Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jPVMcB9CmuBF0gli0SMoxgJz-nQ.roa
File: jPVMcB9CmuBF0gli0SMoxgJz-nQ.roa (raw, json)
Hash identifier: g3KKkSfp9VBCgIor8fGSSM+9pyDsL+ar4pB44Bn9u4w=
Subject key identifier: 8C:F5:4C:70:1F:42:9A:E0:45:D2:09:62:D1:23:28:C6:02:73:FA:74
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E3E68365F60E699612C80CD28C9FFAE75
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jPVMcB9CmuBF0gli0SMoxgJz-nQ.roa
Signing time: Tue 19 May 2026 04:04:37 +0000
ROA not before: Tue 19 May 2026 04:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.17.0/24 maxlen: 24
2a02:2fc0:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:68:36:5f:60:e6:99:61:2c:80:cd:28:c9:ff:ae:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 19 04:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cf54c701f429ae045d20962d12328c60273fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:35:2f:96:51:2c:fc:c8:41:bd:20:72:d7:
46:a4:d9:79:3b:c9:c5:d9:41:99:8b:d2:b8:5e:2c:
76:9e:36:fd:97:a0:7a:97:05:79:fb:b0:e8:97:c5:
cc:bf:75:13:90:a0:e9:4e:75:ca:28:d7:e4:61:f1:
53:06:67:6a:b3:3e:60:a2:e6:21:fb:be:ae:d1:e1:
64:48:62:07:18:64:f9:df:3c:29:04:77:8f:0f:a9:
71:d8:76:78:06:1c:8a:7d:d1:0f:52:1d:28:f6:04:
6f:3f:05:f6:34:49:19:e0:f3:53:22:5d:0e:b6:43:
4f:81:e4:fa:0b:e9:db:75:7f:11:05:6b:c1:ac:0c:
99:71:b2:63:9d:cf:44:a2:7a:1b:90:43:06:e5:a5:
01:62:45:15:12:cc:1e:f4:a0:3a:62:c6:b7:74:2a:
8b:d4:3c:d1:97:16:54:18:c4:11:f7:dd:99:70:47:
43:c2:d7:dc:db:5e:ad:97:15:25:55:ac:20:01:0c:
d8:e6:a4:be:63:2d:d5:61:e4:b9:da:a0:53:e6:9e:
4c:fb:53:d3:92:d6:0f:2d:d5:10:6d:fd:73:6c:6f:
f2:07:f6:be:a4:2f:e1:4f:61:d7:eb:21:47:ec:8e:
3e:69:b2:8f:a2:0f:9a:de:38:e4:9d:4f:17:9a:ed:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:4C:70:1F:42:9A:E0:45:D2:09:62:D1:23:28:C6:02:73:FA:74
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jPVMcB9CmuBF0gli0SMoxgJz-nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.17.0/24
IPv6:
2a02:2fc0:1a::/48
Signature Algorithm: sha256WithRSAEncryption
2f:91:03:84:ce:29:9c:68:47:a5:14:fe:36:a7:7f:96:7f:5e:
5e:54:6f:38:70:38:6b:ff:ec:e8:8f:a7:ba:6f:a4:70:26:20:
08:22:2b:86:5a:be:08:45:ea:df:bb:99:a5:1e:0e:dd:a3:56:
e8:0c:d9:53:11:d4:ef:35:f9:6b:08:42:2e:9d:0e:26:b8:12:
32:97:8c:aa:47:37:87:9d:0f:fc:06:55:6a:5a:86:34:47:be:
70:2e:75:a1:bd:5b:ca:18:e0:53:a7:b3:63:26:50:5d:5e:bc:
c4:77:7f:06:8e:ab:8c:aa:af:2e:64:ab:3b:06:4d:e0:7f:a0:
de:de:ab:0d:1b:09:c4:ae:28:f8:6b:a9:01:7f:d3:b1:6f:24:
a8:79:3d:4f:51:ba:7e:45:2f:63:e6:f3:19:a4:58:65:9c:d1:
bd:34:01:35:54:26:8b:2d:b0:89:9b:0a:93:f4:f5:e5:75:7a:
f9:a6:5a:d0:6a:02:5f:e6:c5:19:fd:04:d6:ed:37:31:30:36:
7e:a0:53:ac:36:25:26:19:0c:74:02:d6:c6:c0:38:0b:34:00:
7b:d2:76:47:eb:3d:68:58:3e:21:9f:a8:ec:de:b4:d1:19:f6:
78:82:0e:c3:2c:9d:8a:df:a9:e5:99:b2:57:c2:5b:ad:a6:cc:
c1:00:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:27 2026 by rpki-client