Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jaBvHpisSqOcaJshrxIAHOH0nAQ.roa
File: jaBvHpisSqOcaJshrxIAHOH0nAQ.roa (raw, json)
Hash identifier: XQyYlGYMDGGPrM5a1EzAdpFGIuzCn+Fn6PcMyUiTrBI=
Subject key identifier: 8D:A0:6F:1E:98:AC:4A:A3:9C:68:9B:21:AF:12:00:1C:E1:F4:9C:04
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A19C02B17367D4FA77019EFDF731101E22
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jaBvHpisSqOcaJshrxIAHOH0nAQ.roa
Signing time: Mon 02 Nov 2026 11:26:24 +0000
ROA not before: Mon 02 Nov 2026 11:26:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:02:b1:73:67:d4:fa:77:01:9e:fd:f7:31:10:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 2 11:26:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8da06f1e98ac4aa39c689b21af12001ce1f49c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:94:c5:0d:22:cb:0a:5a:03:85:37:fb:7a:
c7:1d:3b:4c:d8:33:08:67:04:b9:a0:f3:03:1c:ee:
15:46:14:f0:10:a6:0f:03:25:64:b5:7c:49:ad:a4:
cd:ca:f8:2c:bf:36:7b:8a:04:93:8e:2d:68:97:ec:
f5:d0:38:f9:80:5d:75:bc:51:63:31:57:2d:9d:be:
53:dc:f4:4c:4e:f3:e2:10:85:98:2e:b9:83:40:e8:
53:f6:74:07:df:3d:f1:d0:ec:a8:0d:cf:b5:ba:77:
8a:39:8c:a1:78:9b:5f:52:19:54:95:27:75:58:e5:
c1:68:29:36:3c:d6:75:48:72:3f:f6:da:ed:42:9d:
70:fb:09:ce:fe:07:8e:ba:b8:b5:7c:7b:3d:60:7d:
3b:2b:da:52:6c:a9:f8:12:2d:25:75:dd:1c:bd:54:
bc:98:23:77:a4:93:0b:64:a3:b6:ef:07:23:89:55:
b5:9a:4e:9f:3a:29:eb:cc:4c:04:6f:45:f4:bd:fb:
c1:e8:3e:29:de:29:89:62:58:53:19:48:8b:95:1b:
c1:32:8b:73:5c:f6:6f:84:cc:21:5d:bf:39:f0:5d:
94:80:a5:72:1d:6a:d0:90:60:d9:a6:27:0e:ba:08:
ab:f4:e6:7c:80:15:eb:35:a8:78:c1:3c:b2:88:cb:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:6F:1E:98:AC:4A:A3:9C:68:9B:21:AF:12:00:1C:E1:F4:9C:04
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jaBvHpisSqOcaJshrxIAHOH0nAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9e:63:63:e7:fe:52:dd:36:27:1a:12:ff:28:36:29:b2:5b:
7e:3e:01:5b:c2:fa:0e:46:82:80:31:49:a0:36:66:61:d7:90:
05:72:dd:97:dc:53:50:d1:7d:b3:71:cc:43:34:1c:c3:f0:7a:
da:8f:eb:dc:7c:d5:35:c3:a1:a6:fd:98:3c:67:11:ba:e3:8e:
d2:13:c0:29:07:3e:23:2d:32:1e:3c:35:99:b7:f8:30:31:18:
15:80:92:58:80:56:8b:57:92:15:9b:2b:cf:55:99:c0:15:cc:
86:90:42:10:53:ee:a8:bd:5c:92:30:9d:58:c3:0d:53:7e:c5:
28:8c:25:e1:6c:ea:e1:0b:44:a4:cc:6f:23:1a:41:60:70:f7:
7d:95:5a:59:68:ea:8f:bb:1b:f8:6e:c7:e9:d3:46:ba:93:52:
4c:bc:ea:bf:9a:9d:35:b9:82:f7:bf:60:1e:61:61:8b:f7:22:
30:cc:75:5e:f2:5d:30:63:e7:dc:1c:d8:0e:33:68:0e:b5:ff:
96:30:b7:54:69:39:da:8e:3c:07:89:7a:d0:ae:83:b3:b7:4c:
7a:21:38:7f:fb:81:60:20:1b:e2:4b:98:38:78:b7:89:9a:a0:
49:a0:fd:b7:fe:be:44:96:1a:4f:f9:e0:14:4f:62:0d:79:68:
32:79:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:03 2026 by rpki-client