Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3kdkXs-Im4X4WxDF387Kz58kORA.roa
File: 3kdkXs-Im4X4WxDF387Kz58kORA.roa (raw, json)
Hash identifier: 1WD5Nbn4e/aPX7Ez9Elfw89SdkV6nUX+vasnfRGAOWw=
Subject key identifier: DE:47:64:5E:CF:88:9B:85:F8:5B:10:C5:DF:CE:CA:CF:9F:24:39:10
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0F6A5D7CC22975235655AA6976DC43DC4
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3kdkXs-Im4X4WxDF387Kz58kORA.roa
Signing time: Thu 01 Oct 2026 08:47:38 +0000
ROA not before: Thu 01 Oct 2026 08:47:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 77.90.157.0/24 maxlen: 24
77.90.159.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a5:d7:cc:22:97:52:35:65:5a:a6:97:6d:c4:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 1 08:47:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de47645ecf889b85f85b10c5dfcecacf9f243910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:b4:16:48:5d:cc:9d:94:6c:cb:c0:79:bd:
da:3b:04:a0:0b:d5:f5:0c:ea:57:8a:06:f1:69:bf:
d3:b5:bd:28:35:32:a9:ff:6a:e6:3a:a3:dd:14:ff:
00:bd:00:e9:a6:78:ba:f5:cc:cf:9c:a5:4c:b2:02:
4b:94:66:57:cd:56:89:6a:63:17:f3:38:7b:33:30:
3d:15:5b:93:df:c4:f0:54:db:ad:c9:be:9e:c7:43:
98:1a:0d:1c:42:f3:bb:73:9c:37:ae:e6:c8:c9:d6:
b4:87:15:32:86:2d:ad:f3:3b:86:49:e1:45:b4:36:
dd:e1:5b:81:73:16:fa:46:b1:fa:87:80:b8:02:a9:
7a:52:49:d2:f1:dd:eb:85:0d:9e:f2:4d:49:87:95:
42:8b:3b:93:28:61:a2:dd:f3:b6:d5:54:bd:13:e0:
5c:b6:a2:3d:36:71:94:00:ec:dc:2e:df:98:43:e4:
f2:e9:1f:38:bd:df:5e:ca:26:fe:74:d2:94:a4:59:
fe:d3:37:c5:4b:45:ce:87:41:ee:92:f7:cc:ca:c1:
04:d7:ba:9e:8f:6f:29:18:ae:e4:64:9c:de:59:17:
33:65:0b:b9:8e:c3:5b:35:78:0c:60:38:1c:c4:d4:
4f:c6:f9:f1:b1:15:56:42:bc:e9:b5:20:b9:d7:32:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:47:64:5E:CF:88:9B:85:F8:5B:10:C5:DF:CE:CA:CF:9F:24:39:10
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3kdkXs-Im4X4WxDF387Kz58kORA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.157.0/24
77.90.159.0-77.90.163.255
77.90.165.0-77.90.166.255
77.90.169.0/24
77.90.171.0-77.90.172.255
Signature Algorithm: sha256WithRSAEncryption
98:0a:da:05:5b:3e:d9:01:d0:2b:9e:d2:f0:1d:52:a9:77:33:
5e:41:d1:c4:18:68:6e:3c:07:75:18:1d:65:9f:11:0e:46:f1:
d3:46:64:4e:e7:c8:7f:c7:31:63:a2:0d:06:cd:b5:27:71:64:
44:7a:ae:4c:6a:36:6a:fb:27:c7:9b:e9:23:6f:20:80:09:26:
e8:81:cb:d1:dd:f6:d6:18:72:2e:ae:7c:c9:06:7c:a7:8c:d7:
9d:71:a4:d0:46:4c:ea:81:f0:82:88:5f:09:f6:71:9f:69:83:
d3:3e:81:6b:2f:62:d4:3d:b4:22:cd:8b:ac:2f:08:6b:08:57:
b0:c2:e5:ee:2c:47:da:54:d7:a5:a1:11:e2:3a:06:8a:86:66:
dc:fd:be:2b:f7:25:3f:bb:cb:c8:0c:a8:e3:61:28:2a:87:22:
41:80:b4:28:e5:a3:fa:c2:82:29:32:3a:25:12:ee:ca:90:4b:
d5:08:0f:2f:e5:64:3c:eb:ba:f5:90:b5:86:d0:de:15:02:2d:
7c:cc:49:79:97:3d:a6:90:6c:61:96:fd:fb:4b:a3:f3:55:40:
46:26:67:41:54:22:4f:f0:7b:fa:4d:3b:07:06:f9:e1:e3:94:
b6:ed:4a:78:ff:34:5f:e0:fe:4b:a5:54:fb:f1:82:b0:75:7f:
60:8c:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:51:38 2026 by rpki-client