Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vVXwIsATQf8embjSHWjWtQ5HjD0.roa
File: vVXwIsATQf8embjSHWjWtQ5HjD0.roa (raw, json)
Hash identifier: JXyJD4rZx2gA4z8OfhNoA0QHK7MyGxZHZdIy8CNVufg=
Subject key identifier: BD:55:F0:22:C0:13:41:FF:1E:99:B8:D2:1D:68:D6:B5:0E:47:8C:3D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F59DB322475C0ABB386AC0757ACC637EB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vVXwIsATQf8embjSHWjWtQ5HjD0.roa
Signing time: Mon 13 Jul 2026 05:02:45 +0000
ROA not before: Mon 13 Jul 2026 05:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204223
IP address blocks: 77.90.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:db:32:24:75:c0:ab:b3:86:ac:07:57:ac:c6:37:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 13 05:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd55f022c01341ff1e99b8d21d68d6b50e478c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:d7:56:49:f1:30:ee:1c:ab:83:f1:ca:12:
3e:1b:b0:83:2c:ce:8c:b8:ca:5f:56:96:36:82:9b:
37:03:04:88:05:7f:f6:97:29:eb:84:b2:a3:b5:fb:
52:85:c9:1b:27:9a:47:ee:50:f5:29:10:31:87:6e:
5d:35:18:04:a3:bf:03:e8:0e:f6:ca:a1:c2:e8:5d:
39:ab:95:64:0f:ff:9c:2c:05:b8:7f:01:18:1f:63:
6f:04:bd:30:3f:7f:6e:1d:04:72:75:95:f9:b2:38:
4e:a2:52:b2:c1:d7:ed:e7:7a:b4:a2:c0:b3:ec:f0:
f5:5e:3a:26:0a:7f:ce:be:bc:7e:ab:f8:5b:25:7f:
50:d8:eb:f3:82:d1:7d:44:4c:dd:75:75:94:6b:18:
2b:0a:bb:9b:4c:6a:b8:9f:85:2c:db:d2:94:6c:58:
23:32:42:df:29:ec:e9:a6:0d:54:b8:d1:f3:8f:6d:
e1:b4:19:0a:f0:a2:98:e2:42:40:a2:67:42:16:ba:
db:94:c5:37:8d:78:55:a5:21:f7:44:a3:82:92:64:
31:38:8f:b1:33:a7:f1:30:ca:af:8c:b3:28:3d:29:
79:a8:b6:d4:e4:42:b2:44:f0:71:9a:9a:3e:3b:e9:
2b:34:2e:0f:b8:12:d4:66:22:b5:ce:0d:ae:cb:6e:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:F0:22:C0:13:41:FF:1E:99:B8:D2:1D:68:D6:B5:0E:47:8C:3D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vVXwIsATQf8embjSHWjWtQ5HjD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.26.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c5:ed:52:62:eb:d8:6a:ba:7f:f7:91:8a:a7:25:12:bc:40:
fe:9e:05:94:01:09:49:b7:3d:91:7a:2e:f9:96:83:08:4b:cd:
ff:de:78:eb:d3:22:d4:70:d1:c3:bf:ab:c5:aa:8a:ff:45:22:
da:97:ea:22:49:3c:43:eb:50:1b:04:59:62:00:44:19:93:81:
94:c3:ee:46:71:1c:cd:79:23:8c:ef:03:ea:cb:ca:a2:56:94:
c2:94:b2:00:03:71:39:71:61:b0:5a:d9:5f:77:7d:0a:47:a3:
f6:a5:26:62:d6:b6:0a:0d:48:d9:81:37:33:56:a0:30:c9:af:
23:e6:ef:32:af:90:6b:15:30:56:9c:22:5c:16:ce:4d:96:c2:
dc:0b:aa:f7:57:d7:84:f9:98:f6:49:15:b4:cb:89:b8:e3:f4:
3a:03:c4:a0:98:62:a3:6d:ae:ae:56:45:be:45:c5:7f:17:5b:
65:d8:6b:f7:72:9b:8e:61:97:dc:78:0e:df:24:59:99:be:d7:
cf:38:61:53:b5:89:09:92:7e:24:98:1d:99:6b:e8:e9:f7:1f:
01:d9:0f:ae:db:26:90:28:0b:9d:d9:ff:b7:02:b1:e8:7f:c4:
f4:68:92:77:a4:18:2d:af:04:e4:2c:7f:a4:ce:be:73:3c:54:
83:e2:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client