Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X2f64gIkTQrqiZI0G_FIYoz8wkA.roa
File: X2f64gIkTQrqiZI0G_FIYoz8wkA.roa (raw, json)
Hash identifier: 2GAU6cby4ETwFEXeK1XphPZbCBcnDmvxxlsqOzQZZbo=
Subject key identifier: 5F:67:FA:E2:02:24:4D:0A:EA:89:92:34:1B:F1:48:62:8C:FC:C2:40
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0AF9980F038E5D0106B1D4850BCA9810A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X2f64gIkTQrqiZI0G_FIYoz8wkA.roa
Signing time: Thu 17 Sep 2026 13:41:07 +0000
ROA not before: Thu 17 Sep 2026 13:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:99:80:f0:38:e5:d0:10:6b:1d:48:50:bc:a9:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 13:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f67fae202244d0aea8992341bf148628cfcc240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:ae:06:b8:b6:1f:95:e5:1e:77:31:bd:ad:
29:d5:19:ea:b5:32:36:42:8a:cc:88:f2:83:64:07:
88:bc:28:f0:b8:7e:6a:4d:37:ff:f0:af:f9:12:28:
7b:b2:17:2a:2b:fc:e5:66:46:93:54:89:e6:98:f2:
bd:67:90:7f:df:fa:84:52:4d:f7:af:77:dc:c4:7e:
da:90:d0:5d:33:e0:f8:48:1c:44:f5:ea:7c:fe:cd:
b4:f9:d6:e2:6a:28:72:b7:bc:e0:5c:11:27:23:da:
5f:ad:52:86:b8:56:a2:cc:f3:12:11:e2:a8:a3:07:
8a:fb:e8:16:db:3d:11:d6:f7:ff:ad:b4:48:bb:95:
0d:2c:84:44:2f:c4:98:dd:e8:a4:9d:40:26:2d:7e:
35:15:24:2b:72:fa:be:21:cc:f0:13:4e:2f:63:34:
21:6b:25:c7:1e:d9:4c:10:1b:38:12:2b:6b:f3:ef:
38:73:7b:f5:c3:62:cb:00:96:4e:43:51:86:f0:67:
65:3f:db:64:c4:08:6f:b5:08:94:35:b3:4c:83:5f:
fc:ac:cb:85:94:ed:45:cc:e8:57:e7:5e:e2:d4:f6:
4c:3c:31:38:e1:52:32:08:bd:16:ee:aa:8e:a3:0f:
d2:7b:6d:7e:fa:e1:e4:26:6a:ab:85:d7:01:25:ce:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:FA:E2:02:24:4D:0A:EA:89:92:34:1B:F1:48:62:8C:FC:C2:40
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X2f64gIkTQrqiZI0G_FIYoz8wkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c3:0b:c3:99:96:ee:3b:86:eb:0d:e3:bf:a1:62:98:2a:74:
95:a9:81:d9:2b:46:0e:4d:f0:04:c0:73:ff:83:50:d2:4f:42:
48:89:55:c2:24:cb:c2:b3:5c:9c:a8:3f:71:8a:2f:23:55:d7:
85:37:08:7d:48:02:70:7b:aa:27:53:a0:78:69:c6:d8:5e:3b:
55:99:da:67:c4:c8:04:7a:0d:14:1b:80:11:8c:07:ed:ac:ac:
21:30:6b:eb:c9:f8:2c:14:18:6f:78:67:67:f6:7c:18:7c:8f:
e6:f4:54:ce:d1:12:bf:a3:a6:28:79:14:b0:9e:3d:28:7d:a2:
2d:98:fd:57:19:9b:cb:16:bc:1e:58:a3:f5:5e:10:ea:1e:f6:
24:b4:c5:07:5f:77:0a:90:fa:56:f1:54:9f:fd:53:8f:fb:af:
f2:7c:49:cc:33:75:04:cc:93:dc:a4:c0:f2:b6:c2:eb:12:40:
7c:8a:59:2f:8e:29:55:19:1f:87:1a:1d:e8:f9:82:76:7c:79:
7c:d2:96:90:e5:f9:d2:b0:d4:67:78:f4:93:32:a2:b5:66:e9:
41:bf:25:f7:33:27:e1:74:91:5b:7d:e8:a1:7e:6d:57:13:91:
d0:8a:f4:e2:92:97:75:88:cc:7a:55:5c:1d:7b:13:c6:2f:84:
d7:4f:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:44 2026 by rpki-client