Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sYl9pMFf9Kh4B-f5baaZjLvT4Ts.roa
File: sYl9pMFf9Kh4B-f5baaZjLvT4Ts.roa (raw, json)
Hash identifier: KzDoHx9tOGBw7GjpPPIqtP3ReyOKOAoOFAbfuWKik8o=
Subject key identifier: B1:89:7D:A4:C1:5F:F4:A8:78:07:E7:F9:6D:A6:99:8C:BB:D3:E1:3B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1BC1313C673DB5FA00C14081D1BABFBDA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sYl9pMFf9Kh4B-f5baaZjLvT4Ts.roa
Signing time: Sun 08 Nov 2026 16:52:09 +0000
ROA not before: Sun 08 Nov 2026 16:52:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bc:13:13:c6:73:db:5f:a0:0c:14:08:1d:1b:ab:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 8 16:52:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1897da4c15ff4a87807e7f96da6998cbbd3e13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:42:69:6a:a5:a6:e5:d4:7a:29:cf:c3:4f:
70:d0:73:88:da:0b:ea:71:ef:46:5e:78:69:d9:ef:
5f:4e:6b:69:50:79:82:0f:99:d8:76:26:33:cb:ea:
b5:aa:48:bf:39:7b:26:92:d1:57:02:3b:77:19:a8:
a8:b8:e7:81:bb:de:67:4d:78:99:6a:c6:e1:ba:9b:
a6:c8:2c:ef:40:10:0b:2f:97:1a:e1:c5:54:12:58:
af:99:15:29:a0:6e:9b:88:07:65:af:49:79:bc:fa:
6e:3d:9e:62:c4:63:f6:d8:2c:83:94:de:1f:bb:94:
a7:6c:01:19:ea:2a:ca:52:1b:08:c9:e9:86:7a:ad:
33:4b:24:db:91:4a:4c:2d:94:b8:ad:97:4c:3b:a4:
fe:4a:cd:c2:7f:3f:0e:32:57:53:d4:37:c1:1a:29:
38:5d:6e:f4:f9:cf:62:fe:69:d1:b1:ad:d1:ba:8f:
3c:9f:af:02:97:ca:2b:4e:2a:ea:80:82:35:2a:dc:
8e:ae:97:87:2a:19:e0:83:a8:5b:85:d3:15:0f:16:
6b:0c:72:be:2c:cf:e6:27:02:b7:de:a5:e1:cf:d5:
b0:3c:91:9d:79:f6:5c:71:2d:44:3a:58:81:53:1f:
ac:b5:03:3d:d1:5e:42:32:6c:28:65:fd:0f:e0:aa:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:7D:A4:C1:5F:F4:A8:78:07:E7:F9:6D:A6:99:8C:BB:D3:E1:3B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sYl9pMFf9Kh4B-f5baaZjLvT4Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fc:d1:2a:08:75:55:78:de:0b:cf:2d:bf:ad:d3:02:1f:db:
c0:17:19:8b:0c:6c:e1:26:39:73:01:97:67:f9:ea:3f:2b:a7:
01:b2:63:c5:f3:5d:de:eb:f5:48:35:04:f8:34:18:5b:d0:2e:
3d:c8:a6:97:4f:43:50:59:7b:8b:19:f2:43:80:15:66:25:9a:
dc:99:5d:1b:23:c1:17:9b:27:a5:be:0f:eb:41:f7:33:a2:b3:
8e:d1:76:20:27:46:0d:57:8c:0a:ee:df:31:52:0c:88:6b:24:
bf:54:4c:f7:28:16:91:a2:42:e5:36:42:8b:28:fe:f6:ee:28:
bb:b4:73:6c:4b:cd:95:92:b8:5b:1f:e2:ab:20:d9:75:85:44:
cc:aa:97:d3:e8:7d:bd:43:95:e9:65:4b:b2:10:57:44:54:80:
c9:fb:5f:a5:89:d1:ed:f2:d8:78:e7:22:8d:96:b0:00:ab:9f:
7f:6c:14:77:da:78:ab:3e:bf:46:a0:98:c6:cd:c1:24:21:8c:
16:26:0b:6f:82:8c:cc:f2:d8:fc:a7:ea:7c:01:07:7a:7d:3b:
d1:dd:54:d4:2f:6c:41:6c:c4:09:ab:83:21:c7:f2:07:e9:3d:
43:c0:e1:58:43:3a:83:36:51:95:f1:c7:44:12:61:f4:11:dd:
81:b1:fe:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG8ExPGc9tfoAwUCB0bq/vaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMTA4MTY1MjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTg5N2RhNGMxNWZmNGE4NzgwN2U3Zjk2ZGE2OTk4Y2JiZDNlMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldtCaWqlpuXUeinPw09w0HOI2gvq
ce9GXnhp2e9fTmtpUHmCD5nYdiYzy+q1qki/OXsmktFXAjt3GaiouOeBu95nTXiZ
asbhupumyCzvQBALL5ca4cVUElivmRUpoG6biAdlr0l5vPpuPZ5ixGP22CyDlN4f
u5SnbAEZ6irKUhsIyemGeq0zSyTbkUpMLZS4rZdMO6T+Ss3Cfz8OMldT1DfBGik4
XW70+c9i/mnRsa3Ruo88n68Cl8orTirqgII1KtyOrpeHKhngg6hbhdMVDxZrDHK+
LM/mJwK33qXhz9WwPJGdefZccS1EOliBUx+stQM90V5CMmwoZf0P4KpkHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGJfaTBX/SoeAfn+W2mmYy70+E7MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvc1lsOXBNRmY5S2g0Qi1mNWJhYVpqTHZUNFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoRMA0G
CSqGSIb3DQEBCwUAA4IBAQBe/NEqCHVVeN4Lzy2/rdMCH9vAFxmLDGzhJjlzAZdn
+eo/K6cBsmPF813e6/VINQT4NBhb0C49yKaXT0NQWXuLGfJDgBVmJZrcmV0bI8EX
myelvg/rQfczorOO0XYgJ0YNV4wK7t8xUgyIayS/VEz3KBaRokLlNkKLKP727ii7
tHNsS82VkrhbH+KrINl1hUTMqpfT6H29Q5XpZUuyEFdEVIDJ+1+lidHt8th45yKN
lrAAq59/bBR32nirPr9GoJjGzcEkIYwWJgtvgozM8tj8p+p8AQd6fTvR3VTUL2xB
bMQJq4Mhx/IH6T1DwOFYQzqDNlGV8cdEEmH0Ed2Bsf6n
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:35:56 2026 by rpki-client