Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XjtV0KiEyj8tMLk8zx_k4v0ISuI.roa
File: XjtV0KiEyj8tMLk8zx_k4v0ISuI.roa (raw, json)
Hash identifier: bLT7qXCuFLSvp4RaLX77IGtY9JojtlGDqWxIqUMGZwM=
Subject key identifier: 5E:3B:55:D0:A8:84:CA:3F:2D:30:B9:3C:CF:1F:E4:E2:FD:08:4A:E2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0C7AB007A0DAF5510081BF954720EC5BB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XjtV0KiEyj8tMLk8zx_k4v0ISuI.roa
Signing time: Tue 22 Sep 2026 05:51:07 +0000
ROA not before: Tue 22 Sep 2026 05:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200461
IP address blocks: 77.90.44.0/24 maxlen: 24
89.106.80.0/24 maxlen: 24
178.18.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ab:00:7a:0d:af:55:10:08:1b:f9:54:72:0e:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 22 05:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e3b55d0a884ca3f2d30b93ccf1fe4e2fd084ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:21:0b:30:ba:e3:8c:dd:94:0f:34:45:6c:
18:ea:fe:f4:74:df:a2:ed:3e:3a:4c:f7:43:27:61:
58:8e:27:16:b1:46:22:7b:ea:2b:74:9e:c8:b2:91:
ed:73:f9:b8:39:bb:4b:22:d6:6f:99:c6:41:58:33:
97:36:93:ee:62:6e:08:58:6a:3d:27:93:5a:41:94:
68:5d:0c:c2:e0:a2:65:28:ad:74:77:40:66:57:0c:
f2:84:92:98:fb:3c:52:28:b9:9b:6f:09:e6:c7:6a:
77:a4:5c:26:0c:37:e3:a5:4a:22:cd:6c:5a:09:7c:
80:f7:32:9c:b4:c2:c4:5b:0f:2b:ff:b9:f7:66:8f:
bd:e6:be:0e:d6:e1:7b:eb:e7:9c:2c:82:0f:1f:82:
f2:cf:d6:99:a8:bb:76:d1:cd:57:0c:4c:7c:c4:7f:
f9:b8:0e:65:36:de:79:e7:7a:27:37:8f:d5:29:7b:
c7:56:c7:48:3e:59:b4:9f:59:31:6a:49:fc:ec:d7:
67:9b:12:31:e3:8b:3d:f3:2b:f6:9e:ef:93:0e:4c:
50:c3:c5:4e:15:03:f1:9e:3a:07:07:98:b8:5f:c3:
fb:12:dc:6e:7e:ad:ac:5e:75:46:72:01:3c:46:b3:
13:27:fa:6b:30:c2:8b:32:1d:c8:ae:3c:d9:d5:23:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3B:55:D0:A8:84:CA:3F:2D:30:B9:3C:CF:1F:E4:E2:FD:08:4A:E2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XjtV0KiEyj8tMLk8zx_k4v0ISuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.44.0/24
89.106.80.0/24
178.18.148.0/24
Signature Algorithm: sha256WithRSAEncryption
96:95:81:1a:b4:ae:87:63:a8:47:d0:65:9f:47:82:4d:61:a0:
90:eb:cb:73:ed:f1:22:05:3b:d7:a0:03:b3:4c:e0:e9:c9:cf:
fb:71:a1:38:38:92:04:04:e2:1e:2c:e1:bb:4e:ac:20:cf:72:
59:df:f5:6d:2d:7e:38:e8:1b:c9:6e:05:e0:a8:06:87:cd:d6:
a3:89:6d:13:e1:49:67:af:30:64:dd:fc:54:50:e3:c0:87:69:
7e:ec:e1:40:7d:e3:6e:de:3f:e3:26:20:1f:7b:e8:2c:f2:1a:
ae:7a:61:b1:d9:e3:0b:0e:1d:ad:0b:a7:d4:0d:2d:97:e2:0f:
af:1a:d5:ef:29:a7:30:4b:f5:c5:ca:95:2f:87:32:5c:8f:c5:
44:aa:52:b9:aa:7c:a9:ac:1a:eb:65:4b:3f:e8:e2:81:82:68:
21:4b:d3:9a:97:75:b1:8c:9b:bf:9b:51:25:66:7b:c7:97:7d:
28:ed:cb:73:d8:c9:8c:20:a1:9c:04:d7:1a:74:a8:ac:87:b2:
29:67:9f:6c:fb:d6:a8:4c:90:af:fd:a8:03:0a:c0:b9:92:5b:
5b:e4:00:87:c0:84:38:25:76:79:0a:6c:b8:f9:f8:0e:c8:5b:
93:85:ec:ef:9b:bb:49:83:f3:32:87:e4:a6:2f:da:55:92:7f:
c5:0e:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:04:13 2026 by rpki-client