Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vXKIatPOWkyhi8Im9DaC67vMmUM.roa
File: vXKIatPOWkyhi8Im9DaC67vMmUM.roa (raw, json)
Hash identifier: 17uvglpgTd9v4B/fLf2wqxh/0hOLIByM3FA+lRjZnuE=
Subject key identifier: BD:72:88:6A:D3:CE:5A:4C:A1:8B:C2:26:F4:36:82:EB:BB:CC:99:43
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D15DC93400A1001440781485E541FBF94
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vXKIatPOWkyhi8Im9DaC67vMmUM.roa
Signing time: Sun 22 Mar 2026 14:04:30 +0000
ROA not before: Sun 22 Mar 2026 14:04:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
77.90.63.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:dc:93:40:0a:10:01:44:07:81:48:5e:54:1f:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 22 14:04:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd72886ad3ce5a4ca18bc226f43682ebbbcc9943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:b4:a5:fc:ce:29:ba:49:d2:95:f2:97:b2:
a5:7c:78:ee:05:de:05:b5:8a:4a:3d:14:59:a2:d8:
58:98:7e:86:00:1d:1f:03:d0:e1:b7:d7:f9:0d:08:
55:68:9a:e3:f2:95:28:c0:93:54:ab:8d:8c:8c:9b:
8d:ba:9b:f3:f7:c5:f5:db:d4:25:96:e1:f0:91:14:
38:9e:23:0a:c0:86:73:73:63:86:a6:c8:c7:60:1d:
29:d4:8f:d2:f1:22:f1:dd:f9:3d:16:5b:db:fb:f7:
4c:d6:1b:47:c2:b2:97:fb:5d:7a:5b:5b:bb:78:47:
34:d3:d6:c4:ef:12:df:c7:bf:f5:4c:db:7e:5b:67:
d0:02:ec:95:3a:97:9b:d1:55:13:09:d5:16:75:72:
71:f6:4e:1a:50:93:0f:18:17:24:5f:a4:eb:b6:58:
e0:40:8c:1e:47:65:09:56:44:a1:d3:31:54:5f:f5:
97:10:0e:b5:08:44:e3:33:47:04:40:55:a8:0e:cc:
0a:4e:04:28:18:c8:2e:41:44:92:c8:27:04:8a:93:
ba:ab:c7:4e:22:99:e9:2b:d9:f3:51:90:e3:2f:7a:
8a:98:47:bc:e3:a4:84:52:cc:07:29:83:9c:bf:d1:
a1:6f:a5:77:80:a4:f9:cb:2b:f3:3b:36:9d:bb:61:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:88:6A:D3:CE:5A:4C:A1:8B:C2:26:F4:36:82:EB:BB:CC:99:43
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vXKIatPOWkyhi8Im9DaC67vMmUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.52.0/24
77.90.60.0/23
77.90.63.0/24
185.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:1b:e4:b6:c8:dd:97:68:f1:20:ba:6f:20:b2:b9:90:b3:a8:
07:e0:be:b0:97:9d:86:19:01:02:b7:5a:99:19:05:73:b1:62:
61:bf:63:86:c8:9c:a5:12:5a:28:8f:d2:c3:22:d6:81:0a:e0:
41:12:a6:2b:c9:d5:19:c9:df:34:88:29:06:e0:a0:80:bc:f9:
72:3b:45:88:4e:3e:8b:e8:03:7b:d8:75:96:84:41:ad:aa:57:
65:71:3e:c3:9e:8f:cb:2c:98:be:8e:60:a5:ad:1a:8b:8e:15:
8a:1d:fe:65:fc:7d:32:29:86:a1:4b:38:a9:57:b7:0c:d9:79:
38:2a:bb:7e:df:89:be:fc:e6:28:a9:9e:b8:b1:97:40:11:a0:
cc:78:3a:bd:fa:b6:1e:64:7a:d9:9c:d0:5d:e5:94:eb:f4:89:
ee:99:0e:34:2d:8e:be:10:28:f8:6b:3b:98:1b:f8:00:a9:dc:
c7:c4:16:d8:19:de:d9:33:26:88:29:15:ba:18:08:94:b4:4b:
a9:f0:13:d1:a5:6b:65:9e:bb:0b:d7:23:e6:9d:b6:34:7e:90:
31:0d:78:1f:0c:e6:21:ef:49:de:7f:70:5d:bc:74:a9:ee:9d:
65:80:b7:cd:9c:b2:a6:ae:d0:88:80:d1:06:fd:e6:01:7a:9f:
23:9f:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:17 2026 by rpki-client