Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/tqsZBMiwtDAO2q_BZMmxFG_HXxU.roa
File: tqsZBMiwtDAO2q_BZMmxFG_HXxU.roa (raw, json)
Hash identifier: 0oZRjG6UEUwVZ184rw3R5X/+u67d+G2cxLuM4O/eVMI=
Subject key identifier: B6:AB:19:04:C8:B0:B4:30:0E:DA:AF:C1:64:C9:B1:14:6F:C7:5F:15
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A0C42AB1655DD9221B483A5E49DF668562
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/tqsZBMiwtDAO2q_BZMmxFG_HXxU.roa
Signing time: Mon 21 Sep 2026 13:32:07 +0000
ROA not before: Mon 21 Sep 2026 13:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.216.0.0/19 maxlen: 19
77.216.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:2a:b1:65:5d:d9:22:1b:48:3a:5e:49:df:66:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Sep 21 13:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6ab1904c8b0b4300edaafc164c9b1146fc75f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:9e:7d:04:7d:ee:7b:8d:6d:1f:e4:cf:b6:
cd:1b:3f:8d:fc:5e:15:8d:b8:b4:0a:ed:38:4c:83:
b6:76:78:8b:17:42:f0:0c:2d:8b:ef:11:c1:55:d2:
5c:62:69:7a:12:51:5c:2f:25:4f:fe:f5:cb:18:72:
07:f0:be:17:d8:0e:8c:ec:7a:74:ec:bd:a6:83:8d:
50:3a:f8:ed:79:29:87:b4:a9:2d:dc:12:0d:1c:bc:
6f:b6:c8:a7:4a:d6:d1:07:a5:84:d2:f8:31:13:17:
89:b8:c0:27:99:a0:b7:c3:0b:29:a1:5f:ac:0a:f7:
91:de:74:34:66:c5:01:9f:39:6b:61:a1:0e:cc:cd:
93:05:a6:c8:95:de:31:29:7f:cb:d9:6c:d2:fe:4b:
f1:36:88:bf:9c:64:9e:87:f6:0c:a1:5f:e5:8e:e5:
be:a2:aa:ba:e9:e6:5a:67:67:09:37:41:12:7a:ff:
da:83:98:e5:80:e6:bd:85:3e:a1:90:ce:66:dd:5c:
69:09:d2:53:86:0e:98:39:0c:56:34:97:cf:74:2f:
d8:4b:8c:3e:6c:a4:20:f0:54:e8:30:14:7f:14:bc:
69:4f:95:14:d9:31:a7:36:23:2f:1e:d8:bf:9c:3d:
1e:76:de:15:a3:2e:fc:f9:90:7c:4d:04:03:01:05:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:19:04:C8:B0:B4:30:0E:DA:AF:C1:64:C9:B1:14:6F:C7:5F:15
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/tqsZBMiwtDAO2q_BZMmxFG_HXxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.0.0/19
77.216.128.0/19
Signature Algorithm: sha256WithRSAEncryption
84:7e:a5:82:ae:65:ff:bd:aa:55:60:c1:bb:57:6a:41:26:15:
a0:9b:1c:e8:56:dd:19:66:d7:a6:b3:e5:25:42:3a:46:e8:65:
2f:a1:2a:2a:4d:87:3e:a8:8a:e3:1b:4a:2b:e1:1f:39:47:7e:
66:5f:48:f0:8d:0e:f3:3f:dc:97:b1:0a:82:03:e4:f1:fe:3f:
73:79:14:a5:b3:5a:5e:30:f6:7e:53:91:34:d9:ce:d9:47:91:
22:f8:ee:30:7f:98:c3:3f:07:17:72:18:f4:9f:7e:4b:8a:ee:
4b:a6:1b:f3:13:89:e0:61:84:47:f9:a6:26:0a:f2:eb:a2:0c:
98:7c:0d:0a:e6:4a:61:5b:7c:ae:f7:35:69:79:bc:3e:7f:07:
fa:23:85:41:d1:b0:ce:5c:e2:a5:40:6f:08:d5:35:67:ed:54:
1b:12:fd:a7:ac:ae:cf:83:49:a3:bb:85:9a:ad:73:5d:00:78:
ba:5e:b3:53:16:f3:11:0b:28:8e:99:21:91:37:4a:cd:55:9c:
6f:b1:67:80:47:4c:47:40:26:c5:3b:59:db:85:04:e1:b8:a7:
73:52:94:87:58:7a:b8:d9:6a:b7:2b:c7:ac:c7:55:0d:56:13:
e4:7a:c0:5b:11:db:6d:80:d4:28:3e:99:a2:13:df:20:b3:fa:
54:3c:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:45:48 2026 by rpki-client