Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RJwl-JZiRtdfxnrVMQ7B2UMk-n8.roa
File: RJwl-JZiRtdfxnrVMQ7B2UMk-n8.roa (raw, json)
Hash identifier: N7eJaSvE7fQCAVZmJuNbOVnvLXNMRDNQX65M6xijCTI=
Subject key identifier: 44:9C:25:F8:96:62:46:D7:5F:C6:7A:D5:31:0E:C1:D9:43:24:FA:7F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E68EF84E05D1F427FBB73F0FF62EE21D9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RJwl-JZiRtdfxnrVMQ7B2UMk-n8.roa
Signing time: Wed 27 May 2026 10:16:27 +0000
ROA not before: Wed 27 May 2026 10:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197411
IP address blocks: 77.90.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:ef:84:e0:5d:1f:42:7f:bb:73:f0:ff:62:ee:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 27 10:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=449c25f8966246d75fc67ad5310ec1d94324fa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:22:47:a9:2d:08:d0:e2:1a:12:fa:2f:a3:
d5:0d:a3:34:2a:10:59:77:93:ae:b3:7a:cd:b9:7f:
69:a4:51:f8:a9:c9:0d:c6:bc:78:80:18:0f:14:67:
99:1f:09:18:db:ba:ba:be:3a:97:6b:e9:8c:e6:87:
d8:e4:d0:30:ca:eb:06:ba:cb:a3:d3:30:da:a2:69:
f9:59:56:6d:d1:4f:c5:3c:9d:0f:72:02:da:64:48:
52:da:f4:96:94:5e:25:03:04:8b:e6:4b:5c:16:a0:
34:17:fd:6f:6c:78:c0:cb:22:1b:29:08:e9:45:d4:
02:94:d9:07:11:32:eb:73:24:a1:69:8c:d0:64:18:
45:5f:e0:92:7e:82:82:70:a6:c0:3b:de:69:14:ab:
2a:32:a6:e6:96:02:c9:db:80:56:ab:2e:be:29:3e:
6e:ef:2f:7c:c7:2b:c5:ba:1d:d0:a8:69:d7:d6:65:
2a:d2:0d:ff:2b:67:ef:62:a3:d0:74:6e:1b:b0:84:
eb:3d:98:09:5e:4f:5b:c1:fc:b6:37:a8:a3:57:f0:
17:bd:5d:99:e6:e4:9c:0c:2d:c2:2f:09:cf:ad:7c:
f4:47:53:59:af:e9:4a:73:d3:af:84:6f:49:44:bc:
01:98:b6:c5:f3:26:ab:09:85:be:4d:f8:25:2f:04:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:25:F8:96:62:46:D7:5F:C6:7A:D5:31:0E:C1:D9:43:24:FA:7F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RJwl-JZiRtdfxnrVMQ7B2UMk-n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9f:1c:e1:98:3c:55:1a:00:91:76:87:67:01:fd:be:a1:71:
fe:ca:54:44:52:8d:60:b2:f0:f7:2a:b1:78:d2:ee:6c:14:e0:
6c:9b:3a:31:b7:d6:80:a9:f8:6b:00:17:51:cb:5e:49:3f:17:
ac:c9:bf:78:38:c1:d1:a8:6c:b7:d6:a3:4f:81:cf:34:b1:c4:
9f:56:bb:82:01:a2:f5:9b:d3:4a:d3:97:17:48:8a:73:8d:81:
23:52:cb:2a:65:e2:55:9e:ad:ea:9e:36:df:13:ed:70:5c:02:
c9:48:f7:14:d5:6b:3b:41:75:f4:8d:44:88:73:2f:d0:87:9b:
aa:fc:57:4e:5e:3c:42:cc:e1:64:5f:67:05:70:bc:17:57:4b:
58:80:95:91:79:fd:86:8d:df:d8:01:c2:d1:36:ae:2d:7c:cd:
30:d6:e4:9c:72:1d:33:e7:b5:cc:d3:77:99:93:19:73:85:17:
a7:c2:15:06:19:15:5f:1f:28:89:50:32:de:63:3a:28:ca:29:
40:b4:43:3b:2a:04:e2:1f:89:9c:6c:6c:79:80:6f:6d:b5:9a:
3c:2d:68:8b:22:d1:72:f2:e2:6d:4c:26:c4:5b:80:c8:61:4d:
98:19:c2:62:a8:bf:16:dd:55:28:ee:e0:a0:1f:a7:c0:e4:0a:
6a:b2:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:19 2026 by rpki-client