Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jc5uScDr70MxTN-HXHdjAxJA15s.roa
File: jc5uScDr70MxTN-HXHdjAxJA15s.roa (raw, json)
Hash identifier: 4hu/ZqApouIaiSY82A9XIvJAk0r8vCmwH73z1zj5jSE=
Subject key identifier: 8D:CE:6E:49:C0:EB:EF:43:31:4C:DF:87:5C:77:63:03:12:40:D7:9B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F89135BA31BFA7C3A0F7EFC9E77A34108
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jc5uScDr70MxTN-HXHdjAxJA15s.roa
Signing time: Wed 22 Jul 2026 09:06:15 +0000
ROA not before: Wed 22 Jul 2026 09:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200461
IP address blocks: 77.90.44.0/24 maxlen: 24
178.18.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:13:5b:a3:1b:fa:7c:3a:0f:7e:fc:9e:77:a3:41:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 22 09:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dce6e49c0ebef43314cdf875c7763031240d79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:83:a2:96:3a:03:6f:91:1a:c3:9f:af:b9:
65:0e:00:84:15:a4:f1:54:bd:07:31:92:f1:a7:5d:
0b:55:35:1f:90:dd:f1:1b:f0:b4:fc:4d:19:bf:b0:
98:79:a5:88:39:df:32:45:71:07:08:10:00:80:b2:
08:b9:37:0b:87:34:9e:d6:ca:9f:7c:23:76:69:d5:
86:5e:fe:a9:0c:bf:ae:6a:f3:41:62:33:20:fe:d8:
ba:be:93:64:cc:20:72:5c:a9:f1:a3:3e:e0:f0:25:
58:af:3a:b8:73:33:b7:dc:1b:c3:20:dd:61:2e:11:
c5:41:90:1c:a9:f6:97:93:5c:5a:91:8d:b5:46:c1:
26:f9:10:54:42:79:1a:0f:0d:b3:1e:67:35:85:a1:
ec:4b:a3:77:62:25:e2:4a:2f:d3:e2:e6:0c:1b:76:
d4:23:93:66:f7:5f:e3:28:f7:38:f0:2b:28:44:ed:
ef:6b:bf:e3:99:99:1d:d4:12:f9:b6:73:b5:ad:41:
25:0f:2b:c1:37:69:1f:61:a7:12:3b:31:67:ad:72:
93:aa:b9:f5:0f:30:ab:15:a2:06:42:3a:a2:71:94:
48:f0:44:3a:e8:54:24:50:72:e3:35:e8:f9:ef:69:
7e:43:42:4e:f2:af:40:71:10:a5:b2:a6:1b:bc:de:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CE:6E:49:C0:EB:EF:43:31:4C:DF:87:5C:77:63:03:12:40:D7:9B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jc5uScDr70MxTN-HXHdjAxJA15s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.44.0/24
178.18.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2b:91:27:a4:db:3d:c9:41:f2:46:bd:ba:a1:f3:0b:44:86:
5d:ed:b7:66:ef:c5:02:69:3e:f8:4b:c7:0d:de:07:9a:1f:96:
88:88:01:5e:45:f8:57:51:7b:13:e2:9e:7d:ee:e1:05:5d:a6:
22:c0:4b:6e:59:2e:53:8b:37:51:7a:49:0f:0b:f2:49:5a:4c:
70:32:71:9e:07:14:4c:a2:a2:93:cc:0d:e2:0a:be:1f:b8:db:
23:ba:50:89:88:58:9d:c5:ba:43:97:e4:1b:c7:ef:ea:8b:06:
54:cf:45:f4:4a:83:47:12:98:43:dc:85:04:71:9e:8e:55:ca:
72:de:db:db:68:41:ad:85:ad:2f:50:25:27:eb:3c:09:47:1c:
e1:62:b3:d7:7c:c8:18:00:51:12:7e:03:f9:16:6f:b0:34:3c:
1e:d8:43:61:bf:03:35:2b:c5:63:99:c9:05:4d:c2:53:d9:b1:
c7:e3:9b:c7:af:d1:e5:f9:6c:a7:4b:22:40:f6:0f:2b:3f:30:
48:d6:7c:ac:6a:a2:08:c1:95:d3:55:e8:45:f7:c0:5d:7a:95:
e1:25:3f:12:a8:8c:65:d5:64:2f:51:cc:03:36:43:56:65:c8:
d6:4e:7e:f4:04:4d:91:80:cb:cd:d9:80:23:4c:45:20:d5:b0:
12:96:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:32 2026 by rpki-client