Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uHHSbvG8OzKTnZXdTLj4aA3AC4A.roa
File: uHHSbvG8OzKTnZXdTLj4aA3AC4A.roa (raw, json)
Hash identifier: 4uGnK8MyUsndsjpqZ4ttoZUQfzEh8SxmzM3V/7ZL1Yk=
Subject key identifier: B8:71:D2:6E:F1:BC:3B:32:93:9D:95:DD:4C:B8:F8:68:0D:C0:0B:80
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A00B9F0E85A77CEDE37D5B82A6A6863DFE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uHHSbvG8OzKTnZXdTLj4aA3AC4A.roa
Signing time: Sun 16 Aug 2026 17:29:28 +0000
ROA not before: Sun 16 Aug 2026 17:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 77.90.62.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:9f:0e:85:a7:7c:ed:e3:7d:5b:82:a6:a6:86:3d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 16 17:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b871d26ef1bc3b32939d95dd4cb8f8680dc00b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:1e:63:35:4c:68:8d:1b:2e:ee:45:dd:26:
fb:12:fe:5b:8d:34:ad:98:57:9a:df:7b:3b:79:c7:
f3:88:1d:25:19:8b:1a:7a:ff:da:ec:22:01:32:03:
1b:ef:3d:d9:00:f1:1e:80:69:0f:07:08:3b:aa:33:
da:ae:8e:3f:5b:54:a0:22:d7:2b:ca:22:cf:83:5c:
3a:1e:d3:ae:83:f6:e9:29:a8:14:b1:4a:eb:45:65:
44:4e:20:19:b0:bc:c0:db:42:13:33:bd:92:ac:bd:
03:05:75:ae:c3:60:1e:86:a3:c1:79:c3:b1:4a:98:
3d:b3:52:f6:ba:d3:72:40:a4:5d:4c:8f:e0:5a:7a:
52:e8:a1:b3:69:01:51:4c:e1:5c:93:8b:c2:93:e2:
2e:0e:63:09:d1:24:1e:53:cb:63:c8:d9:6d:cb:ee:
04:19:fa:df:dc:57:47:d3:91:0e:ba:82:27:38:cc:
94:6d:56:7e:b2:96:b4:c0:29:a6:68:5a:40:52:39:
c3:7a:18:9e:62:6b:df:d1:ff:a9:13:4d:0a:13:ce:
87:e0:c0:d3:20:e7:61:d9:fe:9c:f0:f7:ec:96:eb:
9d:a3:6c:39:5e:58:d9:3e:1b:8d:7d:28:60:1e:08:
7f:49:0b:51:f6:34:34:35:19:1a:9f:55:b6:a4:68:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:D2:6E:F1:BC:3B:32:93:9D:95:DD:4C:B8:F8:68:0D:C0:0B:80
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uHHSbvG8OzKTnZXdTLj4aA3AC4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.62.0/24
89.144.61.0/24
94.249.148.0/24
94.249.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c8:d7:7e:60:a3:b0:d0:38:a0:1e:22:76:57:28:dd:09:4a:
b1:bd:97:f6:9e:0a:84:40:05:79:b8:f2:2c:88:e4:6f:0f:8e:
74:f5:f0:86:61:b6:6f:15:dd:57:41:d7:95:c5:b9:aa:dd:89:
9b:22:77:4a:47:a9:0a:e3:56:03:17:bd:8b:ce:a3:e8:c1:c1:
e3:05:90:da:65:50:51:23:fa:54:d8:95:e3:96:18:77:7c:45:
16:a7:c0:70:1d:58:44:ea:01:40:b1:95:f2:52:95:24:ad:5b:
bf:ae:e9:cc:cf:aa:df:de:90:ca:81:d3:ce:fe:01:53:c6:22:
ed:ac:9e:30:08:33:1b:f0:5e:6f:19:bf:ce:a1:a0:2a:d0:ba:
61:05:22:83:8a:e0:7c:9d:11:88:4c:87:16:00:f2:00:66:dc:
f0:82:fb:72:d3:cd:4b:be:98:97:fb:32:24:6f:72:10:ea:7f:
59:70:f0:20:b4:3f:6b:de:9c:d8:53:b9:b0:db:45:ae:3c:e1:
87:06:5f:02:d3:17:c4:3d:bc:5b:d4:6d:99:f1:cf:ee:c2:64:
d4:25:01:e6:33:cc:8e:31:bf:f7:9d:94:84:9c:17:b5:38:26:
59:1d:99:23:e3:5d:4c:a8:c8:09:ff:e3:8d:28:be:8b:51:c4:
41:bf:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:38 2026 by rpki-client