Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3q7vTWckp9ReFvZg7r3_bDrKX_4.roa
File: 3q7vTWckp9ReFvZg7r3_bDrKX_4.roa (raw, json)
Hash identifier: FimY6lLyOFI4VdpgOa6fSzc2vUGICNLPzFQJpgQcDkw=
Subject key identifier: DE:AE:EF:4D:67:24:A7:D4:5E:16:F6:60:EE:BD:FF:6C:3A:CA:5F:FE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019ED8408A5123A2EF9812F074589FA568B1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3q7vTWckp9ReFvZg7r3_bDrKX_4.roa
Signing time: Thu 18 Jun 2026 01:02:48 +0000
ROA not before: Thu 18 Jun 2026 01:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197411
IP address blocks: 77.90.21.0/24 maxlen: 24
2a02:2fc0:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d8:40:8a:51:23:a2:ef:98:12:f0:74:58:9f:a5:68:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 18 01:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deaeef4d6724a7d45e16f660eebdff6c3aca5ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:ff:b8:52:02:ed:3a:1e:64:81:40:a0:d6:
15:6e:b8:a1:5a:dc:a1:76:57:d3:10:36:48:dd:b6:
4e:b0:ca:e5:17:5f:e6:b1:ab:bf:04:cf:c1:f1:75:
c9:3a:01:51:6b:2a:f6:06:03:c0:d8:28:ae:8b:43:
7e:2d:23:9f:c4:db:35:4b:0b:7b:a2:57:2d:82:6a:
d4:e5:74:f0:b8:22:39:20:49:c5:28:7e:f8:4b:0b:
c6:b5:48:5c:53:62:b3:da:71:3d:5f:25:3e:59:19:
93:1c:97:9c:df:07:8a:5a:91:2c:a9:2a:8a:fb:b3:
ff:88:b0:99:f1:e5:d9:9c:62:bf:ea:be:b6:fe:b9:
06:53:c3:ff:51:d1:50:0e:08:cd:b0:83:4c:bb:bf:
c2:68:23:96:44:78:fd:08:8c:e2:87:00:0c:82:a6:
4b:6d:fc:38:6e:39:20:e2:c4:66:fc:0a:90:8c:f5:
f0:24:bd:fe:2b:35:77:49:65:e5:15:9a:56:7a:27:
7b:a0:d3:79:71:87:ea:74:a7:c5:e2:fc:22:38:7a:
10:d5:9f:1a:ed:63:9a:76:66:2c:86:b7:1a:46:46:
82:f2:9c:69:41:90:e8:3e:21:0c:97:d0:35:d8:30:
1c:ce:d6:14:45:60:15:30:35:8a:8f:51:3a:bd:4d:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AE:EF:4D:67:24:A7:D4:5E:16:F6:60:EE:BD:FF:6C:3A:CA:5F:FE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3q7vTWckp9ReFvZg7r3_bDrKX_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
IPv6:
2a02:2fc0:22::/48
Signature Algorithm: sha256WithRSAEncryption
19:88:50:4a:dd:d7:10:f1:3b:46:d8:23:dd:11:06:3a:ed:a7:
f9:64:cd:59:0c:71:8d:f8:86:9e:dd:8c:a5:db:35:8c:9e:2b:
65:5a:9f:d0:8d:63:97:4b:06:ad:f4:98:dc:50:db:41:cf:19:
36:ce:13:4a:93:2d:36:dd:9d:38:66:78:41:4e:0b:64:ff:bc:
2f:24:a3:b9:b1:4b:e7:da:7d:40:50:6e:a6:b7:fc:a2:22:ea:
dd:50:48:56:62:02:a9:b9:f6:71:bc:29:c2:74:d6:2b:31:0d:
c5:ca:33:c7:b3:78:86:2d:e1:86:c9:8b:a4:94:de:82:1e:4f:
ee:c0:f6:46:30:aa:6d:f1:9c:5e:bf:46:a3:80:36:b3:3a:46:
48:e5:da:3e:90:1d:56:1b:17:8d:77:2f:1a:aa:73:4d:8e:81:
1d:50:3f:d3:d2:12:ce:fa:46:70:02:b0:2d:c1:fc:1e:4d:cb:
f9:0c:4a:86:ae:d8:57:72:1b:5d:13:9f:7a:9c:de:5c:b2:c7:
8e:c4:b1:97:5a:7a:6f:2b:b6:3b:21:e1:21:b6:e1:50:63:72:
0a:fc:03:02:93:32:32:94:e7:e4:6c:0f:57:5c:e6:02:5b:5d:
d5:2b:87:8a:95:27:3a:ea:85:41:5b:e9:e3:8d:cd:a9:ca:fa:
62:fe:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client