Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/hnEWOJCtVBC_3GGbMtE5CXewobk.roa
File: hnEWOJCtVBC_3GGbMtE5CXewobk.roa (raw, json)
Hash identifier: QUJsiM22+JACCqNzl8HDOSQ5bJmxX09zfo9cXu7awUY=
Subject key identifier: 86:71:16:38:90:AD:54:10:BF:DC:61:9B:32:D1:39:09:77:B0:A1:B9
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019D693A47193B701810AF4A6210682E3B51
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/hnEWOJCtVBC_3GGbMtE5CXewobk.roa
Signing time: Tue 07 Apr 2026 18:35:20 +0000
ROA not before: Tue 07 Apr 2026 18:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.148.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:3a:47:19:3b:70:18:10:af:4a:62:10:68:2e:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 7 18:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8671163890ad5410bfdc619b32d1390977b0a1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:fb:c0:6b:c3:43:be:47:74:a8:56:c9:8d:
33:a0:6f:d8:37:a4:2c:b3:52:88:c7:b9:d4:d2:91:
37:b1:bf:76:54:f3:25:46:c7:e9:d9:5f:76:5c:12:
23:2e:b8:81:e9:95:2a:e2:0b:3c:d0:17:af:3a:fb:
a3:73:9b:ed:73:10:69:69:47:8b:8b:07:49:1f:b1:
e4:0e:be:88:5c:e7:f7:fb:fb:33:42:c3:79:49:cb:
36:3d:72:67:47:3b:5c:32:df:68:76:0a:e7:7a:9b:
7e:79:74:e2:97:5a:14:89:79:f6:e6:7c:2e:a9:a0:
c6:e1:53:39:85:65:7d:a1:4a:37:b8:42:83:bb:d0:
75:2f:8b:9d:cb:8f:cc:78:b3:f8:f2:26:07:96:84:
00:86:09:91:bc:ac:e9:5d:91:87:be:d3:87:f3:0e:
c9:74:59:fa:d9:1e:e4:27:33:a2:4d:76:65:2d:24:
96:05:6f:40:95:bd:be:57:0c:56:0f:4d:bc:fb:5f:
eb:ff:52:3a:a6:85:fe:01:76:2d:1c:b5:6b:91:aa:
43:89:1a:bd:12:13:a2:ce:e1:f0:e8:44:db:40:ec:
c3:d5:7d:e1:9b:f1:0d:80:60:17:f1:63:4e:72:b2:
65:5f:90:62:da:67:61:82:74:93:7a:64:c7:ae:59:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:71:16:38:90:AD:54:10:BF:DC:61:9B:32:D1:39:09:77:B0:A1:B9
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/hnEWOJCtVBC_3GGbMtE5CXewobk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.148.0/24
213.209.129.0/24
213.209.143.0/24
213.209.145.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
32:f0:a8:97:07:cb:29:ea:ba:35:d9:c9:f8:cb:4d:8f:06:ee:
c8:f9:3f:a5:58:a9:bf:01:50:1c:bd:62:cf:90:4f:3b:52:48:
b2:ba:23:3e:d7:b9:5c:c8:19:85:6d:06:5a:e5:34:b5:25:5a:
4c:b3:99:a7:60:19:a4:a9:1e:8e:aa:b1:d2:fe:a6:20:9d:51:
21:1a:e7:cf:35:8f:62:d3:28:dc:a9:1a:c0:9d:11:53:3f:6e:
d0:33:b5:4c:6c:b0:d7:08:7e:07:f6:6c:89:3e:bc:3c:ea:82:
43:df:49:ed:68:71:73:b6:63:cc:21:ba:ca:0c:96:c7:34:e5:
01:62:3e:95:69:8b:db:f1:ad:22:19:75:86:af:b8:9b:e2:6d:
7e:cf:4e:2a:7d:c8:06:fb:d5:11:04:f7:59:18:9e:1c:86:3a:
98:b3:bd:a0:37:69:1c:b3:1c:8c:93:4e:07:f6:d5:e6:62:5a:
a3:6a:23:c2:b8:69:26:b1:f2:80:4c:6a:5b:eb:cc:25:0d:f2:
35:ab:6b:b9:82:ae:f7:a7:eb:61:97:15:3f:9e:b5:27:79:f4:
a8:19:6f:25:59:3c:85:1f:6f:c6:3b:a5:67:47:a7:b0:b9:6a:
a7:bd:86:dd:ae:e2:9b:3e:55:2d:c9:b6:c2:6f:93:5d:78:a0:
3d:63:e5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:17 2026 by rpki-client