Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/tQlTb0dCc4mNyBvpRBfr0T3ertE.roa
File: tQlTb0dCc4mNyBvpRBfr0T3ertE.roa (raw, json)
Hash identifier: Wg+YwF0rkTiaebarPhEfMF5vtMGWR2oqILj3wKuS74E=
Subject key identifier: B5:09:53:6F:47:42:73:89:8D:C8:1B:E9:44:17:EB:D1:3D:DE:AE:D1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0AB30F6520AF9E0139CA6E12D46697047
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/tQlTb0dCc4mNyBvpRBfr0T3ertE.roa
Signing time: Wed 16 Sep 2026 17:08:27 +0000
ROA not before: Wed 16 Sep 2026 17:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206174
IP address blocks: 2a11:77c0::/32 maxlen: 32
2a11:7d07::/32 maxlen: 32
2a11:9041::/32 maxlen: 32
2a11:9642::/32 maxlen: 32
2a11:ab82::/32 maxlen: 32
2a11:bdc0::/32 maxlen: 32
2a12:e81::/32 maxlen: 32
2a12:6483::/32 maxlen: 32
2a12:bc81::/32 maxlen: 32
2a12:f983::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:30:f6:52:0a:f9:e0:13:9c:a6:e1:2d:46:69:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 16 17:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b509536f474273898dc81be94417ebd13ddeaed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:77:61:f4:2f:b1:38:52:17:90:21:c1:ac:
9f:21:3a:65:bd:60:2d:ff:f9:54:96:df:52:29:af:
a0:24:78:a5:6b:28:e8:00:1f:ac:b8:ca:7e:8b:03:
b3:5c:0b:07:a5:74:46:b0:3e:ee:19:8f:e8:41:b1:
10:47:20:fb:88:c5:6f:fc:97:2d:b0:3d:27:33:a1:
ef:83:1e:76:b3:57:92:dd:4f:b2:d5:28:f5:35:b1:
67:4e:3e:e3:a5:44:71:a7:c6:5d:ec:85:e7:5a:88:
57:b6:72:93:f8:98:2d:50:62:7d:0d:18:5e:10:30:
60:f8:b0:4f:77:b5:8d:a2:57:a0:a4:2f:54:38:d1:
01:ed:ad:ad:ac:5a:01:57:f8:07:c8:5a:36:fb:0b:
34:5b:d7:29:a3:78:25:9a:3c:fe:ac:70:08:8f:f4:
a7:38:57:04:86:ab:8a:80:da:5b:3f:01:43:63:a1:
bf:4f:35:da:39:40:7c:c3:7e:54:a1:5b:7e:9b:50:
3a:40:16:76:06:b1:a3:2b:87:9d:64:31:17:1c:ff:
3e:60:55:1a:0c:56:d1:a9:83:3d:44:43:03:e9:92:
20:f5:61:08:31:4b:09:3b:e7:f2:33:1e:8f:b9:9a:
d4:4c:26:23:5e:03:7a:59:a2:bb:1f:45:3d:3e:ac:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:09:53:6F:47:42:73:89:8D:C8:1B:E9:44:17:EB:D1:3D:DE:AE:D1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/tQlTb0dCc4mNyBvpRBfr0T3ertE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c0::/32
2a11:7d07::/32
2a11:9041::/32
2a11:9642::/32
2a11:ab82::/32
2a11:bdc0::/32
2a12:e81::/32
2a12:6483::/32
2a12:bc81::/32
2a12:f983::/32
Signature Algorithm: sha256WithRSAEncryption
88:d8:34:80:44:f7:97:9d:92:6a:f5:bb:04:1d:79:57:93:40:
37:97:fe:3f:12:0f:c1:72:fa:98:95:7f:3b:f4:4f:4f:62:96:
61:a9:0c:9f:d2:ef:df:63:fd:0c:46:5b:7f:7a:a0:c9:48:b3:
54:4e:5b:b0:f4:db:47:b7:87:c5:a7:19:1e:15:63:b6:7a:1c:
bc:43:21:14:8b:7c:cd:59:0f:2c:20:af:88:14:c0:25:d5:5e:
7a:e1:05:23:e5:e7:aa:9a:98:74:d9:3d:94:9d:62:dd:01:1d:
76:4c:8f:61:93:84:50:36:00:86:a7:b0:3d:ff:ff:ba:a3:b1:
45:c5:02:65:61:96:cd:bf:71:86:12:e1:d0:a7:40:78:76:2b:
27:f0:06:b0:c2:c8:ba:41:68:71:8d:36:9a:ba:ca:52:7a:db:
d9:73:4e:5e:dd:c1:66:9a:87:dd:4c:3e:f1:d6:fa:3c:56:97:
eb:3c:78:f4:52:43:48:c8:26:a0:fa:14:5a:51:04:05:3a:5c:
3f:16:7a:83:b2:21:ef:8e:46:1b:58:a8:d1:9f:79:4e:3b:31:
12:06:de:5a:6b:bd:72:6e:90:04:bc:15:d6:b6:6c:ac:2f:09:
cd:d2:18:99:84:f5:2d:3a:4d:4f:d2:f0:4d:fa:f7:f5:e9:8d:
e5:94:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:05:06 2026 by rpki-client