Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vvMK97w-tVqNOMPi_SOX_qsVuC0.roa
File: vvMK97w-tVqNOMPi_SOX_qsVuC0.roa (raw, json)
Hash identifier: Stjq7mVw6EuyqUDWfQVzEJaZ0O2fucJfFc7OJk+EvhY=
Subject key identifier: BE:F3:0A:F7:BC:3E:B5:5A:8D:38:C3:E2:FD:23:97:FE:AB:15:B8:2D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C3159CA28AF54DC33F7A1A2BFF4B6FDC1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vvMK97w-tVqNOMPi_SOX_qsVuC0.roa
Signing time: Fri 06 Feb 2026 05:08:13 +0000
ROA not before: Fri 06 Feb 2026 05:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 5.83.142.0/23 maxlen: 23
77.90.15.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:59:ca:28:af:54:dc:33:f7:a1:a2:bf:f4:b6:fd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 05:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bef30af7bc3eb55a8d38c3e2fd2397feab15b82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:b4:6d:6d:e0:f6:db:d5:2b:a2:11:30:98:
9a:ad:90:df:6a:a7:17:4e:a6:4f:44:10:62:6d:40:
67:b6:b0:db:11:7a:08:5e:5e:2f:bc:ab:f3:93:04:
2f:42:6b:f2:5a:a6:dc:82:84:d7:71:78:44:15:c0:
c2:aa:18:d8:59:9c:94:67:91:70:4a:d1:c1:7b:13:
f6:63:96:3d:9a:b7:54:52:b8:c5:77:12:8e:32:da:
14:62:1d:39:83:29:96:b9:21:92:59:3f:77:9c:cd:
a9:37:a8:87:6f:9f:a9:02:fc:bc:4c:40:4f:e3:bf:
e6:29:7b:a7:58:28:e3:2d:f3:7a:6d:7c:69:56:ff:
5e:8f:54:b2:7b:2c:be:97:8a:55:68:2a:30:0f:91:
73:56:84:ef:31:88:37:4b:63:c6:80:af:39:c1:7f:
3e:9a:a0:ed:3a:94:f8:0d:3e:48:eb:d3:bd:a7:8f:
d8:70:90:04:a5:b8:c7:87:66:3d:fd:d1:96:5a:f6:
1d:a5:14:f8:84:82:b3:45:ae:05:66:c2:7e:cc:15:
fd:a5:66:b8:5c:4d:f1:56:31:2e:7a:5e:3b:43:79:
86:05:57:7d:28:e8:1b:4c:b0:8f:ea:2d:d0:4f:d5:
79:2f:9c:18:49:a2:26:9b:35:0d:54:76:93:88:12:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:0A:F7:BC:3E:B5:5A:8D:38:C3:E2:FD:23:97:FE:AB:15:B8:2D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vvMK97w-tVqNOMPi_SOX_qsVuC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/23
77.90.15.0/24
77.90.60.0/23
185.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:13:17:ba:c2:88:87:b6:cf:34:9c:eb:bb:bc:6c:30:86:8b:
24:30:7d:90:98:46:b7:f1:21:10:20:33:5f:b6:c7:3b:e5:3f:
d7:9b:de:79:19:98:04:7b:71:a5:51:4e:8b:61:ff:1b:7e:73:
2f:65:c6:7d:29:8a:ec:b8:7c:51:f9:15:23:b0:27:d6:d2:3e:
a2:23:0c:44:8d:85:51:1f:d6:0b:5d:a2:df:ef:28:42:1f:b7:
70:f3:34:37:fb:c8:da:6c:13:fe:6d:6e:49:e6:5e:33:b5:8a:
08:45:20:91:43:b8:2b:12:dc:5f:be:d1:08:4a:5d:96:09:7b:
7c:7a:02:84:44:4c:89:60:4e:fa:b7:ab:fd:63:7e:bc:f4:7b:
fd:08:b4:0c:4a:37:28:a7:ba:29:49:b5:ba:ff:7f:30:a0:62:
f5:58:35:79:4b:dc:02:2e:15:a1:14:1c:a0:68:04:54:3a:df:
05:29:ee:13:ab:c2:f9:24:ce:c9:de:02:b1:73:10:07:e0:de:
8d:7e:1d:b2:8e:09:9e:42:be:54:ee:04:1b:b3:73:f7:72:20:
48:f5:3d:0e:3c:0f:67:f2:f1:10:75:7f:3e:3a:c8:27:8f:90:
3d:10:79:01:2e:8a:1a:1f:99:d8:6c:7f:41:42:00:66:71:6f:
c4:25:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:13:54 2026 by rpki-client