Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5MGPlRc6ypd7maDnk4XaNqqxPpQ.roa
File: 5MGPlRc6ypd7maDnk4XaNqqxPpQ.roa (raw, json)
Hash identifier: eK6JfPXjo6o0i2Ukuj4SNTDGaH3v6NeImipZjGVVwuA=
Subject key identifier: E4:C1:8F:95:17:3A:CA:97:7B:99:A0:E7:93:85:DA:36:AA:B1:3E:94
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A1EE9B3FCABBE8DBE2178F17424EB9314
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5MGPlRc6ypd7maDnk4XaNqqxPpQ.roa
Signing time: Sun 26 Oct 2025 05:07:03 +0000
ROA not before: Sun 26 Oct 2025 05:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214915
IP address blocks: 77.90.16.0/24 maxlen: 24
77.90.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e9:b3:fc:ab:be:8d:be:21:78:f1:74:24:eb:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 26 05:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c18f95173aca977b99a0e79385da36aab13e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:de:41:c5:1d:eb:36:33:81:14:3d:75:ad:
9c:b7:64:b7:a7:6b:1d:34:ec:91:fe:f2:7c:a2:9f:
2c:cb:0b:f1:f2:cb:66:53:5e:12:33:3e:30:45:58:
99:f7:14:4b:61:a1:08:35:16:0b:3f:2e:99:48:dd:
0e:5a:86:19:05:7a:d3:9e:e3:4b:4e:64:92:ab:a3:
c9:88:76:5a:6c:9d:ee:94:dd:29:28:89:54:b9:03:
37:0d:00:0d:36:ed:94:f5:b6:56:d0:ed:30:3d:b7:
20:fc:e6:93:f7:aa:06:29:39:d9:2c:00:00:ae:55:
3f:1f:05:50:16:7b:70:a5:56:c6:98:1a:88:ef:fa:
64:79:3f:80:6c:be:d8:32:49:8b:c7:68:f5:88:1c:
74:3a:84:a2:53:43:a1:11:7a:9c:9d:79:fa:71:4d:
00:47:01:e8:c9:ad:23:1f:aa:09:ae:4d:f8:b9:1e:
ec:59:14:49:ac:48:06:14:a6:ac:b2:74:de:b6:5f:
e1:bc:1f:a6:d4:1c:be:a1:34:e2:a4:b4:1c:39:4b:
5a:40:0a:b1:bf:48:47:f6:55:f5:fc:f3:98:bd:8f:
a0:99:5e:97:a1:02:bd:ca:af:6f:98:7e:9c:c2:68:
ce:a0:71:1c:c7:4f:97:4f:0d:0b:f1:ef:c2:c5:75:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:8F:95:17:3A:CA:97:7B:99:A0:E7:93:85:DA:36:AA:B1:3E:94
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5MGPlRc6ypd7maDnk4XaNqqxPpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.16.0/24
77.90.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:78:91:34:65:b4:bd:ff:07:d2:4e:29:11:f2:1d:16:ed:c9:
f3:7d:99:b4:5e:57:8e:62:92:3c:af:22:f4:d5:a1:72:46:70:
1e:45:f7:78:e3:ee:f5:f4:5a:f6:95:84:d2:01:51:b8:c2:33:
30:10:6c:65:89:e5:f9:37:5a:82:08:da:49:24:92:cb:ca:52:
71:3c:73:8e:f7:96:6e:59:54:84:ae:6c:31:01:a3:24:36:8f:
d4:56:48:d6:ca:c0:bc:20:85:e2:4e:77:91:4f:f0:7d:49:9e:
c6:51:1d:22:1a:13:15:69:2d:51:ed:15:81:b2:2e:20:29:c0:
17:b4:b5:26:36:b7:c0:7d:69:1c:41:39:a9:81:f1:06:e5:ed:
c8:cf:ce:4c:ee:00:a8:9e:fa:c2:4c:bc:4a:30:84:7f:5c:48:
3e:82:76:e7:54:6a:aa:6b:b0:ed:e9:24:69:3c:2b:7f:c9:d3:
17:ff:bd:40:6e:9a:c4:cd:a9:68:dd:f8:cb:f7:dc:df:0d:da:
af:11:1d:4e:df:0c:58:7b:0d:a0:7c:ca:2f:77:48:0f:b0:9e:
3d:fc:c8:b8:dc:dc:c9:d0:e7:bb:56:eb:f6:31:87:1b:4d:b4:
9a:7c:af:64:5d:d6:56:47:9a:a7:e4:f5:d6:a8:9e:6c:86:0c:
8b:f7:67:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoe6bP8q76NviF48XQk65MUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDI2MDUwNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGMxOGY5NTE3M2FjYTk3N2I5OWEwZTc5Mzg1ZGEzNmFhYjEzZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomjeQcUd6zYzgRQ9da2ct2S3p2sd
NOyR/vJ8op8sywvx8stmU14SMz4wRViZ9xRLYaEINRYLPy6ZSN0OWoYZBXrTnuNL
TmSSq6PJiHZabJ3ulN0pKIlUuQM3DQANNu2U9bZW0O0wPbcg/OaT96oGKTnZLAAA
rlU/HwVQFntwpVbGmBqI7/pkeT+AbL7YMkmLx2j1iBx0OoSiU0OhEXqcnXn6cU0A
RwHoya0jH6oJrk34uR7sWRRJrEgGFKassnTetl/hvB+m1By+oTTipLQcOUtaQAqx
v0hH9lX1/POYvY+gmV6XoQK9yq9vmH6cwmjOoHEcx0+XTw0L8e/CxXWnAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOTBj5UXOsqXe5mg55OF2jaqsT6UMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNU1HUGxSYzZ5cGQ3bWFEbms0WGFOcXF4UHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoQAwQA
TVobMA0GCSqGSIb3DQEBCwUAA4IBAQCneJE0ZbS9/wfSTikR8h0W7cnzfZm0XleO
YpI8ryL01aFyRnAeRfd44+719Fr2lYTSAVG4wjMwEGxlieX5N1qCCNpJJJLLylJx
PHOO95ZuWVSErmwxAaMkNo/UVkjWysC8IIXiTneRT/B9SZ7GUR0iGhMVaS1R7RWB
si4gKcAXtLUmNrfAfWkcQTmpgfEG5e3Iz85M7gConvrCTLxKMIR/XEg+gnbnVGqq
a7Dt6SRpPCt/ydMX/71AbprEzalo3fjL99zfDdqvER1O3wxYew2gfMovd0gPsJ49
/Mi43NzJ0Oe7Vuv2MYcbTbSafK9kXdZWR5qn5PXWqJ5shgyL92ct
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:20 2025 by rpki-client