Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_SBs4pCKKhk6pMcCKSMOStF2zLs.roa
File: _SBs4pCKKhk6pMcCKSMOStF2zLs.roa (raw, json)
Hash identifier: K5M4wzgI5IwgTsBzGfeMMvXNqnGoMX/i5D4sN0k8DcM=
Subject key identifier: FD:20:6C:E2:90:8A:2A:19:3A:A4:C7:02:29:23:0E:4A:D1:76:CC:BB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0F6554A53CE225CA9366E849FA9BBB9FB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_SBs4pCKKhk6pMcCKSMOStF2zLs.roa
Signing time: Thu 01 Oct 2026 07:19:39 +0000
ROA not before: Thu 01 Oct 2026 07:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 77.90.139.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
77.90.190.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:55:4a:53:ce:22:5c:a9:36:6e:84:9f:a9:bb:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 1 07:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd206ce2908a2a193aa4c70229230e4ad176ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:7e:aa:bd:bf:08:8d:e4:93:24:3f:41:54:
2f:9b:8d:88:f7:86:b2:95:df:ff:35:2a:52:c1:28:
8a:41:3b:0d:cd:5c:66:24:5f:66:74:3c:09:a2:20:
f6:2f:41:b5:29:8a:eb:12:eb:33:05:10:91:34:9d:
8f:f6:a4:4b:f2:54:77:c5:8e:4b:7c:82:a9:dc:a7:
08:a2:9e:d5:20:db:7c:e8:91:9a:9a:05:74:84:6f:
df:45:dd:c5:d6:e9:83:65:eb:0d:9b:d0:86:4c:54:
e8:ea:44:1b:31:ae:de:13:87:43:6d:d8:4f:cb:fe:
ee:33:d0:83:87:cd:7c:a1:13:47:2b:24:0b:e4:9b:
aa:3a:3d:d3:b2:e5:de:b0:2c:d0:9c:2d:1f:1e:0e:
92:19:93:12:52:74:f9:b7:3c:4b:da:1f:7f:a7:a9:
6b:b3:0b:95:2e:e5:88:cb:b1:0c:fa:8f:96:d8:51:
51:60:6c:ae:25:6c:db:1a:eb:d6:e7:1a:f9:0f:14:
85:54:cd:6e:41:9a:06:ef:22:3f:08:cd:d0:60:87:
11:7b:06:4a:40:ac:23:ed:e2:6d:a8:3f:41:5c:3d:
6b:64:8d:af:6b:8d:50:7d:a1:37:df:b3:cd:5d:cc:
47:fd:b4:0f:c9:53:12:cb:40:9a:21:d3:6b:dc:7f:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:6C:E2:90:8A:2A:19:3A:A4:C7:02:29:23:0E:4A:D1:76:CC:BB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_SBs4pCKKhk6pMcCKSMOStF2zLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.139.0/24
77.90.148.0/24
77.90.156.0/24
77.90.170.0/24
77.90.173.0/24
77.90.190.0/23
213.209.139.0/24
213.209.141.0/24
213.209.143.0/24
213.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e4:aa:aa:86:be:87:ac:e0:a2:8d:04:a4:f7:ba:b3:b8:d6:
f6:9e:f0:d5:ee:a4:d0:ab:5b:db:ce:e1:d4:db:7f:09:3e:11:
02:57:15:0d:51:90:6d:79:be:f7:de:cd:d2:68:df:e9:6c:93:
94:fd:4b:f5:19:ec:52:ae:b7:ad:f4:9c:0c:d7:df:83:6e:16:
be:5e:9b:98:46:a1:60:be:41:fe:56:56:5d:fa:1d:88:d9:12:
01:b9:31:14:28:9b:c2:08:b3:36:18:ac:4f:f4:4d:6a:3f:d1:
cf:a7:04:b4:4a:82:6a:1a:ae:e4:6e:51:43:0e:91:67:b1:74:
ee:db:1b:d1:5a:86:ac:0d:54:53:69:db:c7:3c:8b:aa:11:22:
de:89:51:ac:30:41:b6:53:7e:17:e7:88:73:cd:de:5a:5c:22:
6a:f9:42:06:d1:c4:ac:85:0c:07:75:0b:17:79:fc:0a:32:6c:
1d:d3:93:25:63:c9:48:dc:8d:1f:42:db:8f:a3:b8:8f:9f:51:
e5:f1:94:39:4e:41:52:69:8f:e0:8a:ba:a5:92:3a:6f:6d:0b:
83:0a:5b:52:ad:a1:61:cb:6e:c9:ef:e2:5e:12:f1:6f:10:5b:
78:6a:3b:d1:26:6c:ec:02:b2:ce:21:38:98:3a:0f:8c:81:74:
24:3b:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:32:55 2026 by rpki-client