Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TXz8D5WUUsHZ6O-qTcvVDpM8Q94.roa
File: TXz8D5WUUsHZ6O-qTcvVDpM8Q94.roa (raw, json)
Hash identifier: ElGbHawg9CBspgr66sJOIcio5SCK5Cx3cY8RWKxqnfU=
Subject key identifier: 4D:7C:FC:0F:95:94:52:C1:D9:E8:EF:AA:4D:CB:D5:0E:93:3C:43:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C41A05B1F763CFEF22782C173E8782417
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TXz8D5WUUsHZ6O-qTcvVDpM8Q94.roa
Signing time: Mon 09 Feb 2026 08:59:13 +0000
ROA not before: Mon 09 Feb 2026 08:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a0:5b:1f:76:3c:fe:f2:27:82:c1:73:e8:78:24:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 9 08:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d7cfc0f959452c1d9e8efaa4dcbd50e933c43de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:14:1e:ea:1b:6b:69:88:a5:ec:ac:72:87:
12:46:b3:21:9a:71:40:fe:4e:f9:61:b3:2c:a0:f7:
9c:01:ae:ac:79:73:90:38:be:37:ac:37:74:9b:d0:
65:b8:3c:24:b0:87:43:3c:fb:4d:94:30:2c:c6:a7:
a4:07:ff:1b:6e:b8:cf:49:4f:a9:e9:a3:9b:61:56:
a5:e4:79:b1:71:86:bb:8d:0c:5c:b0:59:b3:52:9f:
6e:70:8e:44:07:4b:4a:d7:3d:09:b6:58:0a:78:1f:
d3:be:27:5e:87:7d:32:8e:52:75:6f:ef:09:c7:76:
70:8a:d5:a0:01:8e:f0:e6:e8:fa:7f:b4:45:b6:0d:
d7:7a:3f:ac:0b:88:77:79:b8:37:31:05:cc:e1:5a:
68:90:b4:a9:96:84:df:88:32:52:5c:ec:42:e1:0c:
96:ec:10:be:40:ce:51:b5:90:92:c2:25:3c:b8:95:
69:c1:2b:be:3f:76:4e:2b:48:d6:c7:ca:c7:2d:9e:
a4:e9:a8:a5:8c:ce:e3:fb:a0:1d:a1:72:91:0e:d4:
a1:c4:24:36:4f:81:74:e2:49:bb:9e:69:41:80:02:
f7:63:73:17:2e:2d:9a:40:dd:02:e4:9d:87:0e:b9:
ac:a1:f0:8a:f9:93:2f:08:52:eb:e7:5d:e2:33:06:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7C:FC:0F:95:94:52:C1:D9:E8:EF:AA:4D:CB:D5:0E:93:3C:43:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TXz8D5WUUsHZ6O-qTcvVDpM8Q94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
67:41:ea:d9:c0:0c:10:fe:c8:9a:f8:cc:7b:9e:59:f2:c9:a4:
6d:82:14:f9:ea:3e:84:c1:d7:6d:68:0c:e9:e8:12:af:6b:9e:
9d:69:d1:fc:bf:53:1e:ae:8b:97:1f:bf:97:9a:14:de:80:e6:
70:b2:a2:d4:00:92:14:ca:fd:4e:c7:26:97:d1:83:36:04:4b:
83:29:0a:d5:c6:e6:3b:4f:b4:7f:48:a9:ad:05:7f:50:c1:72:
d2:d1:e4:01:c5:f1:a4:ca:03:c8:95:84:ff:43:7d:d4:85:91:
a1:49:96:59:c4:24:72:96:38:08:6c:5d:bd:67:8c:20:5e:d9:
6d:9e:8d:c0:b6:05:60:58:00:74:e5:03:67:f0:6c:a3:2a:c1:
6c:fe:af:12:3d:fc:8e:71:49:34:db:ef:f8:8e:e6:76:ca:3f:
d4:02:8a:07:1d:88:86:49:8b:84:5f:5d:77:15:a8:2c:30:5b:
3e:1a:a5:62:0f:de:58:f4:7d:19:73:77:70:3b:10:83:32:72:
31:2f:a3:ad:06:ca:e0:28:29:4c:c4:fd:ff:3d:7d:bb:76:d6:
7a:58:f4:a0:4f:1e:cf:bd:57:b1:31:31:b9:c9:ea:ee:66:5c:
eb:0c:d5:1b:5d:bb:f6:ec:0d:bd:e5:ca:65:a2:c5:0d:1b:94:
14:cc:d2:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxBoFsfdjz+8ieCwXPoeCQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjA5MDg1OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDdjZmMwZjk1OTQ1MmMxZDllOGVmYWE0ZGNiZDUwZTkzM2M0M2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJYUHuoba2mIpeyscocSRrMhmnFA
/k75YbMsoPecAa6seXOQOL43rDd0m9BluDwksIdDPPtNlDAsxqekB/8bbrjPSU+p
6aObYVal5HmxcYa7jQxcsFmzUp9ucI5EB0tK1z0JtlgKeB/Tvideh30yjlJ1b+8J
x3ZwitWgAY7w5uj6f7RFtg3Xej+sC4h3ebg3MQXM4VpokLSploTfiDJSXOxC4QyW
7BC+QM5RtZCSwiU8uJVpwSu+P3ZOK0jWx8rHLZ6k6ailjM7j+6AdoXKRDtShxCQ2
T4F04km7nmlBgAL3Y3MXLi2aQN0C5J2HDrmsofCK+ZMvCFLr513iMwYoyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE18/A+VlFLB2ejvqk3L1Q6TPEPeMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVFh6OEQ1V1VVc0haNk8tcVRjdlZEcE04UTk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVoKAwQA
TVoyMA0GCSqGSIb3DQEBCwUAA4IBAQBnQerZwAwQ/sia+Mx7nlnyyaRtghT56j6E
wddtaAzp6BKva56dadH8v1MerouXH7+XmhTegOZwsqLUAJIUyv1OxyaX0YM2BEuD
KQrVxuY7T7R/SKmtBX9QwXLS0eQBxfGkygPIlYT/Q33UhZGhSZZZxCRyljgIbF29
Z4wgXtltno3AtgVgWAB05QNn8GyjKsFs/q8SPfyOcUk02+/4juZ2yj/UAooHHYiG
SYuEX113FagsMFs+GqViD95Y9H0Zc3dwOxCDMnIxL6OtBsrgKClMxP3/PX27dtZ6
WPSgTx7PvVexMTG5yeruZlzrDNUbXbv27A295cplosUNG5QUzNJ5
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:13 2026 by rpki-client