Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa
File: 3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa (raw, json)
Hash identifier: z+UJ71RNNGVXWGUolTIwgBdwKGA2gX9wpBe2tOfMGEQ=
Subject key identifier: DC:F1:09:07:B0:44:B6:B2:F1:13:8A:50:6C:11:17:83:63:49:D3:33
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019DD9F33AA08B23D147C622B8A29EE3587D
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa
Signing time: Wed 29 Apr 2026 15:54:49 +0000
ROA not before: Wed 29 Apr 2026 15:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52194
IP address blocks: 77.91.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:f3:3a:a0:8b:23:d1:47:c6:22:b8:a2:9e:e3:58:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Apr 29 15:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcf10907b044b6b2f1138a506c1117836349d333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:c2:c7:f3:93:d6:d6:8e:90:3a:99:f1:08:
fe:53:16:b1:79:7e:17:59:4c:5b:11:85:6a:0c:fd:
0d:e1:ff:2e:fd:5f:1b:2e:8b:48:53:d1:f8:57:d1:
46:fc:0b:72:79:12:f5:90:e8:c3:c3:2a:56:f6:12:
b6:cc:91:df:52:ee:e2:1a:8c:1b:6a:81:67:ac:7b:
b2:84:47:55:72:7a:dc:78:d1:58:b1:02:ff:f7:63:
69:c4:40:df:6c:50:57:1c:2d:43:2a:ea:5c:43:22:
33:17:ec:e9:ca:cc:64:f4:6e:ed:f5:b5:01:08:28:
49:89:5b:9a:20:ab:5c:9a:47:08:ed:62:30:84:67:
80:26:41:f3:64:d4:74:ee:2b:bb:ae:e0:16:9c:98:
7e:df:de:89:6e:e6:b3:21:6c:65:d3:77:b3:6b:5c:
57:30:d6:ae:1a:df:59:f8:9a:84:fa:7c:a1:52:e5:
fe:bb:15:83:75:5c:0c:b4:34:ae:63:5d:c0:c0:6f:
ae:c0:b9:a2:d7:77:ab:f2:f8:5e:c0:e3:f4:bd:db:
ff:6d:79:8f:05:09:4a:86:52:35:76:9c:43:74:d9:
c4:05:64:81:d3:68:43:79:11:78:d8:d7:94:ed:b4:
87:fd:85:b5:25:23:8b:c8:02:dd:e6:a5:f8:ea:0c:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:09:07:B0:44:B6:B2:F1:13:8A:50:6C:11:17:83:63:49:D3:33
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3a:bb:4c:32:90:56:dd:2b:9e:59:45:88:54:35:20:15:af:
7a:e7:46:19:5e:44:61:04:4c:37:62:d0:22:e9:04:10:f5:c0:
40:80:c6:59:64:93:3b:3c:7c:27:36:55:3b:fd:a1:63:fe:a8:
cb:89:29:1f:cd:80:42:ac:14:b9:54:57:0b:8f:3f:d1:15:c1:
a8:d6:c4:ea:a8:41:e7:5e:07:c9:13:71:12:ad:73:0b:07:b5:
76:c8:ce:26:ae:e9:5c:e9:f1:6c:33:48:5d:7d:2c:a8:91:a5:
46:98:19:53:d5:db:99:29:ec:99:0b:7a:ea:c8:12:f0:2d:c2:
3c:9e:73:94:09:62:82:d5:68:d3:34:ed:03:fb:62:b1:f7:b0:
b1:a3:a7:5f:c7:e9:96:e7:40:43:90:4d:83:37:84:f8:d9:33:
c6:35:b6:10:17:5d:14:ee:e6:b2:9f:79:83:41:c7:ee:44:27:
6c:97:fe:51:d0:4e:df:22:21:79:6a:03:6c:3f:db:1c:56:fe:
fa:6d:94:f4:78:58:78:df:60:0c:22:55:31:7b:96:28:bc:68:
8d:a4:68:3d:0c:95:c4:9d:f5:2c:bf:ee:7a:1c:b7:1e:bd:27:
9b:15:0f:d8:16:5d:ae:22:7b:bb:42:47:04:8d:3e:87:70:cf:
e4:8b:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:21:09 2026 by rpki-client