Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qVJEM8mv_njb7KKFwu-fEFGGe_I.roa
File: qVJEM8mv_njb7KKFwu-fEFGGe_I.roa (raw, json)
Hash identifier: 2XXdcDyyzdhotdKoZuqqQQUQTD2PHEuEBRuJNbTXSpA=
Subject key identifier: A9:52:44:33:C9:AF:FE:78:DB:EC:A2:85:C2:EF:9F:10:51:86:7B:F2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A44530759FAFE17C08B5BD092D0CA1937
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qVJEM8mv_njb7KKFwu-fEFGGe_I.roa
Signing time: Sun 02 Nov 2025 11:28:03 +0000
ROA not before: Sun 02 Nov 2025 11:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:53:07:59:fa:fe:17:c0:8b:5b:d0:92:d0:ca:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 2 11:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9524433c9affe78dbeca285c2ef9f1051867bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:cb:14:87:28:b7:d1:20:bc:cb:79:a2:23:
a8:5a:31:d6:2a:7d:e8:74:c9:e9:13:c2:ae:1e:f2:
fa:e0:90:8b:e7:17:9b:05:73:8d:f2:51:be:d7:bf:
5a:ca:b3:0a:fb:57:73:2c:8b:10:3b:6a:1c:f5:9d:
8b:32:4c:4d:62:cd:98:c1:6d:a4:97:79:e0:68:f6:
7d:fc:3f:7b:a0:49:dc:4b:53:73:75:c1:a7:37:29:
de:77:46:e9:63:ba:f9:06:91:b9:0b:57:43:06:f7:
18:f1:99:c8:9f:fb:bd:e3:4e:84:ad:54:22:d4:96:
00:a0:41:89:f5:af:8b:f2:58:e7:e2:42:4b:e5:bd:
75:1e:f7:5f:b2:02:ec:e4:bd:f7:a6:40:8d:81:77:
53:7a:49:01:ca:26:a9:df:f9:64:cf:11:08:08:96:
45:96:c1:97:9f:0d:dd:5f:7a:ba:e4:4a:cd:35:a0:
48:14:16:2d:3f:92:ff:81:0c:81:a4:aa:32:7f:9e:
00:c3:f4:b9:35:99:17:46:a1:ef:e0:a4:03:f9:77:
97:95:c0:3c:ef:c0:1e:72:eb:d1:b1:7d:07:8d:82:
b1:83:2d:bf:82:4c:91:5d:58:60:0d:93:58:ec:f8:
5d:15:4d:56:99:f6:6b:aa:c6:92:1b:55:2c:cf:e3:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:44:33:C9:AF:FE:78:DB:EC:A2:85:C2:EF:9F:10:51:86:7B:F2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qVJEM8mv_njb7KKFwu-fEFGGe_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:96:e9:af:ab:e6:44:22:70:ec:e7:c7:de:6c:fe:4a:af:01:
0b:ca:1a:0c:f8:79:53:71:22:a4:d6:40:ef:b7:9f:12:99:d6:
dd:1e:d0:2e:06:3c:a0:4f:2d:77:1d:91:8f:86:18:7c:ca:88:
20:31:39:38:44:eb:ff:e0:a4:a8:d8:37:98:8b:b5:01:51:38:
3c:e6:16:60:c8:01:59:96:1e:f4:ff:80:50:b6:cf:b8:3e:77:
9f:c4:83:a7:84:e2:f1:f9:ab:38:0c:d4:ec:90:40:d0:e9:35:
64:57:ca:52:8c:ff:49:46:64:ab:66:96:6a:63:69:9a:62:5f:
8a:6d:c7:9b:4f:da:e1:94:4a:2a:df:88:83:59:3d:92:98:22:
c6:a8:ef:f6:a8:1d:53:0a:ac:ea:82:82:26:e9:7b:4d:c5:a7:
f1:10:e6:d1:5e:0d:a0:86:14:bf:58:b5:97:19:e6:a2:ce:f1:
ed:9f:8c:6d:37:0c:18:03:52:cf:0c:88:9e:d5:e9:bf:b7:1e:
18:ba:68:a7:65:42:56:67:7a:cf:ca:e7:e1:79:38:60:1a:6a:
11:3f:fe:b0:9d:41:9e:47:ea:9a:2f:16:ce:46:e4:fe:a8:cc:
c5:0f:d7:3e:f1:7c:85:7c:6e:4d:3a:40:1c:32:f4:d0:83:c4:
a6:16:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:21 2025 by rpki-client