Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R674w49iyK7rVvNR7Gd0rJhTQ8Y.roa
File: R674w49iyK7rVvNR7Gd0rJhTQ8Y.roa (raw, json)
Hash identifier: O/yB91jyWgpjnsXEmJPA36Wxp4lq8PQuFMprVkmo30I=
Subject key identifier: 47:AE:F8:C3:8F:62:C8:AE:EB:56:F3:51:EC:67:74:AC:98:53:43:C6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A18DAA8999E7FD483BF67A797A51BD2A86
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R674w49iyK7rVvNR7Gd0rJhTQ8Y.roa
Signing time: Fri 30 Oct 2026 16:35:26 +0000
ROA not before: Fri 30 Oct 2026 16:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 77.90.62.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:aa:89:99:e7:fd:48:3b:f6:7a:79:7a:51:bd:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 30 16:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47aef8c38f62c8aeeb56f351ec6774ac985343c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:2b:55:50:52:6c:0a:13:f1:6c:2d:d3:00:
2c:11:70:5c:a9:e6:ca:1b:e0:e9:f4:ab:98:2a:34:
52:6b:ef:02:24:7e:93:b7:d8:4a:92:1c:02:74:52:
df:39:de:cd:af:c5:2c:3b:73:b8:ef:1a:e7:26:7e:
96:54:0f:92:fc:18:b4:2a:7f:ef:d0:85:3c:4f:88:
0b:9b:05:09:71:1a:9f:b5:ac:36:8e:ad:21:c2:ba:
91:e9:d0:92:e8:75:8f:08:fc:28:b9:51:47:22:04:
ec:a5:ed:d3:b1:41:b8:0c:7c:fd:7b:5c:f5:72:22:
e5:0c:8a:38:23:85:e3:e3:24:3b:40:94:ff:53:ee:
c1:c0:25:99:1b:6d:dc:7e:c2:91:4c:a3:6e:7a:0d:
48:5e:de:22:53:14:55:f3:15:56:a2:00:4c:69:83:
e8:4e:fe:88:69:cb:1a:f9:22:ef:a4:df:0e:25:a6:
ee:2b:58:07:03:1e:a6:72:93:79:d9:af:d5:b3:0f:
7b:a4:6d:d1:73:e1:b0:c6:a2:2f:b6:40:eb:26:fb:
cc:9a:df:48:22:bf:a1:9f:28:5b:b1:1a:9d:e9:99:
20:8f:87:a0:70:8d:7e:78:20:fc:23:20:a4:22:df:
5f:87:47:ba:07:18:10:53:d6:a9:e1:8e:eb:3d:fa:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:F8:C3:8F:62:C8:AE:EB:56:F3:51:EC:67:74:AC:98:53:43:C6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R674w49iyK7rVvNR7Gd0rJhTQ8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.62.0/24
94.249.148.0/24
94.249.240.0/24
Signature Algorithm: sha256WithRSAEncryption
38:31:a5:7c:91:02:b2:79:8f:87:27:e1:08:9e:f9:ff:1b:18:
cf:5a:56:b7:85:5c:af:85:7a:8a:75:0d:67:eb:ee:84:d6:e3:
61:60:fb:a7:be:e5:d0:c0:9b:74:4c:a9:cf:f8:3e:b8:eb:dc:
f2:5f:10:5a:ee:02:ae:ce:94:51:c5:cb:c0:ef:29:c5:8b:10:
80:3f:de:e0:e9:47:e2:1c:3b:81:79:d4:13:b1:71:9b:c5:5b:
32:b2:9d:d8:4a:ba:b9:19:46:5b:62:26:97:8c:96:7c:37:55:
35:e5:b4:a2:04:6d:a4:05:2c:ef:4c:7d:8e:d6:ca:62:db:36:
b7:ea:10:d4:3f:8f:57:e7:7b:3b:87:02:52:52:4b:1c:0c:3a:
7c:dd:86:41:24:fd:43:3a:92:88:0c:f7:d6:b5:6f:75:48:6c:
9d:0c:44:91:06:ad:84:23:58:94:b3:61:e9:a6:53:14:e0:52:
5a:33:35:c7:29:b5:aa:1b:14:8c:a1:a0:be:b8:2d:6c:e1:0d:
61:a2:71:f2:82:6d:0f:77:d1:76:46:00:de:09:38:41:0a:31:
9a:8d:27:24:f0:2c:9a:c4:1b:9f:a1:83:fb:02:20:29:77:d6:
01:51:ed:76:c4:78:d4:79:b5:44:22:28:21:d0:b0:c6:70:1a:
51:a5:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:50:24 2026 by rpki-client