Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GWMnxjkvnFLtfjJ9y0oKjN1CiI4.roa
File: GWMnxjkvnFLtfjJ9y0oKjN1CiI4.roa (raw, json)
Hash identifier: 7FmMpR2IIzbnvTbppiXcQGYeGuCjdqeA8eamIBjIfDc=
Subject key identifier: 19:63:27:C6:39:2F:9C:52:ED:7E:32:7D:CB:4A:0A:8C:DD:42:88:8E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EB0797E135503F0333FFE0AEC64E5C087
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GWMnxjkvnFLtfjJ9y0oKjN1CiI4.roa
Signing time: Wed 10 Jun 2026 07:40:12 +0000
ROA not before: Wed 10 Jun 2026 07:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:79:7e:13:55:03:f0:33:3f:fe:0a:ec:64:e5:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 07:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=196327c6392f9c52ed7e327dcb4a0a8cdd42888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:0c:54:0e:9b:ab:a6:30:6e:73:81:e1:48:
9d:62:2e:e9:9c:0a:78:a0:30:b7:36:ba:71:4d:f4:
47:da:69:31:a8:70:59:45:0c:c1:10:29:5e:ed:36:
05:59:63:4a:9b:b1:97:8d:27:78:26:30:9a:4a:a8:
8d:70:ab:1e:6e:e4:0f:ba:3f:6f:da:73:06:64:a0:
6b:b8:3a:6f:cd:e2:05:50:84:f1:16:f0:77:2a:13:
21:3c:43:6c:f0:11:27:e1:1c:52:12:4c:f5:48:7e:
74:86:01:06:5b:b1:6d:6f:12:b9:bd:15:fb:26:b4:
56:55:81:73:03:06:e8:f8:c0:16:45:6c:bc:21:5b:
7a:2a:05:95:9f:d3:44:ff:35:8f:b0:75:14:c9:82:
8e:3d:02:80:d3:a7:36:1b:3b:6a:97:a1:76:49:d7:
3e:ec:b4:c5:b0:62:0a:25:ed:a2:12:2c:2c:a2:f3:
41:e6:5b:04:6e:34:e3:0e:a6:16:f3:ae:8c:e0:4f:
7c:35:bd:59:71:07:71:9d:56:f5:61:9a:07:67:24:
3b:25:e1:95:0f:38:7a:27:e1:62:b5:21:a6:16:9b:
63:30:87:35:6c:2e:56:f0:e1:f5:05:cc:68:3f:e6:
a4:e1:3d:07:0a:1f:45:b6:d3:56:c0:c2:72:ad:0d:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:27:C6:39:2F:9C:52:ED:7E:32:7D:CB:4A:0A:8C:DD:42:88:8E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GWMnxjkvnFLtfjJ9y0oKjN1CiI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.41.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6d:ba:aa:2b:60:2a:14:38:b8:c1:8c:03:66:86:cb:2d:46:
d6:8f:5d:16:20:50:7a:4b:c1:97:c8:ba:bb:c3:51:68:45:df:
fb:db:7b:6c:69:63:eb:4d:e4:9e:df:2b:25:f3:9c:1d:9e:f1:
d8:c1:76:57:ba:42:c9:2b:32:1d:b9:ee:46:4a:44:91:77:a1:
4a:4c:f3:9d:b6:34:27:bb:3c:c9:3a:6c:6f:bb:86:4b:6d:4d:
39:96:70:6e:27:77:0d:d1:d6:4e:5b:1a:17:53:9b:14:c2:61:
f5:9f:70:7d:0f:18:28:83:15:f2:5a:01:00:85:bd:65:ed:e4:
a5:b7:8a:51:af:01:4c:ec:8e:33:9b:7d:9e:ec:1f:f2:a6:cd:
76:78:37:50:ec:13:73:bf:48:14:c0:81:72:f5:5b:81:a6:01:
0c:54:fe:7f:6e:5b:c1:36:d1:a3:d9:45:78:5d:75:c2:54:aa:
9f:8b:6d:9b:68:94:5c:a0:a8:e8:c5:b8:65:6e:c2:14:52:f1:
29:77:be:d0:31:9c:af:ee:85:92:2c:7b:88:84:e6:69:28:51:
5b:6f:2b:0c:e1:67:49:58:1d:34:48:49:fd:47:a6:d9:e5:0d:
4c:c9:d0:66:49:55:1a:44:a7:46:31:13:a2:19:d1:06:3a:b8:
aa:d1:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:30 2026 by rpki-client