Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/pNxj6kdZkMnJYCmMCjf3eYaPL2Q.roa
File: pNxj6kdZkMnJYCmMCjf3eYaPL2Q.roa (raw, json)
Hash identifier: TTBHabL5n03Hv3G+3nODRR9KvMRepVZdF4Y0GodkG3o=
Subject key identifier: A4:DC:63:EA:47:59:90:C9:C9:60:29:8C:0A:37:F7:79:86:8F:2F:64
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019FFADA245DB84E8837EE372B558A3DDAB2
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/pNxj6kdZkMnJYCmMCjf3eYaPL2Q.roa
Signing time: Thu 13 Aug 2026 11:20:27 +0000
ROA not before: Thu 13 Aug 2026 11:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34120
IP address blocks: 77.90.64.0/21 maxlen: 24
77.90.72.0/22 maxlen: 24
77.90.76.0/22 maxlen: 24
77.90.80.0/22 maxlen: 24
77.90.84.0/24 maxlen: 24
77.90.93.0/24 maxlen: 24
77.90.94.0/23 maxlen: 24
77.90.96.0/23 maxlen: 24
77.90.98.0/24 maxlen: 24
77.90.100.0/23 maxlen: 24
77.90.104.0/21 maxlen: 24
77.90.112.0/20 maxlen: 24
2a0b:5600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:da:24:5d:b8:4e:88:37:ee:37:2b:55:8a:3d:da:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Aug 13 11:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4dc63ea475990c9c960298c0a37f779868f2f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e1:27:44:63:37:ec:1b:5c:35:6f:f4:a6:a0:
79:f9:c8:40:68:80:ed:ff:0d:03:31:61:53:49:3b:
97:39:94:5f:54:aa:c5:db:0b:4b:77:25:61:90:b6:
1b:cb:ea:de:03:70:e6:ed:1e:0c:d9:7e:ae:df:12:
09:9a:1f:f8:e4:de:4a:4e:52:90:4c:d4:ec:7b:b8:
32:a8:bc:6b:05:f8:98:c0:5f:4e:3e:19:08:3d:a7:
ca:1e:a8:79:70:8f:fa:74:3f:44:e6:42:ed:d6:c2:
7d:8e:e5:b9:39:cc:54:c5:d6:82:94:72:56:f0:32:
3b:80:e9:b1:d9:17:d0:5b:78:33:b9:70:05:df:f0:
ab:cd:f0:cc:67:1b:a6:b1:66:aa:18:da:c8:79:12:
eb:76:bb:6b:be:a1:f7:79:a0:f5:58:88:bb:0f:8c:
81:fb:f5:2d:92:0c:56:e1:c5:ca:b4:1a:31:ac:8c:
e7:2f:42:3c:b2:3a:49:07:1c:03:a0:aa:78:85:42:
a3:0f:f5:df:af:33:93:3e:f9:44:2a:53:06:7d:6c:
f8:c8:20:82:80:0a:12:fa:84:8e:6b:df:f4:ce:ac:
57:c2:bf:09:8c:b0:59:bd:35:93:88:8c:a4:ef:43:
6b:44:c7:0e:ce:14:a6:43:0a:83:dc:33:99:3f:f2:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:63:EA:47:59:90:C9:C9:60:29:8C:0A:37:F7:79:86:8F:2F:64
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/pNxj6kdZkMnJYCmMCjf3eYaPL2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.64.0-77.90.84.255
77.90.93.0-77.90.98.255
77.90.100.0/23
77.90.104.0-77.90.127.255
IPv6:
2a0b:5600::/32
Signature Algorithm: sha256WithRSAEncryption
83:d1:f3:72:d6:9f:2a:21:7b:f0:0e:e9:25:f8:c8:8c:7c:60:
d3:e2:b8:84:35:c5:05:b9:d2:a0:f9:87:c6:0f:e8:4c:f2:77:
a5:0c:b0:21:50:bd:2f:9f:e1:30:8b:3f:0b:4a:49:25:c2:ce:
3c:e6:72:97:c2:f0:b6:67:f5:4b:d8:32:e5:75:38:31:5f:bc:
c4:b5:09:77:a5:6f:c7:3f:26:a2:41:3e:2a:5e:27:37:49:3e:
25:6a:2a:8e:f1:47:f3:22:18:c6:0b:a4:11:a8:60:a4:27:ee:
b3:62:e4:4d:d3:12:da:ef:bf:99:bf:95:c9:dd:3e:17:f5:01:
04:a7:22:ab:06:0f:cb:b2:04:a0:0d:12:14:6f:4d:22:55:dd:
ba:9b:03:05:5f:4b:a6:dd:1a:d2:86:fa:1e:61:2f:26:30:fc:
ca:ab:ad:0b:b2:ad:76:63:c6:e1:de:73:d1:97:59:8c:bb:79:
68:1a:6b:35:e5:64:b6:51:0d:f8:74:36:5c:8c:61:fc:bc:26:
4b:02:4a:a0:0d:bc:a0:53:0f:12:e5:2b:87:8f:e6:c8:56:6b:
44:b3:af:e8:ed:f9:e0:ab:dd:6c:7e:87:7e:7b:eb:e8:5f:15:
99:50:a7:fd:dd:2c:83:36:9d:dc:c4:e2:a6:cc:10:df:b2:38:
56:d4:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:10:33 2026 by rpki-client