Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a5YVDPjojivX25yhxpIvf05nbOk.roa
File: a5YVDPjojivX25yhxpIvf05nbOk.roa (raw, json)
Hash identifier: M61x2xx45VaE0SWtt9iPsUJeZFslkwG+KarQliyMa1I=
Subject key identifier: 6B:96:15:0C:F8:E8:8E:2B:D7:DB:9C:A1:C6:92:2F:7F:4E:67:6C:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C467539FA1803D07FF785BBBDBB9F2608
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a5YVDPjojivX25yhxpIvf05nbOk.roa
Signing time: Tue 10 Feb 2026 07:30:13 +0000
ROA not before: Tue 10 Feb 2026 07:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23506
IP address blocks: 77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:75:39:fa:18:03:d0:7f:f7:85:bb:bd:bb:9f:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 10 07:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b96150cf8e88e2bd7db9ca1c6922f7f4e676ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:e0:26:07:86:ed:57:aa:3f:40:fa:c3:74:
f7:63:af:d0:e9:45:c2:a9:c5:6b:19:19:0a:aa:b6:
a0:ca:17:63:c9:3a:90:44:32:b2:bd:93:ed:13:21:
85:7f:ad:97:aa:d5:c9:e7:de:ec:c9:b5:95:a2:ec:
1e:65:49:0d:a6:1a:17:6b:fe:57:a1:a9:11:bc:25:
b8:9e:ef:2d:41:f4:c1:51:a5:07:40:38:66:24:6c:
fe:5a:a9:67:fc:91:4b:ea:a6:5f:cf:96:a5:3f:9c:
ae:d2:ed:2f:ed:58:b8:b7:a2:8f:f9:98:3e:07:5e:
1b:f4:51:ab:17:62:2e:41:7a:7a:02:79:90:eb:f9:
fd:f0:47:42:9b:4d:ad:d7:87:e4:8d:fb:39:a7:4d:
01:6c:57:0c:50:37:31:77:a1:db:6e:c1:f5:bd:17:
b2:66:5c:83:3c:48:a6:1d:18:33:d0:59:51:25:ce:
a0:db:77:0e:eb:f3:e6:fa:54:7f:0e:84:c7:e2:32:
c3:e7:63:e0:1c:5f:98:31:9a:4a:6b:3e:1c:ab:9a:
3d:84:75:4d:d2:d9:76:51:e6:23:8d:e1:aa:8d:0a:
30:6e:af:d7:59:07:8c:5e:57:7d:2e:78:dd:76:50:
a1:f6:db:45:40:a3:1a:20:af:db:fb:ea:3f:24:72:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:15:0C:F8:E8:8E:2B:D7:DB:9C:A1:C6:92:2F:7F:4E:67:6C:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a5YVDPjojivX25yhxpIvf05nbOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
26:69:01:ad:52:d5:60:bd:15:dc:35:ec:e2:d1:7a:c7:ae:93:
99:e7:87:bb:69:eb:d1:c8:39:06:4b:cd:ad:9c:54:05:31:71:
d4:ea:cb:dc:f4:02:74:77:93:7a:37:d7:cb:0c:53:07:42:21:
8b:36:ad:83:13:f5:39:df:1b:6c:b6:c1:3b:3e:d9:d0:d1:77:
5f:9d:fa:ca:27:a5:eb:64:f9:0d:6e:dd:f1:4c:8a:2f:e6:6b:
8a:16:bd:7d:a0:68:1c:2c:87:89:49:8b:ac:44:56:9f:35:f0:
2b:7e:93:c6:02:04:02:34:fb:74:e9:d1:33:3d:2d:99:e9:7b:
66:4c:ce:b5:70:89:9a:a9:5a:0d:6d:96:53:0d:e6:09:41:fd:
c2:c0:1a:ef:ee:49:b4:0b:87:5f:42:18:f7:a6:62:df:1a:ce:
ec:e0:c4:55:2e:35:8b:9d:38:72:41:27:c1:6b:52:9e:73:f8:
ac:5a:3c:f4:9e:77:82:a4:cd:de:eb:6d:3b:f2:4e:39:35:d4:
ca:d7:c2:8b:09:0c:80:d4:30:85:2d:3a:6a:e1:31:3f:5e:ac:
f5:d9:f1:62:1d:ca:2b:15:64:4a:df:b8:37:07:9a:e6:88:21:
97:2f:22:e8:15:a1:04:e7:ac:d0:7a:ed:7d:a7:a8:3d:12:1d:
02:08:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:52 2026 by rpki-client