Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/993pMr78pqsBNMOcnLC95Rl-lKo.roa
File: 993pMr78pqsBNMOcnLC95Rl-lKo.roa (raw, json)
Hash identifier: VnUvUWr53FfMHpdN4euQbPYpVbOE/1SVHZfE3EQbbJg=
Subject key identifier: F7:DD:E9:32:BE:FC:A6:AB:01:34:C3:9C:9C:B0:BD:E5:19:7E:94:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DEAB1BC484122707ED502AD863A919212
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/993pMr78pqsBNMOcnLC95Rl-lKo.roa
Signing time: Sat 02 May 2026 21:56:49 +0000
ROA not before: Sat 02 May 2026 21:56:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:b1:bc:48:41:22:70:7e:d5:02:ad:86:3a:91:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 21:56:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7dde932befca6ab0134c39c9cb0bde5197e94aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:3e:ef:67:b8:34:1f:4e:42:b1:b5:82:7a:
d4:8a:0b:0f:fe:4a:cb:2d:4b:ff:90:04:1f:76:99:
c6:d4:fe:25:57:46:de:32:f6:41:90:37:06:77:c8:
02:75:79:6e:82:fd:f3:07:a8:83:ec:50:70:ac:7a:
6e:44:71:ea:a4:12:b3:eb:43:ea:6c:c2:10:dc:0a:
08:55:19:75:ac:97:c9:ef:8f:ed:bf:c5:c1:92:cc:
8e:09:fa:9a:7c:8a:9a:9d:ce:ac:8f:df:6e:33:b3:
6f:71:38:a3:0a:b4:47:90:52:27:10:c0:01:b7:4c:
dd:65:31:fe:16:4e:57:7a:c2:b7:91:8d:3e:29:bb:
f3:73:d3:54:92:e4:51:26:a6:5c:c4:75:e8:25:d0:
bd:26:77:31:b6:97:46:ae:24:db:52:7c:51:f2:30:
c9:3f:3e:d2:7e:cd:58:68:a7:3b:0d:28:53:d1:6a:
b3:01:b9:06:b8:27:7f:fc:dc:01:1a:63:90:0f:cd:
c0:96:52:91:1d:ef:e7:14:d6:9d:63:29:16:00:30:
58:d3:9d:ea:80:6c:74:46:83:7f:8a:86:2a:8c:60:
d0:d8:7a:d2:38:cd:62:53:3c:f6:01:bf:a0:2e:55:
91:b2:98:25:df:91:c9:c4:3a:1f:94:c5:1b:01:8c:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:E9:32:BE:FC:A6:AB:01:34:C3:9C:9C:B0:BD:E5:19:7E:94:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/993pMr78pqsBNMOcnLC95Rl-lKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
94.249.179.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:c3:25:08:1f:b9:85:bb:c1:6a:c7:af:5c:8f:a4:f9:f8:f0:
07:a0:83:d7:40:e0:77:fd:bf:c0:d0:7b:b7:15:51:27:91:61:
ae:71:69:56:d1:ce:01:0a:6e:e2:54:f0:68:8a:be:c7:da:4b:
db:70:cb:1a:a5:23:27:f0:5a:57:5f:aa:bc:6a:11:24:3d:56:
ab:fe:61:37:5e:16:ba:64:2d:d2:64:77:80:e9:70:70:94:26:
e7:1f:37:2a:c6:d3:c3:9d:b4:17:87:51:b0:e7:7e:fe:6b:e4:
1f:4d:88:8e:f6:f7:eb:55:5b:b7:ed:d3:ab:24:50:e0:3c:6d:
72:06:9d:9f:7b:39:81:46:66:94:3b:4f:a7:a7:cf:25:2f:64:
44:f3:61:d6:21:69:37:f6:33:7d:84:a8:d9:9a:10:80:ea:e9:
b7:01:45:1e:85:04:c7:cb:76:a4:86:6a:0f:bd:2e:64:07:81:
c6:34:1f:33:0f:1b:e6:47:52:a9:37:58:88:06:f4:13:4d:b7:
ea:db:75:a4:86:8c:da:41:0b:4c:f3:9a:28:5f:4b:a2:e3:2e:
d6:23:fa:ca:9b:f4:2a:7f:76:da:ce:e9:2a:b4:79:fb:a5:f2:
e6:7a:eb:8b:02:49:7d:23:99:5a:89:22:b1:51:7c:1e:c0:b6:
18:26:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:23 2026 by rpki-client