Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0kC3nXYpqub6zOA1Ilfe_TpRAGk.roa
File: 0kC3nXYpqub6zOA1Ilfe_TpRAGk.roa (raw, json)
Hash identifier: UUVHIyBYJYjq2pSafkPOVWM1h+1r4/GW2zhiFLaEYpg=
Subject key identifier: D2:40:B7:9D:76:29:AA:E6:FA:CC:E0:35:22:57:DE:FD:3A:51:00:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198DA405168632A24033885485A561B5543
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0kC3nXYpqub6zOA1Ilfe_TpRAGk.roa
Signing time: Sun 24 Aug 2025 04:05:04 +0000
ROA not before: Sun 24 Aug 2025 04:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:40:51:68:63:2a:24:03:38:85:48:5a:56:1b:55:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 04:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d240b79d7629aae6facce0352257defd3a510069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:37:41:38:5c:27:a3:af:54:50:67:46:31:
f5:83:c5:42:6e:d1:3f:6a:a3:c4:e6:63:9d:e1:10:
84:36:3f:aa:5e:35:c6:70:9e:04:2a:58:3f:5c:f4:
4a:9d:fe:c3:37:a7:fb:be:55:ba:e8:51:01:4e:cb:
96:74:dd:0d:07:6e:0e:1e:73:88:0a:fe:26:f2:29:
62:36:3a:2b:c2:f9:0e:c1:13:e4:9a:aa:7e:aa:3f:
16:26:04:79:44:96:ed:17:79:8d:b4:bf:73:4d:e3:
73:fc:18:86:c6:d4:26:8c:38:96:10:bf:4a:77:48:
2d:85:c8:4b:d1:53:92:dc:0e:74:da:2c:8a:4c:77:
2d:c7:ea:7d:12:2a:7f:4e:58:6e:68:a2:95:3e:2c:
ab:57:d2:ca:26:f4:96:c4:08:a4:5e:86:f5:22:7b:
98:e3:12:f3:2f:2b:d5:be:ef:0f:f5:a4:ab:35:4e:
8a:f2:9a:12:35:72:a0:96:72:73:7a:ca:34:d4:f6:
2e:76:76:76:95:60:c6:f6:41:3b:ac:d8:03:02:7f:
c4:35:04:35:94:3f:ec:d5:29:db:12:e6:70:1d:f0:
1b:9b:57:8e:74:26:7c:a9:ac:39:41:7c:da:2d:0f:
51:65:38:6d:27:e7:c8:57:a2:a1:91:ee:e9:1f:f0:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:B7:9D:76:29:AA:E6:FA:CC:E0:35:22:57:DE:FD:3A:51:00:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0kC3nXYpqub6zOA1Ilfe_TpRAGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d2:3e:80:a2:54:76:05:8b:54:de:83:d0:96:e8:29:dc:fe:
18:ff:3b:0e:cb:84:a4:58:ef:db:5a:b8:87:f0:6b:c6:d7:00:
69:97:f9:2b:d6:7e:1f:98:f8:4e:3d:51:50:eb:32:76:d4:4d:
09:87:b1:81:41:79:95:2a:94:75:b5:33:55:38:f3:65:a4:d2:
85:d0:ef:8a:8f:b4:da:88:3a:50:4d:92:ad:38:33:79:94:b3:
ea:30:4e:57:29:e1:41:a8:11:ae:98:59:42:47:4c:ca:b1:59:
75:f1:dc:95:8d:69:1d:7c:eb:f9:36:4d:d1:2f:b8:a7:bb:2f:
15:c1:af:8b:cc:09:4c:13:82:0a:a3:98:dd:db:82:54:42:05:
80:4c:d3:ae:d1:b4:be:ed:df:21:88:26:43:ca:f5:16:0e:73:
9f:82:1b:1b:25:f2:e4:dc:bc:e2:3f:91:15:59:b9:84:fc:9b:
0f:be:1c:b5:a1:a4:43:51:3c:62:df:c6:6f:8a:27:2e:7b:b7:
d6:22:29:58:8e:3b:d0:01:12:df:9c:68:02:07:aa:af:63:da:
5a:49:e5:5a:86:2d:79:71:56:0d:6f:ec:37:f1:09:61:89:98:
e3:e0:42:d6:72:fa:d5:ac:1d:37:7a:71:d7:6e:3d:04:c0:59:
1f:0a:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:00 2025 by rpki-client