Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JrYJddINF1qeLqsvHPD6ji-gYlo.roa
File: JrYJddINF1qeLqsvHPD6ji-gYlo.roa (raw, json)
Hash identifier: w6pW4YaZk5T+YjjQcByjBSWKt92aZFsPMq1mtIbtvVU=
Subject key identifier: 26:B6:09:75:D2:0D:17:5A:9E:2E:AB:2F:1C:F0:FA:8E:2F:A0:62:5A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C6D09EFBC42155C656EF1D7FAB4EE51AA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JrYJddINF1qeLqsvHPD6ji-gYlo.roa
Signing time: Tue 17 Feb 2026 19:18:13 +0000
ROA not before: Tue 17 Feb 2026 19:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6d:09:ef:bc:42:15:5c:65:6e:f1:d7:fa:b4:ee:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 17 19:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26b60975d20d175a9e2eab2f1cf0fa8e2fa0625a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:8d:5e:c4:67:0d:64:a1:c0:00:4c:d6:23:
0f:98:91:ce:17:f4:b4:f6:b1:01:41:36:ff:af:be:
d0:b8:1e:cb:1f:8e:1b:13:77:07:1a:8b:dd:77:bc:
21:7d:ab:66:a0:ac:73:c2:b6:18:3d:c3:f8:60:2e:
ce:97:53:e0:ce:c9:50:58:9e:3d:c2:52:7a:9d:e3:
32:64:90:c1:6b:1d:b1:0c:0a:ee:cc:13:3a:63:33:
8c:12:e3:36:3b:a0:20:77:99:80:89:e6:33:56:5a:
bb:59:af:52:7e:c3:76:87:7b:e1:4c:c0:8e:96:b3:
0c:c8:e5:0f:cc:cc:85:d7:bf:01:fe:65:56:0c:5d:
06:30:98:e5:7a:33:8b:2e:31:13:75:ed:fc:9b:7a:
2c:48:7a:f7:0b:6a:31:2a:71:bd:1e:73:85:73:4a:
44:f9:8a:f7:f9:86:e3:38:45:94:0b:23:ec:87:e4:
6f:ca:04:0c:6f:26:5f:42:f8:9b:bf:36:92:3a:80:
7c:84:29:8b:15:7e:e2:50:fb:dd:ac:b4:f8:43:cf:
f8:90:fa:51:b8:26:0d:eb:d4:2e:ae:d8:07:35:8f:
eb:90:45:4d:4d:91:cb:65:53:ee:6e:b3:53:d8:e4:
5b:79:ce:2a:23:06:f2:9b:ed:a4:8a:08:1b:b3:36:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:09:75:D2:0D:17:5A:9E:2E:AB:2F:1C:F0:FA:8E:2F:A0:62:5A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JrYJddINF1qeLqsvHPD6ji-gYlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:00:6b:08:59:81:77:d9:e4:b1:f6:c3:14:9a:7b:88:95:8a:
e6:37:65:3f:d7:ba:00:a0:25:f7:34:58:89:3e:02:37:03:6c:
09:f2:0a:39:ac:da:39:19:5b:19:7c:d8:4e:18:cb:39:da:7a:
dd:69:ac:1a:fe:56:1f:29:ea:41:42:b2:4c:3b:2f:19:a6:72:
1d:8c:be:1e:13:a1:08:a8:9e:2a:52:6f:11:f5:29:d6:1b:d2:
a0:c7:f5:cc:fb:f4:b4:f9:10:14:da:f3:a6:25:8f:dc:a4:d1:
e0:04:a5:e2:9b:32:22:7b:ea:ca:06:d9:e4:d6:63:4c:81:b0:
5c:8e:66:17:be:1a:1b:9b:76:8a:3f:0a:b5:10:72:6f:59:af:
76:37:b3:79:43:b1:25:40:c5:25:1e:89:41:2e:8e:ff:9e:36:
53:3d:76:1e:8f:de:4c:97:24:74:8a:55:7e:0d:3d:8d:97:1c:
2d:c2:2e:93:e2:b4:ad:32:80:fd:a4:f2:56:43:9a:41:b1:61:
d0:68:85:aa:c1:03:8c:59:af:81:6a:50:91:eb:ea:77:85:e2:
e6:98:62:1d:1e:60:7c:4d:cf:40:07:e1:8d:a8:08:19:43:32:
ac:dc:5e:d3:cf:17:e2:67:18:06:df:24:8d:b4:66:b9:f0:03:
d8:22:2d:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxtCe+8QhVcZW7x1/q07lGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjE3MTkxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI2MDk3NWQyMGQxNzVhOWUyZWFiMmYxY2YwZmE4ZTJmYTA2MjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkONXsRnDWShwABM1iMPmJHOF/S0
9rEBQTb/r77QuB7LH44bE3cHGovdd7whfatmoKxzwrYYPcP4YC7Ol1PgzslQWJ49
wlJ6neMyZJDBax2xDAruzBM6YzOMEuM2O6Agd5mAieYzVlq7Wa9SfsN2h3vhTMCO
lrMMyOUPzMyF178B/mVWDF0GMJjlejOLLjETde38m3osSHr3C2oxKnG9HnOFc0pE
+Yr3+YbjOEWUCyPsh+RvygQMbyZfQvibvzaSOoB8hCmLFX7iUPvdrLT4Q8/4kPpR
uCYN69QurtgHNY/rkEVNTZHLZVPubrNT2ORbec4qIwbym+2kiggbszaEAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCa2CXXSDRdani6rLxzw+o4voGJaMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSnJZSmRkSU5GMXFlTHFzdkhQRDZqaS1nWWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVo2AwQA
2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQDNAGsIWYF32eSx9sMUmnuIlYrmN2U/17oA
oCX3NFiJPgI3A2wJ8go5rNo5GVsZfNhOGMs52nrdaawa/lYfKepBQrJMOy8ZpnId
jL4eE6EIqJ4qUm8R9SnWG9Kgx/XM+/S0+RAU2vOmJY/cpNHgBKXimzIie+rKBtnk
1mNMgbBcjmYXvhobm3aKPwq1EHJvWa92N7N5Q7ElQMUlHolBLo7/njZTPXYej95M
lyR0ilV+DT2Nlxwtwi6T4rStMoD9pPJWQ5pBsWHQaIWqwQOMWa+BalCR6+p3heLm
mGIdHmB8Tc9AB+GNqAgZQzKs3F7TzxfiZxgG3ySNtGa58APYIi2s
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:23 2026 by rpki-client