Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FK33aLx6wn0mPlP3XYfvQdaJcI8.roa
File: FK33aLx6wn0mPlP3XYfvQdaJcI8.roa (raw, json)
Hash identifier: TyDxAxpKSDmgsXubqiH8SnHAFg0Qfy3wAgyiY30bIEU=
Subject key identifier: 14:AD:F7:68:BC:7A:C2:7D:26:3E:53:F7:5D:87:EF:41:D6:89:70:8F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D1F77D1FD8B6293FD508B60E098648AD9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FK33aLx6wn0mPlP3XYfvQdaJcI8.roa
Signing time: Tue 24 Mar 2026 10:50:39 +0000
ROA not before: Tue 24 Mar 2026 10:50:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215569
IP address blocks: 77.90.24.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:77:d1:fd:8b:62:93:fd:50:8b:60:e0:98:64:8a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 10:50:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14adf768bc7ac27d263e53f75d87ef41d689708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:60:59:a3:c3:9f:b1:ff:24:63:36:70:fc:
55:34:d6:5e:f3:a9:a7:ac:6e:92:16:c4:e9:97:ff:
66:17:4e:bf:0d:98:f5:40:da:b9:08:a5:49:64:9a:
55:05:3b:c7:e2:f7:6c:39:ce:12:e1:7c:da:57:70:
ba:47:de:da:18:fd:a8:5c:64:9d:c2:b8:2a:60:09:
6d:ad:26:e4:37:c6:e3:62:62:aa:4f:6c:68:82:c0:
58:19:64:81:a8:e2:2e:6f:92:5f:38:95:9d:f0:a2:
42:37:aa:37:c4:01:8e:84:09:99:30:1f:6e:ef:de:
e2:92:ba:41:18:9f:ab:11:89:a9:64:1d:d5:87:eb:
f1:46:60:34:8c:55:4d:f9:38:75:2d:21:3e:42:dc:
55:7b:a9:58:91:7e:8a:65:a0:71:d2:ed:10:51:dd:
18:3b:56:af:a4:13:99:3c:d3:af:5e:82:5a:36:1e:
15:1b:27:a1:e2:9f:02:ae:3f:00:34:73:47:07:0a:
4f:55:9d:6a:59:58:1c:6b:e2:33:6f:c1:48:81:5c:
b5:1b:ed:37:e7:e9:ec:d5:6a:70:ad:21:bd:3f:f3:
53:e3:44:cf:d4:c8:50:b8:76:bd:87:70:a3:11:a1:
51:b5:86:e4:95:de:7d:5c:53:10:0c:d5:0e:d3:06:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AD:F7:68:BC:7A:C2:7D:26:3E:53:F7:5D:87:EF:41:D6:89:70:8F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FK33aLx6wn0mPlP3XYfvQdaJcI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.24.0/24
77.90.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bc:33:6b:46:5d:ba:3a:75:6e:70:61:87:86:5e:cc:d0:60:
a2:a4:42:74:83:08:ab:18:ad:1f:39:46:3f:64:ea:2f:36:48:
0d:9e:2f:e9:ad:9d:f5:32:30:34:b6:21:be:3e:61:1f:5d:92:
a2:f0:68:98:7a:b4:af:4c:44:ac:c9:d4:02:4d:ae:94:a6:b1:
79:03:e3:d5:01:77:2d:3c:72:41:5d:0d:28:e9:0b:6b:31:fc:
be:ef:16:47:57:77:4d:f2:0f:c8:21:41:5f:50:9a:8d:0f:b9:
b7:77:e2:82:6e:3e:6f:b7:6a:ff:ef:a0:86:f8:ce:88:92:3f:
68:7c:f3:7f:bc:73:f6:62:d8:96:f4:f8:56:fa:26:71:fb:2c:
5c:b9:e3:f9:84:03:cc:c9:2e:e9:bf:77:a7:50:50:45:85:ad:
71:ed:03:d5:5c:2a:9d:1a:e2:01:14:07:df:aa:67:cc:de:92:
5c:9b:97:36:26:b1:88:7c:18:36:ea:75:e0:8d:45:ca:59:2f:
5b:4e:66:ff:5b:20:26:a4:61:38:3a:de:f4:17:00:0b:90:ba:
34:0a:cf:bb:36:a7:ed:0e:f4:1e:f5:7b:24:f5:08:b2:0d:5f:
c8:bb:33:12:31:02:c9:b1:4e:af:5c:b5:1f:a8:54:5d:80:9a:
fd:83:c4:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0fd9H9i2KT/VCLYOCYZIrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzI0MTA1MDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGFkZjc2OGJjN2FjMjdkMjYzZTUzZjc1ZDg3ZWY0MWQ2ODk3MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttRgWaPDn7H/JGM2cPxVNNZe86mn
rG6SFsTpl/9mF06/DZj1QNq5CKVJZJpVBTvH4vdsOc4S4XzaV3C6R97aGP2oXGSd
wrgqYAltrSbkN8bjYmKqT2xogsBYGWSBqOIub5JfOJWd8KJCN6o3xAGOhAmZMB9u
797ikrpBGJ+rEYmpZB3Vh+vxRmA0jFVN+Th1LSE+QtxVe6lYkX6KZaBx0u0QUd0Y
O1avpBOZPNOvXoJaNh4VGyeh4p8Crj8ANHNHBwpPVZ1qWVgca+Izb8FIgVy1G+03
5+ns1WpwrSG9P/NT40TP1MhQuHa9h3CjEaFRtYbkld59XFMQDNUO0wZhOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBSt92i8esJ9Jj5T912H70HWiXCPMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRkszM2FMeDZ3bjBtUGxQM1hZZnZRZGFKY0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoYAwQA
TVokMA0GCSqGSIb3DQEBCwUAA4IBAQCyvDNrRl26OnVucGGHhl7M0GCipEJ0gwir
GK0fOUY/ZOovNkgNni/prZ31MjA0tiG+PmEfXZKi8GiYerSvTESsydQCTa6UprF5
A+PVAXctPHJBXQ0o6QtrMfy+7xZHV3dN8g/IIUFfUJqND7m3d+KCbj5vt2r/76CG
+M6Ikj9ofPN/vHP2YtiW9PhW+iZx+yxcueP5hAPMyS7pv3enUFBFha1x7QPVXCqd
GuIBFAffqmfM3pJcm5c2JrGIfBg26nXgjUXKWS9bTmb/WyAmpGE4Ot70FwALkLo0
Cs+7NqftDvQe9Xsk9QiyDV/IuzMSMQLJsU6vXLUfqFRdgJr9g8S+
-----END CERTIFICATE-----
Generated at Wed Mar 25 06:54:19 2026 by rpki-client