Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l1BXmGEK7INQYgLRkn-_QsHkB_s.roa
File: l1BXmGEK7INQYgLRkn-_QsHkB_s.roa (raw, json)
Hash identifier: 1YxCQze67H3yohnBwrG0X4mfUsnjGKsS7mApKUVsOZ4=
Subject key identifier: 97:50:57:98:61:0A:EC:83:50:62:02:D1:92:7F:BF:42:C1:E4:07:FB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F2EAC3160997A40B66CB44C3F4A0745FE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l1BXmGEK7INQYgLRkn-_QsHkB_s.roa
Signing time: Sat 04 Jul 2026 19:47:44 +0000
ROA not before: Sat 04 Jul 2026 19:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200461
IP address blocks: 77.90.44.0/24 maxlen: 24
178.18.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:ac:31:60:99:7a:40:b6:6c:b4:4c:3f:4a:07:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 4 19:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97505798610aec83506202d1927fbf42c1e407fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:aa:72:57:b9:93:b2:44:ee:7f:a7:56:30:
9b:75:ac:13:57:28:5c:d1:99:15:fb:a8:b9:e2:dc:
6f:6d:a9:21:93:6d:df:fa:37:21:68:9d:aa:f7:6f:
1c:f0:19:77:4c:1c:a0:c4:6f:37:d9:a4:00:d0:bc:
3c:d1:36:49:c6:25:5f:b0:09:29:de:b8:b9:f8:f2:
c6:e4:a0:14:67:5e:fb:29:27:3b:c0:7b:ed:82:3c:
f3:01:11:05:7e:b6:cf:65:9c:16:ba:3c:41:7c:7a:
fd:22:0a:a7:c1:ef:d9:48:34:0c:2c:34:f1:3f:30:
ad:46:4d:08:2f:99:32:50:1a:a9:c0:bc:6d:4e:39:
99:03:fa:11:55:ef:da:92:e8:91:70:c4:af:30:1b:
29:09:a7:5a:b8:a1:3f:04:22:88:3a:49:19:62:2f:
a7:b8:0f:80:35:44:50:9c:24:38:3d:b5:5d:11:50:
37:69:12:d9:41:d2:3c:4a:98:5d:6d:00:c4:9d:2b:
d5:41:91:f5:01:0f:40:21:d2:ab:5a:52:a1:81:04:
10:ac:bf:a1:20:52:07:a7:13:bb:ef:6c:7e:6e:94:
19:b3:8d:54:24:be:33:27:40:1a:58:4c:7a:57:a3:
06:c3:2e:c8:7c:da:66:5c:f3:d8:0d:f5:72:23:0a:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:57:98:61:0A:EC:83:50:62:02:D1:92:7F:BF:42:C1:E4:07:FB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l1BXmGEK7INQYgLRkn-_QsHkB_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.44.0/24
178.18.148.0/24
Signature Algorithm: sha256WithRSAEncryption
37:93:d9:c7:15:88:31:4d:b7:d3:38:ef:8d:4f:a9:de:32:b8:
6b:db:a9:7d:7f:c3:5e:79:43:d4:55:ab:6e:9e:19:21:52:f3:
5f:1b:f0:84:74:24:40:70:c9:ee:a8:4e:f2:09:ad:d1:d2:37:
d4:62:dc:97:ff:3c:b6:3f:04:23:16:a2:84:ca:f6:61:d3:92:
b2:fd:05:69:aa:ab:84:d2:60:9b:99:88:59:25:85:7e:ad:1e:
ef:7e:38:7a:26:b3:6d:db:18:24:4e:b4:4e:28:51:ec:d6:c1:
1c:a4:14:b9:be:a4:10:ba:bd:90:97:ec:3e:0a:a3:b1:0b:4a:
0f:cb:dc:c2:29:ab:9d:44:13:6e:d6:e9:92:6e:e5:db:c3:f0:
d3:24:bb:0c:3b:17:75:5c:c9:86:63:1d:4e:f7:d1:76:f7:6b:
ab:ce:9f:79:37:60:39:26:8c:6f:6d:9c:90:56:e7:9d:f6:1f:
4b:70:1e:d9:12:e4:10:21:bb:2a:b7:0e:36:45:a0:7d:dd:33:
00:c7:45:2c:c3:28:4c:50:dd:59:e6:db:58:4e:e3:36:e2:d4:
a9:c3:1a:0f:de:cb:9e:31:f9:ae:2a:37:87:79:8b:85:3f:83:
df:1e:a5:63:89:18:17:27:e4:e5:47:ad:d1:c4:14:31:2a:c2:
00:26:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:16 2026 by rpki-client