Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/f32IN8X8VX0IYse4UWL7OQvSP60.roa
File: f32IN8X8VX0IYse4UWL7OQvSP60.roa (raw, json)
Hash identifier: rb+UUhOxd1nri0jZfCETT05e9Y4KfO4sAh9g9cW0pPI=
Subject key identifier: 7F:7D:88:37:C5:FC:55:7D:08:62:C7:B8:51:62:FB:39:0B:D2:3F:AD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0E8544FEB061864E02F24D500F051F764
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/f32IN8X8VX0IYse4UWL7OQvSP60.roa
Signing time: Mon 28 Sep 2026 14:03:54 +0000
ROA not before: Mon 28 Sep 2026 14:03:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 77.90.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:54:4f:eb:06:18:64:e0:2f:24:d5:00:f0:51:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 28 14:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f7d8837c5fc557d0862c7b85162fb390bd23fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:2f:29:1c:e1:ec:db:94:1b:cb:08:48:f3:
2d:39:5a:0c:1b:8c:d0:1a:5c:c7:18:6b:2d:43:87:
d8:cc:36:12:53:14:18:52:76:4b:e2:20:25:d8:28:
3c:a3:9b:5f:da:c9:2b:4b:23:bf:9d:0d:10:40:f4:
2e:11:34:40:83:ba:ad:28:92:99:08:2b:3f:e8:df:
b7:fe:ae:28:f5:78:f5:58:0f:3e:9b:4b:2b:a0:76:
fc:02:71:bf:f7:3e:e8:f9:e4:8c:1a:28:21:c6:bd:
90:74:69:a2:43:2b:6e:3c:57:f2:15:94:a0:3c:30:
f6:d6:25:3e:25:e3:ea:dd:ca:00:07:18:e8:ce:d5:
7c:9c:96:88:6f:d9:1e:1d:9c:a4:3a:9b:90:10:1b:
34:94:15:27:ea:de:ef:02:37:62:c2:20:76:d4:0b:
35:e6:81:ea:6a:93:83:45:42:29:d6:e8:e5:70:2d:
2a:5e:05:ff:07:03:96:d7:c4:37:f2:5c:3d:65:16:
ba:e3:fe:7a:f2:8f:a0:13:3c:59:bb:74:e1:6a:cd:
27:74:5e:29:43:f6:3f:1d:cf:7e:04:fa:b0:50:14:
85:b5:f7:45:e8:c7:a7:b0:e5:1d:3e:fc:1a:f2:ba:
ec:6b:df:21:4e:5b:24:c4:44:f7:bb:9b:c6:19:1c:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7D:88:37:C5:FC:55:7D:08:62:C7:B8:51:62:FB:39:0B:D2:3F:AD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/f32IN8X8VX0IYse4UWL7OQvSP60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6e:f7:c3:37:24:d9:9c:d9:1e:dd:47:5f:af:88:ad:60:6e:
c7:52:76:0c:57:df:40:36:ce:08:f7:7d:c2:9a:00:71:7d:62:
8f:e7:fa:a4:39:59:0c:74:89:8b:15:f1:51:a8:0a:41:e4:0e:
c9:bf:9f:b3:3b:5d:99:94:f3:3b:d5:15:74:36:73:7d:f8:8b:
32:b8:c4:8f:83:61:77:a9:1f:ed:b4:b9:07:7f:fb:95:74:87:
ca:46:b3:d7:fb:73:21:06:ef:13:f3:4d:d9:36:92:d7:93:89:
8c:7e:77:ac:d2:a8:1e:ea:8c:64:d0:02:4a:e0:15:63:e4:53:
da:98:73:08:f9:9c:c3:20:f2:5d:45:19:2e:83:3f:e4:75:45:
5f:98:00:e6:b0:10:a8:41:4e:38:f5:54:55:75:df:04:bd:df:
db:ba:97:cf:f4:65:b8:a5:a9:06:0d:93:2c:63:80:9e:04:7f:
c3:35:88:2c:4b:71:56:c1:ab:45:54:0e:65:db:10:4d:0b:b0:
55:84:92:18:41:57:82:4b:32:ba:39:66:f3:0c:95:22:a3:50:
9d:05:ee:95:6f:ce:7a:1e:3a:88:e7:49:93:32:fb:70:73:6b:
46:76:69:0a:bd:87:0d:0f:62:28:af:de:a0:98:1c:c1:95:b6:
b7:36:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:01:29 2026 by rpki-client