Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iVHD7VIScc_bmYavlKZJ2ezNKcw.roa
File: iVHD7VIScc_bmYavlKZJ2ezNKcw.roa (raw, json)
Hash identifier: yVV/qMkCECkBEz4uxAU1f+pA2VYLLRt6TM3iu0HQ6aU=
Subject key identifier: 89:51:C3:ED:52:12:71:CF:DB:99:86:AF:94:A6:49:D9:EC:CD:29:CC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019C2F1296700651D4EE541FD0E1B1B6EB47
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iVHD7VIScc_bmYavlKZJ2ezNKcw.roa
Signing time: Thu 05 Feb 2026 18:31:13 +0000
ROA not before: Thu 05 Feb 2026 18:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397081
IP address blocks: 77.90.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:12:96:70:06:51:d4:ee:54:1f:d0:e1:b1:b6:eb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 5 18:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8951c3ed521271cfdb9986af94a649d9eccd29cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:e7:47:c2:45:f4:63:d4:b7:4a:3c:ee:b2:
5d:b0:ff:ed:b3:fc:f5:82:47:ad:d8:27:31:48:32:
e3:a7:d0:7d:20:5a:ae:29:64:73:ca:d9:fd:b0:82:
59:3f:9c:68:a3:62:29:56:2c:a0:2e:66:d1:fa:40:
a4:3c:43:99:d5:4a:c8:4d:a0:dc:80:9c:11:f0:35:
36:13:48:d2:c9:35:75:dd:35:0b:d9:a7:e9:3d:6e:
77:0b:24:eb:2b:91:87:c5:72:c6:fa:ec:59:ae:7c:
17:ae:f1:1a:fb:b7:ff:0b:e4:43:ef:5e:11:59:79:
67:0d:71:6f:2b:61:72:b5:f8:ad:55:9d:71:fa:03:
3b:99:63:68:8e:33:8f:72:9f:b4:74:b4:5b:6f:c5:
59:4c:9c:8c:95:e5:dc:94:a3:eb:6f:fd:69:01:6b:
e1:c0:bc:fe:32:76:46:06:4e:be:21:81:3f:4d:7e:
d7:f8:0a:de:7b:62:f8:25:52:fa:c1:73:73:8b:2d:
21:81:19:34:b9:f8:86:5c:d6:30:a1:9c:50:09:6a:
4f:d0:45:11:34:0d:03:91:df:b5:92:82:d2:4c:c3:
67:ee:43:90:86:e9:35:8d:17:73:7d:05:b1:85:dd:
e8:fc:3b:31:57:fd:a7:79:04:44:34:86:64:aa:50:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:51:C3:ED:52:12:71:CF:DB:99:86:AF:94:A6:49:D9:EC:CD:29:CC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iVHD7VIScc_bmYavlKZJ2ezNKcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:87:82:29:db:99:af:19:4d:22:64:24:f2:6b:70:8b:73:e0:
a7:6f:d6:92:72:ab:40:b9:39:b1:da:fe:05:c8:f2:33:62:73:
36:e6:45:f3:a2:e6:8a:75:9f:24:a1:71:0a:9f:96:28:cc:6b:
99:5f:f3:90:0c:39:8f:e4:cc:fb:69:6a:d4:08:f6:dc:50:bb:
5d:1e:b6:a1:d6:24:37:a4:d6:3f:7c:7b:94:6b:56:0c:62:49:
10:18:1e:65:77:01:aa:3a:0c:e3:44:bc:0b:3e:94:fd:0e:37:
4e:a6:4b:55:83:f7:66:83:78:61:78:08:dc:96:3a:db:78:60:
3b:93:8b:c6:e9:a4:0f:aa:91:fb:1e:6b:0c:37:62:74:48:c7:
5d:39:92:ce:ab:bf:c3:28:bd:6d:2c:77:65:17:61:85:c9:c3:
c5:98:9a:1e:87:0c:3c:97:9f:d8:72:f2:fc:83:44:eb:35:cf:
03:4b:06:84:16:ad:dd:43:34:e1:3b:36:2e:88:40:f1:ab:41:
7f:cb:b0:87:a2:08:65:12:cd:f2:c8:34:1e:b4:2e:f0:83:52:
bd:f7:ba:d3:e2:5f:29:3d:28:e0:45:74:86:fa:c1:d6:af:25:
ea:13:35:c4:ef:b7:6e:39:0f:03:aa:96:15:27:1a:11:fe:04:
50:42:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:05 2026 by rpki-client