Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OOohdd0qcn2Q6kwwl3KduWJ8-BA.roa
File: OOohdd0qcn2Q6kwwl3KduWJ8-BA.roa (raw, json)
Hash identifier: iO54Ks4DTHfuhuvuWg6v47U9AWZ5ruLc2C75S2co7nI=
Subject key identifier: 38:EA:21:75:DD:2A:72:7D:90:EA:4C:30:97:72:9D:B9:62:7C:F8:10
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A19F24B27CBF6A8EC3F2FFA716303BA824
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OOohdd0qcn2Q6kwwl3KduWJ8-BA.roa
Signing time: Tue 03 Nov 2026 02:02:24 +0000
ROA not before: Tue 03 Nov 2026 02:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
94.249.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:24:b2:7c:bf:6a:8e:c3:f2:ff:a7:16:30:3b:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 02:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38ea2175dd2a727d90ea4c3097729db9627cf810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:85:4f:32:85:2d:34:86:b3:71:6e:70:f9:
84:bf:77:00:19:67:41:30:9b:b5:97:d5:12:3b:21:
eb:34:b1:23:0e:ed:db:1d:70:f0:ce:63:f1:7f:35:
b2:fc:98:c2:37:17:a0:02:b7:4c:c1:58:4c:71:33:
13:5f:84:8b:57:46:11:cd:79:cb:ca:df:9a:e3:4b:
37:18:db:e9:00:73:c1:b7:42:c7:69:2a:41:30:b1:
78:14:31:a7:3a:c5:66:fa:57:93:9e:1a:35:de:bc:
37:4d:c1:49:60:60:47:3a:57:d4:13:2a:2a:54:cc:
6c:c6:a6:41:91:66:f2:50:0a:ca:00:34:b6:22:ff:
9b:89:75:5f:6a:89:35:3c:28:49:36:15:66:b8:31:
e5:d6:d7:49:ac:b8:90:98:70:20:6d:44:b8:ca:61:
f7:f0:ff:4b:62:27:e4:83:75:f2:a6:9f:e5:29:1b:
89:9c:fe:5d:e8:5a:96:88:34:c1:23:5a:08:78:c4:
48:db:85:42:d1:3f:95:cc:d8:48:38:3e:20:43:94:
f7:7e:c4:ea:ad:fc:59:99:1d:c6:ae:56:87:3d:3c:
79:8c:32:99:7d:97:ae:19:af:ab:71:22:6a:20:1d:
4d:34:02:b0:c8:43:26:dc:12:57:c8:0d:da:14:2e:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:21:75:DD:2A:72:7D:90:EA:4C:30:97:72:9D:B9:62:7C:F8:10
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OOohdd0qcn2Q6kwwl3KduWJ8-BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
94.249.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:67:6d:c5:10:25:82:1f:bc:ef:66:59:9e:2a:d4:3a:62:04:
14:19:a6:c0:5a:a1:ea:b3:d0:4f:9b:3a:e1:a9:5d:57:8e:96:
fe:c6:73:5b:f5:85:bd:34:bb:5d:a0:6e:b7:c6:d0:93:de:3a:
53:f3:af:3d:ea:95:63:08:50:57:d2:05:48:f1:5f:96:b3:62:
a4:60:45:d6:47:7c:f0:e1:70:ec:13:a5:fb:04:d1:8a:87:43:
a3:7a:5d:45:f4:84:bd:70:4a:d8:dc:b9:bc:47:20:c8:bb:c7:
92:ea:01:b2:34:75:85:7c:f9:60:8a:4c:c2:b1:9e:9a:c6:ef:
a3:7a:09:68:23:8c:e6:be:81:34:fd:2b:b3:c8:79:26:cf:6a:
9a:d9:25:7f:5b:33:a9:2e:4d:c3:b4:30:cf:e7:cc:49:64:f2:
fc:b2:82:d5:2c:76:d8:39:f4:0c:96:27:38:dd:67:6a:d4:73:
ba:30:85:43:4e:2b:54:e5:79:88:54:7e:10:3e:4c:1f:46:e9:
6e:f8:dd:a7:49:f2:e4:00:9f:5e:4d:c2:ce:21:b2:41:73:ee:
c3:60:40:87:cd:6a:2e:2b:47:5f:51:ce:01:81:cc:54:aa:85:
ac:3f:ca:0d:83:18:05:21:dd:af:47:f5:4f:40:63:ac:84:fe:
26:7a:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:29 2026 by rpki-client