Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/TXQspcwa_q4U4F7SmXnMEdJS514.roa
File: TXQspcwa_q4U4F7SmXnMEdJS514.roa (raw, json)
Hash identifier: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=
Subject key identifier: 4D:74:2C:A5:CC:1A:FE:AE:14:E0:5E:D2:99:79:CC:11:D2:52:E7:5E
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 019F236891FA088C738DBD40D4CC67F1CBAE
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/TXQspcwa_q4U4F7SmXnMEdJS514.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12978
IP address blocks: 91.233.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:91:fa:08:8c:73:8d:bd:40:d4:cc:67:f1:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d742ca5cc1afeae14e05ed29979cc11d252e75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:0d:ac:81:6c:5c:6e:10:ed:06:c6:1d:9d:
51:38:e3:00:5a:46:cd:07:59:04:b3:c5:4c:7c:26:
1b:ce:42:da:a7:97:dc:d9:70:ef:99:f7:d6:1a:60:
f8:4e:76:c4:92:08:cb:61:99:4d:28:f3:83:a0:91:
a4:ca:12:8f:7e:f5:1c:6f:5a:20:a5:29:09:4f:ed:
3f:92:7e:64:8b:ea:8a:e4:f7:e7:84:7f:ba:88:51:
b1:43:81:00:9a:43:94:54:ca:1d:98:d5:89:00:db:
3e:83:f0:93:6f:cd:39:19:5c:fa:c5:57:8f:77:45:
3b:d0:d6:50:54:a0:07:1e:9e:51:e0:47:2e:a5:a7:
82:0f:00:cd:2d:f4:e6:5e:50:19:c0:06:c5:ea:3e:
85:c6:b6:8d:23:75:ca:60:f5:c7:df:4d:ba:30:bf:
62:13:21:77:59:27:a9:ac:ee:d8:eb:95:f1:b5:0c:
6b:32:b0:23:8b:35:c7:5b:eb:6f:51:e9:ad:12:76:
e4:ab:ad:87:72:7c:fc:7f:97:2e:97:a4:8d:5b:32:
f8:99:bc:8f:af:f1:bc:b4:ac:d3:d4:9b:bd:42:a9:
25:71:f5:f9:1b:e9:67:1c:08:0a:0d:ba:5e:b5:95:
d2:f9:27:f7:89:0d:df:fd:77:52:02:4f:35:c7:c2:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:2C:A5:CC:1A:FE:AE:14:E0:5E:D2:99:79:CC:11:D2:52:E7:5E
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/TXQspcwa_q4U4F7SmXnMEdJS514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3f:f1:da:86:8f:f0:28:52:f6:2a:62:be:2a:e1:36:29:f2:
77:53:93:1e:87:87:cb:ca:dd:24:a8:61:12:b9:70:37:de:07:
61:12:86:91:b4:9a:1e:b8:b7:de:d0:f6:2f:a2:eb:91:13:86:
ad:bf:22:5c:7a:5c:83:37:19:4d:d1:35:f0:4a:e6:27:dc:4a:
f5:5e:6e:b0:60:84:3e:5c:11:e0:40:96:2e:fe:cc:aa:dc:9a:
4a:74:33:bd:af:79:c6:be:49:81:5b:de:81:35:50:86:47:b9:
6a:be:27:7e:5f:f5:b7:82:ec:63:cb:fc:08:3d:22:53:2c:cb:
7b:13:27:f7:98:e1:06:80:75:19:11:da:d7:97:35:a4:0e:9d:
79:37:09:1b:11:98:96:35:64:b8:00:21:1a:5f:89:69:ad:a8:
40:96:b5:d9:cb:3a:55:20:7b:0c:34:92:8c:b0:52:51:4a:65:
35:02:42:b3:b1:fa:91:6a:79:45:29:0a:f3:ec:ef:77:69:62:
21:47:b2:27:48:66:62:38:d5:80:8b:76:c6:23:0d:b0:10:a3:
a7:d5:64:c9:15:43:32:e4:f2:3c:ba:49:20:1d:67:bd:95:de:
3b:49:1c:a9:fa:04:32:46:19:cf:1b:7f:a1:9b:e6:c6:58:31:
51:b6:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:42 2026 by rpki-client