Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZ7mxS7hpYbEoCdU8y7aHhruZTY.roa
File: mZ7mxS7hpYbEoCdU8y7aHhruZTY.roa (raw, json)
Hash identifier: WuFc4B8VoMeGBY6B/MiQMW02+t4Fh5I5WvELJh+BJvQ=
Subject key identifier: 99:9E:E6:C5:2E:E1:A5:86:C4:A0:27:54:F3:2E:DA:1E:1A:EE:65:36
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D70F86912D7D7D22022A1FB19B0825DED
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZ7mxS7hpYbEoCdU8y7aHhruZTY.roa
Signing time: Thu 09 Apr 2026 06:40:21 +0000
ROA not before: Thu 09 Apr 2026 06:40:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:f8:69:12:d7:d7:d2:20:22:a1:fb:19:b0:82:5d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 9 06:40:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=999ee6c52ee1a586c4a02754f32eda1e1aee6536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:7d:05:eb:c0:8f:dc:77:81:87:fc:76:b4:
5b:42:8d:43:57:d1:60:bc:94:ca:9a:1e:1d:be:a9:
d6:58:3f:53:eb:60:97:ad:bc:27:06:ab:12:41:04:
aa:4d:88:e0:9c:43:a3:51:43:c2:bd:66:f3:72:aa:
55:92:f4:ae:c2:89:12:ff:b4:92:f4:b6:84:d4:b0:
ea:6a:e7:6b:bf:53:d2:01:29:0d:bc:a5:3b:91:85:
ae:47:c8:32:64:f8:93:9f:d9:c5:b1:53:e2:9e:f0:
ec:72:c5:53:c5:d6:2f:32:ec:91:c6:85:1d:8e:70:
2b:35:4e:f3:f8:5e:d0:38:90:4c:76:3f:6f:d5:1e:
08:1d:12:36:56:86:f5:a6:b5:89:e0:e5:db:b0:f4:
b0:f8:80:6f:c5:80:c1:85:b4:b2:84:6b:84:51:5a:
c6:07:62:56:0e:61:63:cc:b7:4e:d8:59:f1:1a:dc:
a0:e3:99:36:2b:d2:75:f2:f2:b2:f9:9a:56:f3:98:
68:d2:64:03:84:b8:91:5a:e9:91:f7:84:9f:44:49:
f1:b1:49:dd:01:71:3f:3c:11:cb:34:ee:3a:be:99:
fd:b2:c3:64:50:9e:e3:ea:4a:22:00:00:5a:a6:6c:
c5:84:9d:7b:9e:ac:14:0a:16:9a:1b:13:58:c5:dc:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:E6:C5:2E:E1:A5:86:C4:A0:27:54:F3:2E:DA:1E:1A:EE:65:36
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZ7mxS7hpYbEoCdU8y7aHhruZTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
41:78:1f:8e:fb:05:e3:bf:f4:30:5d:50:60:17:3e:a2:78:14:
ca:c5:d8:32:c0:cd:88:47:4e:a4:34:12:65:4f:61:e4:05:84:
52:bf:c8:e9:17:eb:59:77:0c:3f:c9:fd:54:a0:9f:99:0d:8d:
2f:5f:e0:7c:5c:f9:e1:3a:cc:61:75:bf:d6:62:08:72:b4:f7:
e3:a0:6c:16:a5:6f:38:f2:a0:4a:61:31:9e:ec:ae:e3:2f:04:
11:78:93:65:df:9e:b5:2c:38:16:54:17:7f:f4:1e:0d:9d:32:
3d:5b:ca:e9:60:11:36:cf:64:7d:1d:b8:b2:2e:78:8a:2b:82:
3f:96:a1:55:42:18:15:39:0a:0a:d5:51:d0:48:5f:4d:25:a5:
11:33:26:82:b2:75:5c:a7:50:79:79:c1:04:76:10:77:ba:cb:
f8:d5:8b:3e:35:0f:ea:06:30:af:1a:df:ce:f9:ca:ed:23:a2:
a6:cd:c5:67:8b:ef:ef:c3:06:47:c6:a4:dc:f0:6f:b8:1d:3a:
76:0e:86:2b:4a:da:e0:b7:c9:ce:49:31:d4:4f:7f:d9:22:d3:
f5:11:1a:bc:74:3e:d0:57:78:e6:9b:1a:79:52:8d:bb:f0:3e:
69:db:d3:f5:51:e1:d9:b0:57:50:a7:7e:b9:53:61:36:2b:6a:
75:43:aa:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1w+GkS19fSICKh+xmwgl3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDA5MDY0MDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTllZTZjNTJlZTFhNTg2YzRhMDI3NTRmMzJlZGExZTFhZWU2NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTV9BevAj9x3gYf8drRbQo1DV9Fg
vJTKmh4dvqnWWD9T62CXrbwnBqsSQQSqTYjgnEOjUUPCvWbzcqpVkvSuwokS/7SS
9LaE1LDqaudrv1PSASkNvKU7kYWuR8gyZPiTn9nFsVPinvDscsVTxdYvMuyRxoUd
jnArNU7z+F7QOJBMdj9v1R4IHRI2Vob1prWJ4OXbsPSw+IBvxYDBhbSyhGuEUVrG
B2JWDmFjzLdO2FnxGtyg45k2K9J18vKy+ZpW85ho0mQDhLiRWumR94SfREnxsUnd
AXE/PBHLNO46vpn9ssNkUJ7j6koiAABapmzFhJ17nqwUChaaGxNYxdy/VQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJme5sUu4aWGxKAnVPMu2h4a7mU2MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbVo3bXhTN2hwWWJFb0NkVTh5N2FIaHJ1WlRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVoKAwQA
TVoyMA0GCSqGSIb3DQEBCwUAA4IBAQBBeB+O+wXjv/QwXVBgFz6ieBTKxdgywM2I
R06kNBJlT2HkBYRSv8jpF+tZdww/yf1UoJ+ZDY0vX+B8XPnhOsxhdb/WYghytPfj
oGwWpW848qBKYTGe7K7jLwQReJNl3561LDgWVBd/9B4NnTI9W8rpYBE2z2R9Hbiy
LniKK4I/lqFVQhgVOQoK1VHQSF9NJaURMyaCsnVcp1B5ecEEdhB3usv41Ys+NQ/q
BjCvGt/O+crtI6KmzcVni+/vwwZHxqTc8G+4HTp2DoYrStrgt8nOSTHUT3/ZItP1
ERq8dD7QV3jmmxp5Uo278D5p29P1UeHZsFdQp365U2E2K2p1Q6pP
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:23 2026 by rpki-client