Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/frFgPNwOz_y7Y968-p6aeoVoJv0.roa
File: frFgPNwOz_y7Y968-p6aeoVoJv0.roa (raw, json)
Hash identifier: Q9gkJIYtyvNMVExTUMVoJuBoDYBH3jKmdZPAjhOEiDo=
Subject key identifier: 7E:B1:60:3C:DC:0E:CF:FC:BB:63:DE:BC:FA:9E:9A:7A:85:68:26:FD
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A13F345FF40D32008E8A8F9199B3429319
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/frFgPNwOz_y7Y968-p6aeoVoJv0.roa
Signing time: Thu 15 Oct 2026 10:55:59 +0000
ROA not before: Thu 15 Oct 2026 10:55:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274411
IP address blocks: 201.77.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:34:5f:f4:0d:32:00:8e:8a:8f:91:99:b3:42:93:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 15 10:55:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eb1603cdc0ecffcbb63debcfa9e9a7a856826fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:27:6d:24:1d:54:f5:00:12:ce:b1:13:8c:
df:97:38:4d:17:fd:4e:b2:51:62:47:0c:2b:53:9d:
87:65:d2:ff:2e:79:33:e9:dd:60:3b:ef:60:37:e4:
1c:f5:b6:e9:13:54:ce:75:0e:07:5f:1a:1a:34:16:
7a:9b:3f:b0:b6:f5:b2:46:46:5e:51:62:0e:d6:31:
dd:4b:c3:4c:6d:5b:a7:b8:93:21:07:77:3f:e3:76:
d2:21:66:5f:af:02:6f:be:1f:b6:a5:4c:c5:ec:05:
90:9a:3a:42:67:6e:13:75:64:cc:fb:9f:c9:d8:f2:
c6:9b:df:21:19:17:2f:38:5e:2a:c8:d3:c8:f9:f0:
0e:9e:ef:15:5a:92:1e:dc:8b:28:28:cf:56:e7:c1:
84:74:cc:9e:68:c1:8c:57:f5:17:b8:7f:6d:0e:f9:
c4:ff:04:ec:c8:3e:b6:de:0f:35:02:b3:14:d3:9e:
91:28:ef:a6:a2:37:a1:c5:c5:fa:1f:b0:16:4f:c1:
d3:0e:7f:29:15:0c:07:ef:88:b8:75:94:a5:54:bf:
90:23:2e:0b:cc:5d:8a:89:82:38:0b:7c:cb:4c:01:
e4:32:d7:d5:82:d4:34:88:8f:d1:72:f7:3c:20:24:
53:6b:03:bc:5e:13:8d:99:7b:6a:a0:a8:d0:a3:ae:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:60:3C:DC:0E:CF:FC:BB:63:DE:BC:FA:9E:9A:7A:85:68:26:FD
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/frFgPNwOz_y7Y968-p6aeoVoJv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b0:79:b2:d0:71:cd:7f:d9:e8:4d:99:fd:24:b9:7c:08:9c:
34:97:c3:84:85:de:b5:17:3e:e1:19:4e:62:fc:df:e2:91:6c:
ae:c6:4b:52:8a:e5:c5:a0:bd:6a:4e:d1:8f:1c:83:7a:20:75:
56:84:be:cb:d1:bd:da:39:3f:de:38:67:ff:11:8e:0c:e0:ee:
64:d8:90:a7:a2:41:a4:8f:92:dc:56:11:19:e0:d4:23:1d:e0:
89:2a:68:83:9a:6b:67:e1:41:93:04:c6:5a:70:c5:ab:e3:37:
89:be:bd:f2:0f:5f:ea:42:9e:a9:e8:33:78:a8:2f:38:16:44:
3a:2c:2f:83:bd:ae:66:3c:64:3b:e1:11:1f:b5:56:00:87:30:
1c:4b:3e:d7:95:02:af:37:40:9d:e9:24:70:31:2e:f4:10:08:
55:99:88:6c:33:a9:de:ee:2d:a4:ab:bf:64:1f:14:be:d3:4c:
46:fb:1a:50:cf:89:0b:09:5f:11:d9:18:c6:87:f8:e3:71:e8:
7f:99:29:e6:04:af:16:52:35:a1:3d:1f:c3:15:b1:b7:6d:bd:
87:c4:a4:ff:49:02:05:f8:47:35:39:ee:45:1c:f8:b6:c5:23:
27:50:d6:75:50:d6:d3:6c:a6:12:44:15:e8:d2:2c:a3:70:71:
a4:ef:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:24:41 2026 by rpki-client