Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ABNsm96Fi9DRfuOaud1Ix094In8.roa
File: ABNsm96Fi9DRfuOaud1Ix094In8.roa (raw, json)
Hash identifier: 4htauw3jPF6VWVkjR60Rbm+ezHSunZBgpOdwT8GdUh0=
Subject key identifier: 00:13:6C:9B:DE:85:8B:D0:D1:7E:E3:9A:B9:DD:48:C7:4F:78:22:7F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A064A923A810457EC08EB184E8D5527D25
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ABNsm96Fi9DRfuOaud1Ix094In8.roa
Signing time: Thu 03 Sep 2026 00:26:41 +0000
ROA not before: Thu 03 Sep 2026 00:26:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:a9:23:a8:10:45:7e:c0:8e:b1:84:e8:d5:52:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 00:26:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00136c9bde858bd0d17ee39ab9dd48c74f78227f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:52:b8:f4:1b:c6:64:6d:e8:6d:22:1c:55:
5d:99:92:3f:c1:b1:28:86:bc:72:d6:cf:1c:82:85:
30:e4:33:40:bf:1e:84:03:e8:c4:e8:08:91:83:df:
31:68:02:ff:e0:eb:34:34:b0:07:66:7b:51:8a:f6:
54:50:94:1a:29:6e:6e:45:bd:b1:84:a9:4c:c2:49:
5f:b9:50:57:32:b9:40:1b:3f:18:0e:36:03:af:ac:
fe:bd:46:5b:84:a8:69:55:e8:c3:ac:cc:97:e1:c1:
4a:10:af:d0:66:f2:18:a6:41:76:05:2c:82:15:e3:
bc:97:d8:90:00:86:c7:ff:64:70:3f:7a:b6:31:88:
94:6f:ae:f9:ee:24:e5:15:89:55:38:29:a3:16:fc:
fb:a7:9b:3a:cd:86:c9:2d:dd:cf:5f:0a:b3:90:66:
d8:07:b7:c9:a5:11:54:22:dc:9e:32:bc:c2:57:25:
b2:91:01:4e:fa:db:80:99:0b:5b:f1:b2:bc:d6:07:
cc:79:d5:44:e1:de:1d:86:df:66:0c:a6:20:3f:56:
ca:e6:25:79:2c:36:93:9c:4a:f9:6a:5a:1d:8e:19:
f4:76:4c:4a:95:c5:a5:be:90:a2:e3:0b:69:88:77:
e3:51:af:7b:ef:41:8c:7b:38:e2:26:ab:25:9f:0a:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:6C:9B:DE:85:8B:D0:D1:7E:E3:9A:B9:DD:48:C7:4F:78:22:7F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ABNsm96Fi9DRfuOaud1Ix094In8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1a:34:c6:2c:20:11:8c:9a:04:2f:b4:97:52:97:c2:94:46:
83:65:d4:4e:df:15:35:5b:d1:8a:78:93:76:2f:72:fa:6b:1a:
72:07:7e:b2:7c:e6:05:68:d1:29:4c:95:50:4e:ba:cd:8f:a1:
72:d2:c7:a6:a8:86:35:85:73:ad:a9:d5:1f:ac:6f:b3:2f:b7:
4e:5a:3f:d3:21:fd:c6:7d:fe:84:90:0c:b4:8f:58:3c:87:9f:
7a:d8:43:87:ed:25:5e:a1:8a:26:73:b8:82:51:93:67:15:30:
87:05:f9:5f:81:7a:e9:4a:6f:ce:f6:29:74:2c:34:4c:19:0c:
26:d6:27:8b:ad:c1:b5:f5:ec:79:ab:b0:cb:59:05:ad:35:94:
59:c4:ff:16:74:f2:13:20:94:8f:96:84:e3:0d:d5:96:a4:a9:
7b:5b:55:f2:33:36:20:6e:e8:78:c9:41:9c:ce:10:19:b4:20:
01:98:f2:6b:d9:3e:4f:51:cf:27:56:45:b4:46:b9:b7:19:df:
78:3b:46:8c:69:cc:c5:a1:12:a5:7b:be:f6:e6:d5:9d:89:b1:
11:19:03:6d:02:02:10:ce:71:ed:e4:23:96:98:ea:d2:da:a5:
56:e9:26:c0:00:e8:4a:50:2c:61:18:b6:ea:dc:24:ec:7b:ad:
ea:a5:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:32 2026 by rpki-client