Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zhCWy6WTqLptnHID2IsqZBzMxDU.roa
File: zhCWy6WTqLptnHID2IsqZBzMxDU.roa (raw, json)
Hash identifier: ti1VajDASlYEO/Viir7ybIg6oF2arv0bHBvr+P+FRdk=
Subject key identifier: CE:10:96:CB:A5:93:A8:BA:6D:9C:72:03:D8:8B:2A:64:1C:CC:C4:35
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F70EE57628CF0AF94B188E6947D042F47
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zhCWy6WTqLptnHID2IsqZBzMxDU.roa
Signing time: Fri 17 Jul 2026 16:34:55 +0000
ROA not before: Fri 17 Jul 2026 16:34:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:ee:57:62:8c:f0:af:94:b1:88:e6:94:7d:04:2f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 17 16:34:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce1096cba593a8ba6d9c7203d88b2a641cccc435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:d9:9b:b7:ef:ee:5b:d6:9b:85:ca:e7:fe:
d7:f1:1d:7d:f8:b5:76:a6:37:34:bc:ac:d0:41:02:
7a:9c:57:fb:0c:78:f7:40:ac:6a:76:7b:98:42:d5:
9e:1e:7e:9f:7d:e2:a0:d3:9d:f9:66:a8:fc:f3:3e:
5c:00:d9:77:df:0a:18:c3:6a:f9:ed:88:84:3c:b4:
c5:76:c9:ec:90:b2:6b:7b:dd:d8:e4:39:eb:ae:5a:
07:b0:10:9e:5c:26:76:b1:e0:6c:ef:d2:f4:06:18:
11:50:d7:28:b2:ef:fa:90:8a:31:cb:0d:0c:21:1a:
84:7a:e8:a4:da:cc:26:51:d5:b8:20:58:81:45:9f:
b9:3e:46:02:e3:75:88:ed:71:37:2e:3a:49:df:f9:
ea:3e:6e:75:5d:48:5d:0b:eb:e6:98:45:8e:36:d7:
b9:0d:ff:44:27:57:8a:4a:05:3e:79:57:27:4b:34:
26:40:df:05:ab:b5:ce:e6:47:69:44:5b:d6:9b:58:
2c:ec:3e:aa:d9:57:37:af:b3:0a:0b:b0:8b:08:7d:
4b:6b:74:20:97:5a:cd:ac:a8:2c:fa:aa:6f:62:88:
76:2a:27:27:ba:c0:30:a2:0a:b0:72:00:3e:12:a3:
d7:03:26:0a:8b:5d:bc:a5:0e:ab:14:8a:6b:cf:74:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:96:CB:A5:93:A8:BA:6D:9C:72:03:D8:8B:2A:64:1C:CC:C4:35
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zhCWy6WTqLptnHID2IsqZBzMxDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
07:39:0d:01:fb:c7:18:19:8c:93:00:2a:d1:d6:30:bf:75:02:
84:5a:37:7d:be:a2:59:62:68:5f:05:2f:e3:93:e7:40:fb:05:
bd:8d:b1:d2:17:e0:c2:85:9e:f3:15:aa:52:53:be:a2:10:de:
1f:a9:80:60:85:fd:a5:d4:8f:60:2a:0f:03:e9:bf:68:15:a0:
24:66:34:17:15:84:4f:98:fe:d4:30:fb:7e:bd:a6:04:63:85:
41:ed:eb:81:81:59:e6:5d:44:dd:30:fb:43:4c:48:af:f8:39:
bb:3a:34:d3:33:d9:61:38:b4:cb:e2:39:f8:22:96:96:95:15:
49:f5:be:48:db:75:b7:d0:04:0d:52:38:25:05:32:25:9f:86:
72:34:04:2d:87:28:85:84:76:cf:d3:39:2c:aa:2f:a0:ac:4f:
4c:e6:49:fa:de:17:bb:c7:b2:2a:e7:3e:87:eb:ee:ef:fc:8a:
45:01:95:50:d9:d7:e0:2e:c8:cc:eb:f4:8d:5d:12:27:fc:06:
39:86:d9:dd:85:a3:5b:61:1a:c8:42:b3:85:0d:7a:9e:6f:8e:
e1:b0:cf:ea:6b:09:b6:e0:68:f8:de:ff:d9:59:0e:fd:32:09:
37:47:70:6e:44:19:51:87:b9:bf:d6:3b:b7:ea:ae:6a:0d:23:
4a:ce:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:02 2026 by rpki-client