Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/hE_NggneCURW4oVGtlWg3JHt5_Q.roa
File: hE_NggneCURW4oVGtlWg3JHt5_Q.roa (raw, json)
Hash identifier: Mnqw5Z33MoKiV3g11K3G81p5sDcXUCDIvpdqPdvjqlk=
Subject key identifier: 84:4F:CD:82:09:DE:09:44:56:E2:85:46:B6:55:A0:DC:91:ED:E7:F4
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019C681A7FDC05E30D5D2089736910EB1F28
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/hE_NggneCURW4oVGtlWg3JHt5_Q.roa
Signing time: Mon 16 Feb 2026 20:18:12 +0000
ROA not before: Mon 16 Feb 2026 20:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 77.91.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:1a:7f:dc:05:e3:0d:5d:20:89:73:69:10:eb:1f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Feb 16 20:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=844fcd8209de094456e28546b655a0dc91ede7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:c1:0e:58:4b:9f:5d:47:8b:6f:69:e2:51:
ad:09:e3:a4:94:1f:b5:66:f1:3c:22:8a:9f:5b:aa:
a0:27:a3:43:8e:df:d7:fb:5f:0e:0b:7b:71:b3:7a:
9a:f9:0a:52:36:b5:a1:ff:24:8c:c2:60:2c:39:57:
9f:f7:04:11:da:ed:bd:6b:a7:98:aa:b1:af:bd:e9:
7d:42:32:5b:fa:35:8b:59:63:4c:66:12:ea:54:b0:
bf:89:1e:3d:6c:14:69:33:34:f5:71:09:9a:27:31:
a1:10:dd:5b:da:98:da:87:2d:25:77:d3:38:ea:53:
20:7f:d2:0c:a1:f7:66:fb:a8:79:e9:a6:b4:e6:6e:
07:39:c7:1e:02:16:f9:d4:03:8b:70:22:50:49:09:
f5:f1:df:76:d8:b6:fb:b4:6e:c6:5f:16:14:9d:8c:
dc:23:4a:b0:2f:4f:c2:8e:d2:d7:9b:23:2f:8d:0d:
7e:b9:41:25:e6:8a:2f:ad:b7:0d:c4:12:05:69:29:
74:c8:1a:1d:98:da:d3:c6:50:18:21:35:43:db:19:
d2:56:4e:13:7d:cf:2b:e0:f0:18:3d:6d:e2:4c:41:
c0:ef:6d:cc:94:99:79:6c:e7:e2:35:27:c4:bb:74:
3b:42:d0:32:56:44:ad:31:43:ce:a5:fd:7d:5f:06:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:CD:82:09:DE:09:44:56:E2:85:46:B6:55:A0:DC:91:ED:E7:F4
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/hE_NggneCURW4oVGtlWg3JHt5_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:2f:95:6a:73:2e:91:5e:3e:d4:4f:2a:ff:a4:f5:32:da:36:
5d:03:ed:89:df:ec:fa:94:66:db:76:00:94:25:33:a2:dc:86:
f3:d6:f7:b5:dc:e7:5a:41:96:46:4f:e5:30:ad:50:ca:3c:c7:
92:c8:29:0f:ac:71:51:a2:71:ae:dd:c9:a9:8e:31:fe:af:74:
89:52:26:88:79:05:b7:3f:81:86:b4:28:8b:3d:b3:b1:a8:ff:
0f:cf:d6:be:7a:31:d4:1d:7c:58:87:0b:61:70:fb:c5:00:ec:
ee:64:7d:48:62:d1:94:f3:1e:29:93:a8:78:7b:e0:79:a5:99:
e1:16:62:e6:b1:6a:a7:57:c3:f8:e5:d2:8d:d6:29:0b:4e:23:
35:4f:c8:01:79:e4:ac:fa:05:15:43:f0:79:21:b4:a7:1b:d1:
c3:4a:38:1e:14:18:48:85:ef:01:63:b2:34:ef:50:a9:fc:76:
f6:28:54:ac:06:4f:3e:b1:1f:a3:93:c9:3a:5e:c3:86:7c:82:
e7:5b:8e:63:03:b6:8f:37:a1:6a:26:b1:7b:47:bc:d4:72:58:
fb:01:87:81:8e:de:4e:b3:34:79:36:87:16:35:b6:ce:25:84:
c4:be:c9:1b:54:00:23:6e:50:fa:ca:9f:e6:c2:1f:96:12:58:
0c:60:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:42 2026 by rpki-client