Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V2HkK_UaG16CB5zFhNiKsxggjAI.roa
File: V2HkK_UaG16CB5zFhNiKsxggjAI.roa (raw, json)
Hash identifier: WsKJZmOeVI7gUHmRYbRYDS/w7EScT8XI2ZMLoz0povI=
Subject key identifier: 57:61:E4:2B:F5:1A:1B:5E:82:07:9C:C5:84:D8:8A:B3:18:20:8C:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A14A42D000299211646F54916C4884C5E9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V2HkK_UaG16CB5zFhNiKsxggjAI.roa
Signing time: Sat 17 Oct 2026 14:27:34 +0000
ROA not before: Sat 17 Oct 2026 14:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:42:d0:00:29:92:11:64:6f:54:91:6c:48:84:c5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 14:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5761e42bf51a1b5e82079cc584d88ab318208c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:46:f2:29:a3:ce:60:e5:4a:1e:da:31:82:
7f:da:2f:4f:2a:1e:48:3a:60:a5:cd:d4:5d:61:9c:
ea:cb:fa:10:e9:93:f7:48:c1:4d:c3:97:56:da:e5:
48:bc:80:e7:f3:ad:cf:ca:c5:d9:3a:aa:cd:7f:60:
ee:d0:b7:e7:d2:8d:50:33:20:d2:11:4c:46:28:4d:
5c:43:23:0f:91:84:b2:b4:b0:b5:5a:15:26:89:8c:
eb:0e:90:69:ad:a7:75:64:87:06:9e:61:41:53:75:
54:25:df:aa:89:33:ec:b0:dc:48:8b:88:8d:13:9b:
6f:b0:30:c5:ed:19:dd:65:7a:98:b1:06:89:1b:1d:
8c:b0:f8:9e:ab:32:18:ee:17:01:95:4c:6f:20:2a:
8a:cd:ff:92:16:c8:41:a1:bf:d8:d1:b8:d1:3c:d1:
7c:34:cf:c6:dc:06:ef:c8:67:20:4b:10:d5:7b:c9:
88:0e:a8:8f:8b:53:f1:d5:4e:33:79:62:a2:e8:95:
15:c3:db:96:58:7c:84:eb:ef:5a:a5:a2:bb:67:1d:
96:30:40:ee:e1:f1:08:e0:fa:14:84:0e:ce:45:7d:
f9:03:54:8a:6e:c8:98:e0:b5:9e:4c:d1:af:4f:74:
68:f0:5b:de:51:7b:73:be:2a:ad:47:20:22:a2:3d:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:E4:2B:F5:1A:1B:5E:82:07:9C:C5:84:D8:8A:B3:18:20:8C:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V2HkK_UaG16CB5zFhNiKsxggjAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9e:a0:43:2e:39:82:7e:c3:87:65:84:ed:39:37:c6:b7:46:
7d:95:27:db:51:8d:0d:97:f7:1a:17:d2:be:1b:5c:26:64:34:
f4:28:76:2e:fc:2f:5f:b7:28:dd:63:c4:40:f6:9b:3d:24:45:
77:3b:65:22:d3:f0:f3:14:16:a5:ea:b8:b9:00:b0:fa:ba:4d:
86:60:9c:22:3c:99:f0:9b:79:0b:a9:1d:57:02:15:88:5c:38:
73:a7:06:61:af:68:29:60:b4:45:6f:9b:57:8f:51:06:31:63:
f1:7c:5d:93:6f:f4:79:6c:ff:4c:2f:73:69:b1:7c:2b:27:8f:
64:6b:a4:d1:fe:be:41:58:dd:ee:a2:8c:84:3d:df:45:1c:88:
83:49:2f:f2:84:c3:d5:38:06:91:89:2e:ce:8f:28:66:62:5b:
14:21:31:b4:cd:6a:f5:5d:b8:b3:d3:1f:49:52:ec:e4:13:42:
ab:a6:ab:01:ad:4a:46:95:ae:34:58:66:71:5b:47:8c:a8:15:
e8:62:3b:c4:b6:93:a0:42:63:02:40:9a:c3:4e:33:b7:4c:ff:
11:fb:a8:77:60:f9:e2:57:ea:83:26:14:3d:39:14:4f:54:ab:
7a:2e:5b:7a:ad:f7:6a:38:3c:5d:9b:60:43:92:1d:b3:1b:5a:
46:90:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:33:34 2026 by rpki-client