:c7:ec:63:ae:62:e0:f1:00:f7:48:47:fa:fb:42:
e4:d8:34:54:10:6e:08:d2:8e:c4:7a:79:17:4f:0c:
c1:03:c2:7d:d6:d0:4a:96:84:5d:21:11:85:8e:34:
c4:c2:be:19:6c:f2:79:92:2d:72:8b:54:5e:fc:5b:
b5:c1:e4:40:2d:98:b6:99:3e:98:52:46:13:6f:30:
9c:a6:71:81:c5:1d:16:9f:91:9c:08:80:c9:e9:24:
53:43:5c:09:53:07:35:90:4a:b3:0a:af:06:22:f4:
51:30:b6:bf:3a:1e:2d:18:a0:b3:f9:32:9b:b4:f7:
a0:4f:15:4d:6b:18:2c:97:a3:e1:92:ca:12:d1:a3:
01:e6:b5:6a:31:c0:f0:c0:d5:2f:5f:05:7b:24:e4:
6c:d5:09:96:8b:d4:87:54:d2:08:12:0c:47:b4:7d:
8f:04:a9:9c:fd:a3:12:be:ba:b3:77:ee:37:50:c3:
e9:bf:ff:27:59:8e:af:1e:5c:96:08:8d:3b:45:c1:
b5:09:c2:db:00:c8:60:4e:7a:17:03:5c:bf:f0:5c:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:1D:C6:B9:7F:53:03:4E:8F:0C:CA:77:6F:6F:0B:EB:53:98:C4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7Qdxrl_UwNOjwzKd29vC-tTmMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.55.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e2:37:f8:42:52:90:b1:ae:b7:18:92:77:06:d3:ff:2b:c8:
5a:ba:59:91:e9:dc:6d:aa:47:aa:6e:c8:b7:d4:01:54:6e:6c:
6e:2b:99:33:3d:b4:c5:0b:6f:a6:30:e3:cc:2a:ed:39:d2:40:
a8:5b:51:22:61:69:f8:7c:c2:0f:98:3f:a6:e3:7e:6f:24:6a:
4e:05:38:05:f8:cd:99:be:13:3e:45:58:0c:ff:b5:0e:d7:e2:
49:a0:8b:80:b1:97:6d:40:fc:8c:0e:d2:71:27:64:43:27:40:
c5:8c:8b:66:55:ce:3c:67:a7:18:99:ba:6e:ec:44:1f:b9:a8:
66:9d:62:0e:ee:f8:ab:97:d6:f0:c0:9d:2a:60:ed:bc:e7:e0:
52:9d:b2:f3:17:43:68:7a:f4:a3:f3:0f:53:c4:bb:7d:db:fe:
7d:cb:84:f4:6c:57:0c:7c:fb:44:8e:96:98:eb:96:df:54:55:
7c:0f:81:9d:e6:3f:9c:19:ed:66:64:03:ba:95:2f:65:70:19:
2d:35:10:d6:6d:8a:b7:a5:35:39:30:db:f7:55:aa:d1:28:e3:
d5:c8:45:dd:36:c9:86:00:05:55:87:8d:db:05:d8:44:7f:d6:
cd:92:68:94:84:b9:6a:52:79:7d:7a:98:15:e5:43:b6:62:31:
67:5a:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:24 2026 by rpki-client