Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7_WJurPcF6IfcYn_JT-TMx-_OWE.roa
File: 7_WJurPcF6IfcYn_JT-TMx-_OWE.roa (raw, json)
Hash identifier: HNQiJJs8ujTm9lC8fVJWvN/0OO/8kIpqt1XmCuX7tjA=
Subject key identifier: EF:F5:89:BA:B3:DC:17:A2:1F:71:89:FF:25:3F:93:33:1F:BF:39:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0E3C245A78481C78908AC30D4DCAB9569
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7_WJurPcF6IfcYn_JT-TMx-_OWE.roa
Signing time: Sun 27 Sep 2026 16:45:54 +0000
ROA not before: Sun 27 Sep 2026 16:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23506
IP address blocks: 77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:c2:45:a7:84:81:c7:89:08:ac:30:d4:dc:ab:95:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 27 16:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eff589bab3dc17a21f7189ff253f93331fbf3961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:16:c0:96:23:3a:92:d6:fe:d1:b0:c3:b7:
fc:c7:1d:d5:49:00:69:a1:ba:9a:84:e5:8b:a0:75:
46:ad:1b:87:34:e6:04:82:70:cb:7a:f8:e5:3d:71:
2d:9a:70:d0:04:57:38:b5:89:3a:ad:31:aa:1a:f3:
21:ee:96:db:2c:9f:94:e7:4f:5a:fd:e8:df:b6:df:
7f:b4:ef:46:5d:c6:ba:0f:f7:1e:a5:1e:f7:bb:24:
7e:39:9c:2d:c2:b9:a1:fe:ae:78:51:37:e5:71:e8:
6a:53:9d:f9:78:f4:b8:f8:82:42:d7:55:9f:b3:50:
6f:c0:01:3c:bd:89:e1:e3:55:49:27:45:bc:67:36:
52:00:99:c9:3e:ce:88:0e:a0:19:c7:d0:59:7b:7a:
55:e7:76:55:bb:ef:0b:bb:64:9b:d5:9f:0c:5f:40:
da:c1:2a:bc:ba:2b:0d:da:3a:0a:75:6b:1a:fe:c9:
a7:5f:e3:ed:42:c0:65:00:df:a2:35:71:e7:f7:f8:
a8:41:bf:ea:e8:f8:12:16:4d:83:77:f1:18:b3:7f:
4e:58:98:7c:5d:aa:00:4e:9d:05:81:4b:6b:92:52:
90:21:5e:cf:e1:fa:52:1f:91:6e:67:c8:11:96:1a:
ed:f8:57:05:38:15:cc:da:d5:64:f5:5a:99:02:ba:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:89:BA:B3:DC:17:A2:1F:71:89:FF:25:3F:93:33:1F:BF:39:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7_WJurPcF6IfcYn_JT-TMx-_OWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8e:a4:b1:0a:bf:d9:e2:86:b8:36:af:52:f2:f4:8b:2f:11:
09:09:70:3c:8f:d7:99:56:5d:ac:b5:aa:08:03:9f:d8:ed:92:
d0:39:e8:c1:69:ca:41:b2:31:3b:d4:71:90:dc:ec:1d:c5:f5:
f6:fc:f9:92:62:23:7c:54:74:a2:2e:6d:9f:86:88:9b:97:4e:
b8:88:1c:cc:00:dc:2d:b9:0f:a0:da:b9:cd:18:89:15:99:88:
2b:72:e2:be:b5:30:d7:18:c0:27:00:10:ac:e8:73:1b:9e:52:
22:0b:87:5e:78:5e:7a:7c:d9:e3:ee:b0:e8:5a:32:71:aa:8f:
03:f5:17:cf:3a:98:3f:1f:84:60:68:06:d5:58:a4:1d:39:80:
09:12:e8:cc:ea:4b:07:b2:2f:03:83:f2:a5:b2:89:b6:15:b5:
1d:92:c7:68:75:10:01:c3:c1:dd:89:b4:87:15:6e:9c:17:a4:
a3:d4:75:51:de:44:f1:59:ba:e4:3a:56:5c:2e:95:03:98:69:
ec:48:e2:f0:24:65:dd:83:23:cf:2d:a8:e3:7b:2f:61:21:67:
ce:33:72:a9:d8:16:92:99:84:bd:14:2a:c5:f9:4d:75:a7:f6:
07:76:eb:3d:db:86:ea:70:16:a5:24:9b:95:f9:e3:7a:df:5b:
21:46:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:45:09 2026 by rpki-client