Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_H3BFSmziIoBbFFA5XMNgfhayW8.roa
File: _H3BFSmziIoBbFFA5XMNgfhayW8.roa (raw, json)
Hash identifier: q3PZqENy67IeWNI3HljrcS0KMwDWQuiwbnlKevEuBds=
Subject key identifier: FC:7D:C1:15:29:B3:88:8A:01:6C:51:40:E5:73:0D:81:F8:5A:C9:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CFB5B9FC38372EAC30636AE3E45EB1AC8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_H3BFSmziIoBbFFA5XMNgfhayW8.roa
Signing time: Tue 17 Mar 2026 10:33:31 +0000
ROA not before: Tue 17 Mar 2026 10:33:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:5b:9f:c3:83:72:ea:c3:06:36:ae:3e:45:eb:1a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 17 10:33:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc7dc11529b3888a016c5140e5730d81f85ac96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:54:67:b6:79:c3:b2:de:37:2f:82:f3:29:
ef:64:20:f0:b2:be:eb:63:9e:2e:24:3d:40:b0:33:
ba:3a:f4:49:f2:d8:c4:9d:09:5f:bf:ff:7d:3f:0e:
72:56:c3:59:91:23:6f:0d:04:4b:95:6b:d7:5e:b3:
16:34:98:c1:b1:a1:c2:0d:dd:47:fb:c6:d4:e6:46:
57:59:e6:8f:3d:bf:91:84:56:67:b9:6f:22:4b:d1:
5c:ad:ec:b8:2a:58:64:17:0a:c9:37:4c:7b:b8:bf:
9f:13:7e:c2:d5:2e:97:a6:eb:c1:bc:27:9a:50:9a:
e2:52:16:db:bb:e3:ca:33:e9:66:f5:06:d1:99:61:
61:c6:f0:9e:8b:ef:98:44:a7:9e:80:7d:c5:37:84:
a1:d2:bc:39:75:6f:2d:07:cf:01:37:dc:35:65:73:
14:df:05:16:77:ff:d8:83:97:6e:c2:38:13:a3:4b:
22:4d:7f:f6:f6:52:df:1b:7c:9f:d4:d3:a8:48:5d:
48:72:9e:2e:9f:24:d3:83:3c:0d:04:f4:a6:6f:df:
86:7a:0e:fa:91:dc:1f:32:10:97:a5:82:57:90:ea:
78:ca:39:fc:c7:d0:1d:00:5f:0c:fa:fd:f9:2d:f3:
a7:34:f0:0e:b5:b8:7a:80:88:ec:15:60:8a:8a:a2:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:C1:15:29:B3:88:8A:01:6C:51:40:E5:73:0D:81:F8:5A:C9:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_H3BFSmziIoBbFFA5XMNgfhayW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
90:01:d3:0e:b4:51:fe:14:3b:df:38:79:fc:a6:7e:58:e0:d9:
10:0b:2e:c5:e5:e5:04:c9:10:aa:9a:ac:60:fb:2a:a0:89:5f:
60:de:dc:f5:ef:ee:31:d0:2b:d0:34:05:35:61:a5:ce:f3:eb:
95:1d:77:d6:da:8b:0b:4f:df:c3:94:ee:ec:2b:76:b6:d2:f4:
cd:7b:be:e0:28:09:86:96:09:b4:73:e0:5c:a5:ac:bb:47:0e:
5e:d1:64:eb:60:c8:9c:29:14:a6:89:40:ef:27:bc:f8:2d:cc:
32:88:9c:51:07:71:6c:92:82:e5:1d:e5:60:4f:1a:1d:dd:22:
44:83:08:86:e2:52:79:7f:d1:3c:e4:04:66:82:a6:43:98:78:
b4:b9:56:91:4c:ca:40:be:70:ee:45:37:18:b7:a0:cd:67:20:
27:8f:f6:94:e1:3f:02:49:6c:1b:97:b4:f4:d0:ae:7c:78:e5:
b4:c9:07:65:5a:a7:f1:63:72:a7:a7:2e:83:11:d8:aa:fc:2d:
6b:d8:cf:13:4d:19:d3:99:c7:14:84:a3:74:34:a5:18:f8:89:
3b:c1:c1:5d:70:15:83:57:0f:7e:15:b6:f4:7b:34:04:39:b2:
ed:c6:27:06:31:34:88:86:46:62:9c:cd:30:42:1c:71:b7:ab:
0c:80:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:43 2026 by rpki-client