Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/F-ZpgVzmTNEpEb53rtNPseLqmnY.roa
File: F-ZpgVzmTNEpEb53rtNPseLqmnY.roa (raw, json)
Hash identifier: SfdhEumoba1Hoh03DNMJMOdSad6gryGyxkpaGcOcT6Q=
Subject key identifier: 17:E6:69:81:5C:E6:4C:D1:29:11:BE:77:AE:D3:4F:B1:E2:EA:9A:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A06717B1ACFA33693FF727C6D17B1BDD25
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/F-ZpgVzmTNEpEb53rtNPseLqmnY.roa
Signing time: Thu 03 Sep 2026 11:46:41 +0000
ROA not before: Thu 03 Sep 2026 11:46:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:17:b1:ac:fa:33:69:3f:f7:27:c6:d1:7b:1b:dd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 11:46:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17e669815ce64cd12911be77aed34fb1e2ea9a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:8f:d7:72:6a:57:8d:ad:e8:8f:ed:40:46:
59:bd:61:0c:9b:b6:99:bc:cd:63:0d:99:28:35:b7:
6b:1e:31:77:1d:d3:e4:26:d7:9a:58:3c:59:e9:a6:
cc:66:fb:85:a0:b0:3c:9c:82:d5:18:05:d0:ba:8c:
14:47:18:dc:af:59:28:ff:94:b5:ec:71:6a:53:8b:
90:ce:88:f4:5d:bc:7d:01:99:3c:da:04:ba:92:f4:
ea:34:21:d6:01:64:94:5b:52:2c:86:db:cb:95:48:
02:bd:ff:15:9a:2a:67:1e:3d:22:e2:8e:9d:85:7d:
b8:47:4d:26:4b:b6:3e:cf:ef:db:54:d4:04:91:f2:
10:a4:cb:aa:a3:c2:44:3e:77:39:2f:bf:df:07:a3:
8e:11:bc:3c:49:5f:72:e2:c8:df:53:2f:a6:26:86:
ec:1c:fa:4d:bb:51:78:31:e6:1b:b0:89:73:8f:cb:
a0:ed:6d:62:5f:78:03:5b:17:46:8e:ff:7a:c3:60:
6e:51:d2:f6:68:4b:57:7e:79:5d:fd:d7:ec:d0:bd:
e7:7d:4f:0d:30:62:b7:d9:65:91:1f:6e:71:c0:30:
70:04:92:3a:a4:fe:8b:dc:d1:54:35:50:1d:54:77:
b7:8b:1a:93:73:07:cc:f2:4e:c6:e7:55:ec:ca:e5:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:69:81:5C:E6:4C:D1:29:11:BE:77:AE:D3:4F:B1:E2:EA:9A:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/F-ZpgVzmTNEpEb53rtNPseLqmnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a1:0e:c6:e7:5a:4c:61:ec:74:8b:bc:fb:35:c0:38:4a:91:
0d:8f:8d:a5:db:0b:3d:3e:c0:da:d5:90:71:39:96:6b:a6:b1:
62:c5:7a:75:ee:1a:a2:9d:43:06:f7:f0:48:48:4f:99:2b:8d:
ac:e5:9e:e4:99:69:76:df:d9:41:38:95:8d:43:8c:3d:12:49:
ea:6a:06:64:31:bd:72:2f:d2:c1:0c:d5:48:a2:a8:33:8e:cb:
8a:8b:b6:fa:b2:0b:36:80:bb:65:5f:1e:8b:91:73:dd:b6:ac:
71:0c:f0:0b:2d:e1:dd:3c:6d:50:44:a2:82:32:a6:90:6d:4d:
2c:b2:86:7f:4d:40:d5:93:fb:00:5f:6f:46:b6:59:37:ee:0b:
11:91:f0:b6:a3:8a:0d:df:0d:0a:e5:da:d1:6e:f5:14:fd:64:
5b:ea:31:a8:be:b7:42:6a:d3:08:a8:7d:6d:d3:28:f8:02:de:
cd:cf:94:7a:98:12:65:b3:b5:3d:55:70:b8:78:32:64:65:dc:
55:9f:f3:7a:47:cf:85:58:52:ee:bf:f8:4c:65:7b:35:d7:f6:
b6:e4:24:d5:f1:38:1a:d5:28:62:3d:ad:2d:e2:60:e1:60:6a:
c6:ec:10:fb:38:14:88:f7:1e:f6:a7:02:ff:7a:5d:7d:4a:9b:
36:d6:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:32 2026 by rpki-client