Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/7llwUQb2MWs6HplnXw9JJ1A5tmk.roa
File: 7llwUQb2MWs6HplnXw9JJ1A5tmk.roa (raw, json)
Hash identifier: aiurRHfiE4dklL1f4bmak642G7m5NT5/fQUkQdcYZhc=
Subject key identifier: EE:59:70:51:06:F6:31:6B:3A:1E:99:67:5F:0F:49:27:50:39:B6:69
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019FFAD4A5FACBD39068C3F263024E5CDCAE
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/7llwUQb2MWs6HplnXw9JJ1A5tmk.roa
Signing time: Thu 13 Aug 2026 11:14:27 +0000
ROA not before: Thu 13 Aug 2026 11:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197225
IP address blocks: 77.90.92.0/24 maxlen: 24
77.90.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:d4:a5:fa:cb:d3:90:68:c3:f2:63:02:4e:5c:dc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Aug 13 11:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee59705106f6316b3a1e99675f0f49275039b669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:5b:ee:e6:02:c2:a4:f1:7d:55:e4:1b:00:
c3:b4:1b:2a:8b:e2:ba:92:a9:bd:52:bc:e9:08:13:
95:aa:9a:f9:07:7d:86:48:4d:47:5c:39:97:a4:63:
41:ac:7c:5e:f7:f6:89:d0:48:0b:b8:14:98:4f:71:
ca:1a:9d:88:a7:bf:f4:f7:6d:02:b3:ee:e3:88:1b:
16:70:c3:c4:12:83:f0:7e:d5:1e:ec:6f:57:b0:4c:
c5:1e:ab:8c:5c:a8:08:0c:22:e4:be:c1:fe:d9:76:
c7:ab:27:27:f8:d7:cf:b5:97:5d:6e:1b:0c:71:33:
ee:b1:bd:26:19:78:64:3c:28:da:06:10:ec:05:f7:
68:27:81:b2:6b:58:96:59:51:1a:4f:55:fb:97:bb:
17:a4:9d:fc:48:e0:9d:88:d7:de:b6:14:8c:70:da:
a2:bb:19:90:fc:f0:a0:03:cb:72:08:05:ec:f9:41:
04:8c:72:5b:a5:a7:f4:74:f2:8f:8c:0a:93:8b:51:
48:2a:52:76:e3:0b:1b:58:24:3f:aa:51:2f:c2:d2:
a5:7e:49:83:b5:94:51:ee:1a:d6:36:d3:5a:31:c5:
b7:9e:16:08:45:b9:bb:6b:85:14:5c:87:e6:63:32:
12:e7:90:82:85:1d:fc:fe:e1:75:7e:a0:d5:f4:f1:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:70:51:06:F6:31:6B:3A:1E:99:67:5F:0F:49:27:50:39:B6:69
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/7llwUQb2MWs6HplnXw9JJ1A5tmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.92.0/24
77.90.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:98:a4:b6:79:e8:f6:64:e1:db:32:5f:d8:dd:25:f7:dc:2b:
06:93:04:fa:f2:2d:40:4c:0a:cf:0f:2b:8d:e6:bc:e1:4a:c2:
df:8b:99:32:18:f9:47:d1:24:3e:f4:ba:e8:95:6c:1c:9b:b6:
8c:8a:d8:be:fe:91:09:f1:ca:d6:90:86:22:ef:1a:f7:f8:30:
90:dc:72:f2:19:10:c0:4e:c4:81:b2:0d:f2:78:e5:46:89:25:
ce:76:b4:53:70:9c:2d:74:49:94:fa:a9:11:74:ba:5d:d9:5d:
23:cd:58:26:51:e1:bc:43:cc:12:60:ba:ee:96:12:07:b0:30:
15:e5:6c:c0:ea:ce:f7:46:4c:61:3f:21:9b:b8:46:2d:a4:90:
82:c9:8a:3b:91:fd:50:94:25:ad:77:5f:7d:ee:73:c7:b4:6c:
20:06:ea:19:a0:4f:e2:0c:8d:3e:a5:d4:3b:9d:a4:e0:da:b4:
8f:14:15:2a:7d:51:c5:5a:bb:4b:f5:e6:62:84:32:f2:3d:2a:
e7:09:c0:b8:12:3a:e4:e8:01:1f:9b:3e:5b:c1:68:b2:4f:ab:
37:4b:f4:e5:56:09:07:2d:4e:74:45:d1:8c:f2:bc:dc:f6:bf:
11:ae:6d:19:9f:a8:15:c0:fa:c6:2e:70:a5:1d:e4:66:a5:25:
40:54:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:23 2026 by rpki-client