Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/_0fjxv0fjuqXsB_dEZmZt2gQyKo.roa
File: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (raw, json)
Hash identifier: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=
Subject key identifier: FF:47:E3:C6:FD:1F:8E:EA:97:B0:1F:DD:11:99:99:B7:68:10:C8:AA
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019CC02AA8DF4D7DC47D85516E1D70C1C7B7
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/_0fjxv0fjuqXsB_dEZmZt2gQyKo.roa
Signing time: Thu 05 Mar 2026 22:42:27 +0000
ROA not before: Thu 05 Mar 2026 22:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 77.91.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:2a:a8:df:4d:7d:c4:7d:85:51:6e:1d:70:c1:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Mar 5 22:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff47e3c6fd1f8eea97b01fdd119999b76810c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:98:84:de:59:51:a1:0f:e1:8c:9e:0c:4f:
60:49:d6:19:ee:7f:a1:87:b3:c7:92:d4:4e:d2:73:
23:5d:7b:74:f1:e5:10:4e:6a:be:28:68:f7:12:91:
27:5d:53:b5:6e:b8:2a:6b:96:ef:0c:71:18:d5:86:
57:d0:40:47:2c:1e:1a:14:7f:50:c1:b6:e2:b5:78:
9a:a6:31:36:f0:d1:4e:19:02:a1:d6:61:3d:3d:8e:
78:00:bb:96:9f:89:31:e1:8a:44:67:41:fa:ad:3c:
1f:94:77:02:09:9c:87:bb:c7:38:ef:17:fc:d7:f3:
08:56:86:38:c0:11:d4:79:88:33:b8:1d:db:e9:95:
d0:fd:e0:85:83:66:6f:d5:a0:f0:a3:9e:17:cc:12:
1d:02:1d:d7:0c:64:99:f4:78:97:a4:22:0d:f2:db:
ef:9c:80:08:3e:45:c0:67:dc:bc:ad:16:a9:99:94:
e9:6a:ec:4f:73:eb:6d:93:71:63:b4:12:56:3e:bb:
3d:74:6d:77:64:cb:66:a8:4f:7a:0b:50:0d:fd:00:
c1:0a:6b:42:34:fe:49:48:c1:9e:cb:c5:ee:eb:ca:
65:45:79:a3:c8:26:1e:e6:51:2c:fe:7e:67:8a:e2:
be:1c:cc:cd:d6:b0:46:13:8c:bd:b3:d5:f2:26:e0:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:E3:C6:FD:1F:8E:EA:97:B0:1F:DD:11:99:99:B7:68:10:C8:AA
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/_0fjxv0fjuqXsB_dEZmZt2gQyKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.79.0/24
Signature Algorithm: sha256WithRSAEncryption
82:91:97:c8:e2:ab:25:6a:d4:d1:e1:bc:33:c5:ac:ac:ce:de:
bb:ed:63:42:8a:1a:2b:35:73:c6:f5:f7:cc:e6:e0:d1:1e:5a:
fb:18:c6:1e:62:dd:35:3e:41:38:cc:8f:f2:7d:6a:d9:3e:9a:
40:91:1c:d8:d8:6f:3c:aa:af:2d:99:20:41:5f:51:66:4c:8f:
d7:9c:d8:52:03:a9:56:6d:d8:15:41:08:62:38:00:c5:df:d6:
ad:f7:1b:00:0c:45:79:01:5d:82:2a:8b:be:d2:07:71:10:3e:
d3:2a:8e:fa:6b:f5:94:f9:d0:36:97:fe:0b:c1:e8:a8:71:db:
a8:e4:20:8f:1c:30:44:35:2e:4a:e5:49:86:e8:ba:e3:80:0d:
f5:db:be:31:1b:4c:76:42:5a:23:dc:ac:fd:9a:3c:99:ef:bf:
ff:38:98:a1:01:9b:d0:12:a3:17:31:c1:6c:93:49:77:59:a1:
40:a0:f7:1d:5b:2e:48:6d:e1:c8:ab:6e:5b:a5:02:8a:cd:dc:
4a:ba:8c:00:38:8d:58:ca:b1:bb:ba:5c:9f:70:c7:04:93:4d:
cd:65:6a:c3:e6:8d:96:27:72:6b:e2:54:26:02:7a:d3:b4:21:
7a:a0:c5:a4:6c:d7:91:28:34:51:44:fd:d2:f5:28:26:9d:21:
f6:82:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:39 2026 by rpki-client