Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa
File: JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa (raw, json)
Hash identifier: kcTQU5997oY8OpgCn62LAmPoorNvkv8hEcl9ToSuUFo=
Subject key identifier: 24:ED:DC:97:40:38:79:E5:99:AE:56:FA:61:81:3A:6F:74:20:41:56
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0AFD158713AAAD0DE7BDCC90625E5901C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa
Signing time: Thu 17 Sep 2026 14:42:07 +0000
ROA not before: Thu 17 Sep 2026 14:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 77.90.149.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
77.90.174.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d1:58:71:3a:aa:d0:de:7b:dc:c9:06:25:e5:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 17 14:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24eddc97403879e599ae56fa61813a6f74204156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:d2:ff:30:df:a4:b9:2a:29:63:6c:27:d4:
a0:c5:5b:5c:8b:5e:20:b9:0d:06:e3:53:42:7b:a4:
a8:55:0a:14:c6:71:96:cc:f0:67:d1:58:4b:4d:8c:
6d:6e:b5:2b:0d:e0:b2:97:07:cf:98:eb:6e:ff:76:
6d:84:ab:d2:b3:5b:2e:84:44:fa:9a:37:64:95:f5:
12:ca:f6:d1:e0:f3:60:29:68:5b:f2:11:c6:70:e1:
3d:8f:78:55:e5:57:5e:29:19:ba:1a:f2:6f:09:6e:
a7:0f:ca:79:70:05:69:61:9a:09:a5:7d:6e:a9:c6:
e4:58:6e:47:8a:c0:43:34:77:b5:cc:02:a6:e9:45:
c9:4e:c1:0f:9f:f4:33:ce:96:b4:d6:9a:d3:11:9e:
33:f0:cc:f3:53:0a:d9:64:f6:eb:40:9b:14:17:7b:
15:76:65:59:a3:c0:73:c3:ca:18:90:58:cd:53:06:
00:52:5b:72:7f:8c:f5:87:86:53:d9:9e:d4:83:93:
ac:cd:d9:5d:77:8c:f1:35:51:30:6a:2f:74:a5:dc:
e3:fd:d0:08:1b:69:5b:44:c8:c7:52:5d:67:11:a6:
57:e4:42:dd:e5:77:96:99:cf:91:99:73:9c:ba:ed:
53:f8:91:e1:5e:11:cc:f4:12:18:32:43:7b:58:06:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:DC:97:40:38:79:E5:99:AE:56:FA:61:81:3A:6F:74:20:41:56
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/24
77.90.155.0/24
77.90.167.0/24
77.90.174.0/24
77.90.179.0-77.90.181.255
213.209.133.0/24
213.209.137.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
14:35:8f:de:ff:fa:df:8c:7a:4b:e2:20:99:97:cb:94:ab:83:
b7:1c:e2:52:1d:d6:75:a6:30:eb:27:cc:ae:db:63:9b:a4:8b:
24:e8:cd:e6:c1:96:10:da:45:03:7f:27:86:79:e6:b1:c0:d1:
93:17:48:55:f2:46:cd:3c:83:1a:63:a6:5a:7b:3a:e8:ef:38:
d8:da:fa:2b:e2:f3:bd:1d:54:02:0d:76:b7:24:d9:79:b4:d5:
a0:14:ee:aa:1e:48:2c:17:a3:6f:de:2a:d5:73:9d:36:5c:c2:
40:d8:1f:64:fe:c4:3c:b9:e7:09:e1:d2:5c:39:97:ca:10:45:
da:a8:41:a1:6e:e9:96:79:7d:7d:ee:2f:b9:23:bc:f5:d1:69:
2d:2d:b4:b4:b2:ea:4f:36:cb:7f:a0:f6:fa:7a:02:af:b5:81:
43:75:f9:60:36:4f:69:25:2c:ce:a8:c9:49:85:77:49:d2:42:
2a:8e:38:23:1b:89:71:f3:d4:0a:17:d9:8d:b3:70:67:0c:a8:
03:91:67:e7:42:7d:1b:e9:6b:9e:ca:d8:a0:1b:6f:9b:a9:b5:
20:a2:60:3b:0f:9f:2b:1c:52:ff:7d:57:51:98:8e:a9:cd:f4:
99:49:48:cd:e7:c5:7c:fb:17:d4:28:8e:d4:57:ca:ad:4e:89:
65:f8:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:51 2026 by rpki-client