Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2YYuogh8PmJj9UEBqznCs8cX9oY.roa
File: 2YYuogh8PmJj9UEBqznCs8cX9oY.roa (raw, json)
Hash identifier: cyh/keeLzH6lLWiwEsEfGRdTCryzjvxjOa2uHGs84no=
Subject key identifier: D9:86:2E:A2:08:7C:3E:62:63:F5:41:01:AB:39:C2:B3:C7:17:F6:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1CD6B8F62FE2BDB52CE8641A4F6457EF4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2YYuogh8PmJj9UEBqznCs8cX9oY.roa
Signing time: Thu 12 Nov 2026 01:42:20 +0000
ROA not before: Thu 12 Nov 2026 01:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44103
IP address blocks: 77.90.23.0/24 maxlen: 24
178.18.154.0/24 maxlen: 24
178.18.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cd:6b:8f:62:fe:2b:db:52:ce:86:41:a4:f6:45:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 01:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9862ea2087c3e6263f54101ab39c2b3c717f686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:30:fb:e0:37:ce:f7:44:1b:e1:7b:47:c1:
08:43:3c:7f:ad:f1:a6:2c:d8:2d:dd:05:99:9d:7e:
f1:4e:e0:5c:3a:1c:6c:0a:59:05:3f:13:9b:b6:55:
13:c8:1a:d9:01:ef:58:31:7b:ba:07:55:fe:f6:17:
11:6d:07:bb:89:8b:29:cb:80:82:98:29:fe:a2:81:
b7:89:81:40:9d:1c:f3:a8:12:ae:08:75:2e:20:ac:
03:1e:2e:32:85:08:2f:73:92:01:ef:0f:da:dc:3e:
e5:59:4e:a7:b1:9b:43:8f:67:e6:23:dc:06:62:bd:
4b:89:71:a5:06:b6:a5:4b:92:a5:35:99:64:e3:d0:
57:8e:78:51:8a:4b:44:e7:4d:86:bc:6b:f9:af:4b:
5e:9f:40:cc:94:24:47:7a:7c:31:24:91:44:e1:e6:
db:80:54:86:e0:58:76:4b:ed:f0:f3:cd:62:45:89:
10:19:93:24:74:e4:e2:c7:f9:bc:8b:78:04:5b:cf:
fd:b9:e4:8e:60:90:61:52:c3:b7:ff:75:11:ad:49:
56:b2:e8:d9:a4:e0:01:be:c0:da:95:fc:d6:f3:7b:
a9:50:bd:8a:33:af:fd:67:e0:37:ec:57:11:de:e0:
6f:e0:83:6c:2c:a9:7f:56:11:1c:e2:59:67:56:87:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:86:2E:A2:08:7C:3E:62:63:F5:41:01:AB:39:C2:B3:C7:17:F6:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2YYuogh8PmJj9UEBqznCs8cX9oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.23.0/24
178.18.154.0/23
Signature Algorithm: sha256WithRSAEncryption
34:3f:18:8b:64:0e:5c:3a:04:bf:0d:03:d7:e4:ad:2b:45:a1:
db:07:ee:a4:c8:ad:68:d6:45:c3:81:b1:da:b9:67:df:f2:cb:
47:ab:aa:a9:67:e9:77:2a:74:4b:ad:f1:22:b9:1c:f2:b8:7a:
7f:4d:6e:31:b0:fc:4e:26:0a:4e:59:74:20:32:a1:39:1f:24:
d9:f1:d5:4e:77:b4:90:ec:dd:c5:24:e0:cc:b7:d9:83:bf:3f:
47:26:ad:30:d3:68:24:d6:e9:50:ec:a3:35:bd:b4:09:12:fd:
14:22:15:8d:f6:6f:d3:10:87:9c:d6:bc:4b:93:3e:20:f4:77:
d3:04:1c:86:ae:b6:c8:b6:35:8f:6a:d1:b0:6b:61:e7:27:12:
6b:fb:c1:ea:d5:bc:9e:e9:45:ef:c1:11:b6:4e:e3:4c:29:d4:
50:35:16:41:c0:48:48:15:98:88:5d:ca:f6:93:6f:9f:33:6e:
f5:c3:d0:ac:27:7f:65:f7:4a:42:25:12:64:19:74:fa:9f:43:
ba:52:95:03:46:23:89:b3:21:94:b6:dc:20:d0:f4:65:08:5c:
94:59:38:3c:ac:46:bb:05:ee:3d:c7:03:24:b3:34:46:2f:21:
4d:c6:36:49:4a:46:b8:14:2d:49:0e:59:eb:25:7d:75:2a:d3:
71:6d:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:56:41 2026 by rpki-client