Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WAEsCu1LnRBmennQG3B-9uPoPuQ.roa
File: WAEsCu1LnRBmennQG3B-9uPoPuQ.roa (raw, json)
Hash identifier: OjFFzY2A6OJMulqar8BcHBy1X89eccMQcVL31WzN0+k=
Subject key identifier: 58:01:2C:0A:ED:4B:9D:10:66:7A:79:D0:1B:70:7E:F6:E3:E8:3E:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CD6FB7CAB42E281DC605CD127A72BFA07
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WAEsCu1LnRBmennQG3B-9uPoPuQ.roa
Signing time: Tue 10 Mar 2026 09:02:11 +0000
ROA not before: Tue 10 Mar 2026 09:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:fb:7c:ab:42:e2:81:dc:60:5c:d1:27:a7:2b:fa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 10 09:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58012c0aed4b9d10667a79d01b707ef6e3e83ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:f7:41:bd:bf:22:ce:af:38:fd:8d:bb:d7:
8c:43:ff:3a:2a:25:e9:af:dc:b3:a1:a4:76:09:15:
62:ce:be:9b:b3:c5:a8:f5:90:de:57:92:31:c0:f9:
42:24:40:f1:26:4a:dc:6f:2b:2e:38:14:5e:f7:6b:
9e:89:37:3b:e8:b3:cf:d9:c1:2c:76:f8:11:2c:ae:
5d:d5:65:93:70:e2:1f:60:88:36:c6:78:bd:54:bc:
70:e2:c8:56:22:c7:58:fb:41:3c:fd:e6:69:90:af:
78:fd:c9:39:f0:3d:c9:50:1c:4e:d6:e8:e3:8a:22:
28:98:d1:b7:c4:c9:f6:a3:6b:56:74:e4:9a:76:54:
b5:b4:d4:75:d7:f2:65:e3:a4:84:08:99:3f:03:cb:
d5:68:84:c2:29:e0:87:40:36:56:00:9d:aa:38:0b:
5a:12:24:b3:d5:4f:bd:8e:ef:98:2d:6e:72:62:56:
f8:60:69:ff:5d:2c:bf:9b:97:ba:f2:36:3e:6a:82:
c2:b1:83:bd:97:7b:6f:49:f8:45:8a:b2:1e:e9:8d:
f0:87:b8:30:52:df:12:ff:44:d2:e7:7b:45:ef:cf:
41:41:1d:53:5f:c7:7c:d0:87:9c:fe:f5:f3:cf:51:
b3:d9:12:1e:bb:6d:93:07:c0:95:93:77:7d:80:6c:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:2C:0A:ED:4B:9D:10:66:7A:79:D0:1B:70:7E:F6:E3:E8:3E:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WAEsCu1LnRBmennQG3B-9uPoPuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.41.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:60:a9:42:14:64:51:1f:30:85:20:f8:48:67:ad:4d:0f:c8:
70:dc:e1:c4:3a:a1:b7:f6:f4:f0:9d:7a:ce:f3:b9:20:e6:37:
44:10:02:48:de:2b:91:d0:c9:48:b2:90:99:21:2c:17:2a:72:
c6:97:d4:84:84:bf:d7:c5:9d:9f:54:f3:59:5e:84:0a:12:7c:
d8:72:f1:9d:d5:59:ce:c5:ea:5a:b2:59:aa:8b:25:2b:8c:bd:
e1:dd:55:c1:c0:45:44:39:0e:d0:bc:1c:27:d1:40:d0:f7:46:
89:07:25:cf:c0:96:5b:83:2c:c4:21:ad:69:2b:d6:9f:d5:f5:
63:30:e4:b6:bd:0c:08:0a:b0:fd:73:51:20:e7:ce:97:15:e1:
ec:6b:82:c9:67:73:d9:ab:91:58:25:88:9c:64:7d:e1:91:cd:
c0:ed:e4:2c:25:7b:7a:de:2a:72:84:1e:b4:fb:61:4d:5e:63:
91:df:75:4b:3f:b2:17:f2:1a:1f:e1:a9:e5:c9:81:9b:a3:57:
de:37:ff:45:58:28:31:81:d8:0e:11:9b:56:61:aa:a7:f7:c9:
be:21:4c:b5:9a:f1:ed:26:de:0f:cd:e1:15:aa:c6:a9:d4:70:
2a:1b:28:6e:34:02:f7:59:c9:80:f4:be:c1:1c:0b:a4:85:27:
86:8c:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:45 2026 by rpki-client