Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hYNe-OrljDwTcm-tFu4rfvFYeb0.roa
File: hYNe-OrljDwTcm-tFu4rfvFYeb0.roa (raw, json)
Hash identifier: ZLNECduL2syXgMjkiL4+JS4X2EKdGeWHR4mSDs+3ilk=
Subject key identifier: 85:83:5E:F8:EA:E5:8C:3C:13:72:6F:AD:16:EE:2B:7E:F1:58:79:BD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0FBE423903A80491516C46B1A079694DA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hYNe-OrljDwTcm-tFu4rfvFYeb0.roa
Signing time: Fri 02 Oct 2026 09:13:47 +0000
ROA not before: Fri 02 Oct 2026 09:13:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:e4:23:90:3a:80:49:15:16:c4:6b:1a:07:96:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 09:13:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85835ef8eae58c3c13726fad16ee2b7ef15879bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:cd:f3:66:92:47:b4:cd:31:db:d4:7d:dd:
7d:93:ff:fd:bf:3f:dd:2a:0a:d3:a3:a7:ff:0e:74:
d0:e9:66:c2:ea:87:ef:1c:89:09:1b:4f:f7:50:e1:
ff:69:76:22:ed:7a:5f:35:0a:03:85:00:c1:e7:a1:
e3:66:ae:83:e3:43:18:a3:06:8d:3b:ae:ec:59:de:
b0:49:68:b9:2c:0b:63:e3:83:80:65:69:61:05:68:
fc:2a:5d:60:ef:c8:07:53:c4:bf:58:5a:9f:60:49:
65:26:8d:6c:87:9d:ad:6c:d9:b9:b2:bc:11:8c:3f:
eb:23:73:e5:4b:c4:02:0f:c2:9a:35:d2:c2:0d:88:
07:78:89:81:b1:8e:cf:a3:bf:dc:aa:4a:67:88:1a:
6e:ed:d7:a6:fc:b7:c8:e0:fb:60:88:32:34:5d:45:
f7:58:3e:e0:9c:e0:03:87:db:1f:a3:cf:97:b4:12:
01:5a:57:44:f3:2b:95:72:93:0b:bf:53:9f:16:9d:
38:fb:c7:14:4f:2c:3c:08:1d:e8:75:ce:59:bb:6f:
f6:ad:e1:61:d1:ad:17:7d:2a:77:7b:99:e5:c7:da:
48:28:76:53:93:78:49:c3:2d:47:52:7d:f1:63:d9:
bb:2d:33:d8:e1:44:85:bc:11:75:20:80:9c:b6:c3:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:5E:F8:EA:E5:8C:3C:13:72:6F:AD:16:EE:2B:7E:F1:58:79:BD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hYNe-OrljDwTcm-tFu4rfvFYeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:61:50:29:ab:88:e1:b7:2b:0c:c7:5f:3e:09:eb:03:04:7e:
ec:6a:41:ba:55:c7:19:58:69:7b:eb:76:91:9f:48:fa:1d:16:
de:50:f3:c0:02:65:a5:99:1e:68:0f:49:05:4d:77:1e:4e:36:
f7:5a:4c:06:71:20:b5:61:10:c9:1c:a1:45:7d:84:2f:97:e5:
68:d6:46:7c:1c:49:c8:b5:cd:55:15:49:fc:7b:15:62:dd:be:
b7:1f:01:7d:b9:9f:2a:5f:64:49:14:33:ee:63:db:3d:c7:bf:
ba:bb:f4:91:b3:59:71:89:8b:50:1d:1a:10:30:41:7e:89:c8:
1e:8a:bb:e2:9c:e0:69:92:bd:37:76:04:44:2d:00:a8:b0:f4:
31:18:eb:d9:46:c6:12:c0:c4:d0:8c:77:e4:aa:06:ef:a0:76:
91:d0:d9:19:b1:5b:a1:bd:cf:b2:e4:a1:c5:f3:4a:69:bf:1b:
85:5c:84:d4:d3:00:5d:eb:d8:da:33:78:1a:a7:a5:ef:e1:30:
a0:b5:28:4a:08:27:c6:ec:af:52:d2:ce:a6:87:44:d4:ae:54:
eb:d8:44:91:85:37:32:5d:92:40:65:33:3a:2b:eb:64:20:be:
78:ee:37:cf:35:3f:39:c7:f7:99:a4:da:8c:5d:70:1f:8e:1e:
88:b9:7b:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaD75COQOoBJFRbEaxoHlpTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDAyMDkxMzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTgzNWVmOGVhZTU4YzNjMTM3MjZmYWQxNmVlMmI3ZWYxNTg3OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj/N82aSR7TNMdvUfd19k//9vz/d
KgrTo6f/DnTQ6WbC6ofvHIkJG0/3UOH/aXYi7XpfNQoDhQDB56HjZq6D40MYowaN
O67sWd6wSWi5LAtj44OAZWlhBWj8Kl1g78gHU8S/WFqfYEllJo1sh52tbNm5srwR
jD/rI3PlS8QCD8KaNdLCDYgHeImBsY7Po7/cqkpniBpu7dem/LfI4PtgiDI0XUX3
WD7gnOADh9sfo8+XtBIBWldE8yuVcpMLv1OfFp04+8cUTyw8CB3odc5Zu2/2reFh
0a0XfSp3e5nlx9pIKHZTk3hJwy1HUn3xY9m7LTPY4USFvBF1IICctsNGowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIWDXvjq5Yw8E3JvrRbuK37xWHm9MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaFlOZS1PcmxqRHdUY20tdEZ1NHJmdkZZZWIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVoKAwQA
TVoyMA0GCSqGSIb3DQEBCwUAA4IBAQAPYVApq4jhtysMx18+CesDBH7sakG6VccZ
WGl763aRn0j6HRbeUPPAAmWlmR5oD0kFTXceTjb3WkwGcSC1YRDJHKFFfYQvl+Vo
1kZ8HEnItc1VFUn8exVi3b63HwF9uZ8qX2RJFDPuY9s9x7+6u/SRs1lxiYtQHRoQ
MEF+icgeirvinOBpkr03dgRELQCosPQxGOvZRsYSwMTQjHfkqgbvoHaR0NkZsVuh
vc+y5KHF80ppvxuFXITU0wBd69jaM3gap6Xv4TCgtShKCCfG7K9S0s6mh0TUrlTr
2ESRhTcyXZJAZTM6K+tkIL547jfPNT85x/eZpNqMXXAfjh6IuXsd
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:23 2026 by rpki-client