Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FBWJtKaLqZ_6ftYyNaejbD-vbnU.roa
File: FBWJtKaLqZ_6ftYyNaejbD-vbnU.roa (raw, json)
Hash identifier: 4ikdPL88cOxSsUuapzN/8Llf0U1o1wFhyiravXTlAxQ=
Subject key identifier: 14:15:89:B4:A6:8B:A9:9F:FA:7E:D6:32:35:A7:A3:6C:3F:AF:6E:75
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E009CE8A97C8C5AE0C1E3D0402AE83B9A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FBWJtKaLqZ_6ftYyNaejbD-vbnU.roa
Signing time: Thu 07 May 2026 04:05:43 +0000
ROA not before: Thu 07 May 2026 04:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:9c:e8:a9:7c:8c:5a:e0:c1:e3:d0:40:2a:e8:3b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 7 04:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=141589b4a68ba99ffa7ed63235a7a36c3faf6e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:9d:e2:da:9d:9b:f6:2a:5a:59:8d:fe:52:
a1:bc:00:25:6d:66:af:3d:4e:a9:bc:6a:7f:a9:6d:
ef:ba:0f:27:70:a6:e0:46:b1:8c:3f:7b:74:51:48:
d6:68:39:dc:dc:64:a6:5c:7b:47:f2:47:16:34:f7:
d6:4e:eb:fa:e6:0d:e7:bd:e4:bc:3d:78:22:57:e5:
7d:3c:0f:fe:cb:31:bb:ad:f5:46:e2:39:cf:21:e6:
d8:03:3b:a0:02:11:48:2b:59:85:30:06:e9:c9:b1:
8a:01:68:9b:70:62:9d:c0:58:a8:33:5d:20:f6:1b:
e5:d9:f5:6c:61:db:b1:7c:f9:5a:65:e0:64:3c:d8:
4d:3c:a4:5a:b8:19:b0:94:74:9b:86:8d:75:e2:b5:
2a:70:93:73:af:8d:17:39:a5:c6:b7:81:2c:f1:ac:
c5:db:7b:46:42:f1:1d:06:98:60:81:cf:0a:52:92:
4e:55:62:75:f4:a0:e6:cd:a4:20:2f:49:49:ab:39:
c1:bc:21:33:24:00:02:9c:41:a8:b8:5f:d9:d1:87:
b3:02:37:00:01:e7:99:b7:01:e8:b5:a2:a2:83:3c:
6e:a0:8c:78:43:2c:65:03:c1:12:42:d9:e1:ee:d9:
89:6f:1d:5b:9b:55:b3:14:b2:04:e2:de:2b:b6:7d:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:89:B4:A6:8B:A9:9F:FA:7E:D6:32:35:A7:A3:6C:3F:AF:6E:75
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FBWJtKaLqZ_6ftYyNaejbD-vbnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.41.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:b1:7c:17:39:31:17:56:52:76:f5:68:44:2b:95:ea:70:d6:
2e:86:ec:20:6c:98:5e:91:2b:33:f3:9b:91:61:19:f4:ca:02:
86:5c:ce:35:75:f8:b0:5f:bb:bf:54:a7:d6:f0:7e:de:76:a2:
f9:90:34:b7:91:a7:0e:8a:1c:f1:53:53:ba:85:ec:f4:c7:51:
2e:6c:8a:f7:e5:d1:d3:f7:19:aa:37:fb:f8:44:06:41:c3:07:
ae:ab:30:46:76:58:f8:d9:c2:f9:56:25:80:9f:ce:2a:40:aa:
cc:17:6f:4f:01:7f:03:3c:42:89:8c:7b:cf:b6:9c:86:94:a9:
b4:1a:13:c4:aa:e5:6b:e5:db:f2:7f:d9:e5:c7:d1:17:43:6c:
16:fa:f3:3c:54:da:25:ba:f9:5d:f9:7a:29:9d:a4:4d:53:89:
d4:ff:83:a5:c1:c1:06:e8:3e:d0:9f:40:d8:1b:5c:92:ae:e7:
57:ae:59:2b:c4:fb:ba:4c:ee:ce:20:df:0f:87:43:27:fd:fa:
3f:f2:bc:1c:8b:5b:94:87:aa:3d:5d:dd:a7:1e:57:fe:59:af:
b5:eb:dd:87:ab:d3:d0:65:ac:af:91:f3:84:29:ec:c0:31:1b:
a0:a3:c0:62:15:10:0b:b9:92:f6:e6:a6:52:d6:e7:f5:21:9b:
37:32:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:26 2026 by rpki-client