Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qDYQuaYygO39c2uAAe6BpNxJN94.roa
File: qDYQuaYygO39c2uAAe6BpNxJN94.roa (raw, json)
Hash identifier: rOdanf6X3PXLdj+pTLdZDSr4t/WjM3/fWR6D5xZb2+o=
Subject key identifier: A8:36:10:B9:A6:32:80:ED:FD:73:6B:80:01:EE:81:A4:DC:49:37:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F3247F6E028D2CDE75B2F3E532D5DA961
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qDYQuaYygO39c2uAAe6BpNxJN94.roa
Signing time: Sun 05 Jul 2026 12:36:44 +0000
ROA not before: Sun 05 Jul 2026 12:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44103
IP address blocks: 77.90.23.0/24 maxlen: 24
178.18.152.0/22 maxlen: 32
178.18.154.0/24 maxlen: 24
178.18.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:47:f6:e0:28:d2:cd:e7:5b:2f:3e:53:2d:5d:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 5 12:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a83610b9a63280edfd736b8001ee81a4dc4937de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:e4:e8:ec:78:62:38:0d:fb:bd:e5:4e:12:
67:9a:64:44:05:fd:36:5e:f3:02:23:e6:cd:bc:97:
5f:f6:09:60:11:db:a0:de:01:2e:31:da:6f:27:06:
45:56:a9:ae:bb:f1:e2:57:e8:68:a9:04:b4:46:77:
c1:47:2f:83:e2:c6:40:52:09:a7:04:a2:99:b4:dc:
ee:51:f4:a1:73:83:a7:d3:86:26:e7:14:d7:ae:9d:
53:11:8a:8b:e5:0a:65:d6:5d:e2:a4:b2:04:d4:12:
31:12:61:c0:e1:71:85:5b:03:b8:ac:e1:05:6d:55:
ae:26:ac:1b:af:98:80:2d:60:52:c0:53:22:8e:5d:
e9:a3:fa:36:85:1a:74:09:18:ab:7c:16:e3:7f:7b:
07:8c:a5:6d:ba:a5:b4:09:3e:72:a7:a7:4e:f3:80:
8d:b2:ad:9b:da:eb:d4:cc:ae:ae:5f:2d:74:68:7a:
d6:21:80:d2:8d:b2:fa:95:5f:e1:39:04:00:23:72:
48:15:b8:37:02:ea:34:64:a6:c6:39:3f:33:f7:f0:
85:ea:15:6d:08:e0:a6:34:a8:3c:00:de:2c:b1:60:
87:4c:b0:ae:87:50:ec:cc:bf:8a:aa:51:9b:b1:c5:
53:08:de:2b:a6:e6:52:25:42:7f:38:98:f6:f8:95:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:10:B9:A6:32:80:ED:FD:73:6B:80:01:EE:81:A4:DC:49:37:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qDYQuaYygO39c2uAAe6BpNxJN94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.23.0/24
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
da:96:54:b4:f3:c4:b4:92:98:d3:66:32:03:f6:10:a1:b5:91:
54:43:b2:c6:b4:42:63:17:f7:5a:d5:e1:e7:66:e5:e0:4b:8b:
e8:cd:bd:ff:6d:10:87:94:88:a4:3d:56:6e:fb:3c:17:22:bf:
6e:06:28:04:5e:fa:76:6b:e1:db:ef:74:5d:5b:02:69:50:5e:
80:0c:e3:77:b1:da:f9:4d:ce:9a:49:18:1b:d9:11:d7:f8:57:
51:22:b7:a1:55:a0:12:ad:69:9a:d8:31:1c:35:90:17:e4:94:
cd:bc:bb:8b:e6:c2:b8:74:9c:5e:29:d8:5a:23:88:d7:74:a5:
21:9a:c0:2d:c8:9e:fa:87:3b:e9:18:bf:40:b2:1b:c5:72:2d:
65:94:96:be:bf:be:b2:7d:4e:59:05:39:a5:61:0b:d4:01:0b:
7c:10:81:7e:39:cd:bf:ec:71:13:e0:fc:98:6b:28:4a:a5:83:
26:2f:25:9d:bc:5a:67:dc:6b:0c:65:5a:e0:f9:8d:27:89:51:
2c:86:ac:06:40:1a:3e:4f:39:3e:a6:0b:31:7e:be:72:2e:83:
92:ff:d9:d5:d2:4e:8a:22:f6:67:80:53:a3:d7:41:0a:b8:0c:
82:1a:e2:23:24:88:6e:50:d6:a8:56:e0:8e:70:16:29:ff:51:
88:68:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client