Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sby5Ux1n7b4n3JW_4FQKQm1dQFk.roa
File: Sby5Ux1n7b4n3JW_4FQKQm1dQFk.roa (raw, json)
Hash identifier: Bb0ndRnmeoFfPxPdA2LS51B2VjRDETtjwTabnzXcov4=
Subject key identifier: 49:BC:B9:53:1D:67:ED:BE:27:DC:95:BF:E0:54:0A:42:6D:5D:40:59
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FE9FFA0848D65A522745B70C82BD312E1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sby5Ux1n7b4n3JW_4FQKQm1dQFk.roa
Signing time: Mon 10 Aug 2026 04:47:51 +0000
ROA not before: Mon 10 Aug 2026 04:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23506
IP address blocks: 77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e9:ff:a0:84:8d:65:a5:22:74:5b:70:c8:2b:d3:12:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 10 04:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49bcb9531d67edbe27dc95bfe0540a426d5d4059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:a3:d2:8c:14:56:f2:04:a5:02:74:2f:3e:
58:69:40:58:ba:2f:35:9f:bd:b4:5d:43:66:ea:21:
de:17:9c:81:32:fd:1a:00:63:29:87:45:f6:c5:3e:
e4:8a:f1:fa:37:3c:65:c3:ad:fc:be:9b:93:b2:65:
9f:c2:43:b4:55:31:15:05:0a:b5:a1:08:23:58:d9:
89:e6:58:9f:3f:6b:bd:58:61:5c:4b:30:c0:7a:dc:
ed:65:45:68:23:a5:28:40:e0:2a:ca:64:fa:98:14:
50:da:f1:e7:e6:93:cb:ff:c4:b2:0c:af:8f:58:55:
e7:e5:e6:85:28:13:d9:aa:4b:e8:47:09:8f:d9:ef:
68:57:6d:08:56:a2:7f:b2:01:08:43:76:a0:ea:c6:
ca:3d:23:17:a2:17:79:01:94:e0:9d:15:7d:4d:cb:
b6:f7:b3:f8:71:39:d8:02:90:83:37:38:0c:f3:83:
5d:e5:79:67:24:63:44:94:d9:e2:a9:f5:e0:68:0d:
5b:48:f5:7a:f6:a8:3a:1e:ca:b7:8d:cf:44:60:18:
e7:1d:b5:5f:a7:15:31:be:4d:e7:9c:e4:74:d4:ce:
9d:c3:4e:b9:cc:20:0d:4f:8e:88:25:de:71:0b:8f:
03:0e:87:4c:4d:e8:e6:44:b8:b1:56:8c:de:7e:6f:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:B9:53:1D:67:ED:BE:27:DC:95:BF:E0:54:0A:42:6D:5D:40:59
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sby5Ux1n7b4n3JW_4FQKQm1dQFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
57:23:44:07:81:fb:d3:4b:ae:c5:2b:6b:77:39:ba:06:56:52:
b6:dd:f5:25:14:43:77:20:8e:5a:0d:44:54:3a:e2:34:12:ab:
f3:5b:9f:63:de:85:e5:1c:6a:d9:17:76:b6:ee:b3:24:8c:2a:
09:09:39:a5:0a:6f:41:7f:96:fd:55:e7:f7:a8:ad:76:8d:e2:
a0:36:6a:c5:e5:fd:1e:35:97:5e:95:b4:b7:4f:d2:4b:55:0d:
85:28:d7:5d:a2:ee:b3:bc:f9:da:e7:7c:37:7c:79:8c:91:d1:
d3:79:ab:82:c9:a3:76:00:1d:34:f5:29:c5:19:da:5c:ff:18:
de:ad:99:c6:94:c8:14:aa:bd:15:f8:06:8f:db:4b:0a:30:5f:
f3:2f:cd:1a:83:84:f3:20:ee:f0:9e:53:42:d1:0b:a2:95:cb:
29:04:7b:a1:9b:8b:cb:8e:9d:f8:36:0b:cd:ed:87:71:03:75:
10:8f:17:ff:13:8f:85:04:bd:b1:d0:81:bf:bc:67:be:25:98:
21:4f:04:fb:ee:86:e1:5b:59:c6:28:2d:33:4f:11:91:d0:dd:
13:5a:23:8d:49:6b:bf:d3:b5:e5:98:70:5d:59:dc:18:c3:18:
73:4f:74:f3:8c:6e:d1:a8:d2:81:33:71:6f:b5:d8:7d:83:c8:
b9:d1:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:43 2026 by rpki-client