Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yjRMnzN7tjQy_pigL-uihWH-zOo.roa
File: yjRMnzN7tjQy_pigL-uihWH-zOo.roa (raw, json)
Hash identifier: 8EHgzQqm94Mpiel7trwoxFXK4JG/7GU+M6rL9Goygwo=
Subject key identifier: CA:34:4C:9F:33:7B:B6:34:32:FE:98:A0:2F:EB:A2:85:61:FE:CC:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E438E9270E99F9A8E8A9875F5CF38E605
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yjRMnzN7tjQy_pigL-uihWH-zOo.roa
Signing time: Wed 20 May 2026 04:04:37 +0000
ROA not before: Wed 20 May 2026 04:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150716
IP address blocks: 77.90.48.0/24 maxlen: 24
94.249.242.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 06:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:8e:92:70:e9:9f:9a:8e:8a:98:75:f5:cf:38:e6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 20 04:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca344c9f337bb63432fe98a02feba28561feccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:a7:38:3c:78:31:2d:d6:d7:b5:f3:21:61:
9e:c0:40:a7:5a:58:9c:78:6b:d4:ab:3d:d3:d1:fe:
6e:fb:67:d0:14:f8:2d:00:fb:13:47:f9:d5:e7:90:
13:37:e9:1a:1f:57:e6:4a:54:11:4e:73:25:76:93:
ef:9d:f3:24:a1:77:64:a0:26:4b:d8:30:25:53:d9:
75:6e:15:8b:d7:b9:fe:da:b6:fc:0a:04:b9:fd:34:
51:7f:94:04:e7:dd:88:96:6f:78:93:e9:db:06:4f:
10:a5:78:9d:27:cb:32:a5:18:37:e2:48:47:cc:79:
39:42:1c:97:fc:74:68:e5:4e:7b:17:07:32:54:f3:
e0:9e:98:46:25:52:7f:b3:dc:ba:0a:47:55:c2:62:
a0:aa:0a:aa:36:93:53:be:25:80:f4:5f:72:db:6c:
5e:28:6c:90:b4:0c:af:ca:27:b2:93:ce:99:6c:81:
ea:ba:50:a5:54:2e:a8:59:60:9f:90:06:da:84:cd:
d5:e3:4b:59:e3:d9:2f:9a:a5:c8:8e:ac:38:15:8b:
5c:4b:fe:4c:b4:c4:99:f0:ec:67:2e:e9:a9:1f:1e:
43:9c:7a:d3:74:6b:f6:a9:41:11:eb:30:ab:de:88:
20:d6:68:07:2d:5b:b9:ae:27:3c:fe:9e:46:6e:ed:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:4C:9F:33:7B:B6:34:32:FE:98:A0:2F:EB:A2:85:61:FE:CC:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yjRMnzN7tjQy_pigL-uihWH-zOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.48.0/24
94.249.242.0/24
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:78:a6:30:e6:19:43:87:30:e1:23:85:7e:4d:81:4a:d1:62:
a9:54:c4:72:fa:c6:4f:e1:98:e4:43:46:67:a2:ab:86:ab:e6:
01:ee:19:6a:16:44:2b:5e:f7:f5:5d:c8:8b:4e:7d:33:bc:24:
ff:e8:cc:c7:f1:4f:88:96:40:3c:f8:6c:a9:d2:82:5b:73:0d:
f1:5c:e8:b6:c1:89:71:a4:13:41:81:ba:70:35:3b:8c:72:18:
63:01:76:28:2b:8c:b6:cc:40:9f:a2:fa:28:7c:71:b2:bf:43:
12:f8:20:c3:a0:26:cc:b4:cd:15:aa:eb:b0:15:57:28:72:2c:
6b:40:a2:cd:a3:2f:8b:ae:9e:76:e0:e3:25:53:cb:c3:ba:dd:
f1:05:9f:51:6c:0d:0a:c2:ba:37:a3:45:57:75:56:95:2a:ea:
92:6c:71:b7:8e:56:dc:36:49:70:a0:d8:8c:8a:ec:b9:ee:61:
7f:9f:d8:45:73:7f:50:f8:80:13:4d:77:2a:ea:25:eb:bc:6d:
42:81:d3:a3:05:66:f2:1a:68:d3:5f:8c:27:5d:17:45:f5:45:
6b:51:11:b9:ca:33:61:d3:64:18:75:9d:db:b6:30:50:b8:1f:
2c:d0:f8:c5:e4:c0:5f:ad:d6:e5:6d:99:18:7b:04:2f:36:86:
81:bd:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:14:58 2026 by rpki-client