Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P2tF6lr11dbjlKwFe3wEsqM9O04.roa
File: P2tF6lr11dbjlKwFe3wEsqM9O04.roa (raw, json)
Hash identifier: NlAbQ6O7ZqBIVFdSAhM6IA8+uF4mxGNSsTAf24NuRYs=
Subject key identifier: 3F:6B:45:EA:5A:F5:D5:D6:E3:94:AC:05:7B:7C:04:B2:A3:3D:3B:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199A49C7D2CFF12773379BCA7B2AB8EEF72
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P2tF6lr11dbjlKwFe3wEsqM9O04.roa
Signing time: Thu 02 Oct 2025 11:09:02 +0000
ROA not before: Thu 02 Oct 2025 11:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:9c:7d:2c:ff:12:77:33:79:bc:a7:b2:ab:8e:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 11:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6b45ea5af5d5d6e394ac057b7c04b2a33d3b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:64:30:9c:c6:73:a0:6d:fb:8a:fc:ca:3d:
6a:d7:81:38:af:74:2a:89:25:a8:33:c2:84:ca:9c:
c3:33:38:87:9f:ab:7c:09:8e:f5:0e:8c:ae:8a:fb:
14:44:de:77:7a:d8:eb:92:d7:a8:c1:68:dd:92:f2:
69:db:ea:82:e8:35:8c:76:9d:54:8c:3a:18:24:53:
cd:31:a4:a8:07:34:c2:58:71:5c:d4:ff:97:41:9f:
18:1e:52:80:99:2a:48:ae:32:bc:c6:5e:0d:97:12:
c4:63:96:fa:8d:93:42:c9:76:a0:6b:fa:72:5e:a6:
db:67:6a:aa:50:45:6b:bc:87:9b:14:45:77:16:29:
86:20:03:07:11:84:0d:c8:11:d6:15:9d:9e:b8:b3:
0c:b8:60:81:73:24:6b:0b:04:86:73:d3:3c:23:7b:
2b:f9:fc:60:74:43:3f:50:f4:62:ae:38:59:ac:6b:
4f:b6:0a:80:67:a7:d8:74:02:56:0b:3e:6e:06:6e:
cf:37:a9:16:7a:be:c8:6a:c0:9d:c8:e8:d4:51:cc:
99:e7:33:76:92:3a:dc:ec:cf:98:49:88:2e:74:2f:
4c:a0:ff:f8:6c:d4:4b:ad:32:21:94:26:75:de:80:
34:9a:3f:af:59:7c:b8:1a:41:8c:85:10:9b:de:dc:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:45:EA:5A:F5:D5:D6:E3:94:AC:05:7B:7C:04:B2:A3:3D:3B:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P2tF6lr11dbjlKwFe3wEsqM9O04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
01:56:ec:55:d1:2d:4d:aa:c8:dc:52:45:04:76:26:72:d1:5a:
f1:f6:f0:a1:69:11:3b:c2:ea:ab:ee:6c:eb:79:be:c1:0c:74:
2f:87:25:12:8e:13:d6:55:c1:7e:35:bc:bd:cd:f3:20:8c:2b:
fb:12:d2:cf:67:c8:1e:e9:56:e9:ca:9c:49:ee:28:41:45:ab:
94:47:c6:6f:bf:8c:db:c0:00:20:2f:43:a3:60:5c:33:c9:89:
50:39:ca:a9:4e:0a:a2:a8:1f:d7:83:c0:7d:a1:4a:cf:35:c6:
0b:00:a8:2c:ba:33:54:f6:57:e3:27:6e:9c:cc:5e:6c:1a:04:
4b:92:99:08:b2:b9:79:9a:88:ca:6c:00:28:1e:03:bc:ec:45:
ff:97:8b:e1:f4:83:a8:31:27:13:50:33:af:d3:86:b2:8b:21:
d9:d5:35:e3:cc:8b:c2:d1:7d:98:55:3c:8d:1c:c8:fb:31:e1:
81:df:19:ef:0b:27:b4:f9:bf:b4:f3:ae:1f:85:8f:43:85:b2:
4e:a6:80:e7:33:1a:40:99:d9:37:3c:51:9f:91:de:d1:2c:c2:
ca:1d:43:46:dc:ba:eb:cf:ee:e4:53:50:d8:32:34:6d:0c:09:
49:3c:50:7b:d3:0d:84:e5:b8:c0:b4:ab:fe:fc:00:d3:ab:86:
a1:83:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:06 2025 by rpki-client