Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rwIxl0xSpx6cLwOck58lc13Z1LA.roa
File: rwIxl0xSpx6cLwOck58lc13Z1LA.roa (raw, json)
Hash identifier: tTGUty/PmeIj7uvxFb0523AV7tRjEIfSVI+SkDAItjw=
Subject key identifier: AF:02:31:97:4C:52:A7:1E:9C:2F:03:9C:93:9F:25:73:5D:D9:D4:B0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0AFD15757699C2E4110750676AFD8E940
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rwIxl0xSpx6cLwOck58lc13Z1LA.roa
Signing time: Thu 17 Sep 2026 14:42:07 +0000
ROA not before: Thu 17 Sep 2026 14:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 77.90.181.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d1:57:57:69:9c:2e:41:10:75:06:76:af:d8:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 17 14:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af0231974c52a71e9c2f039c939f25735dd9d4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:37:66:19:e8:10:26:e6:a3:c5:8d:d0:3d:
d4:8a:8a:ea:17:e9:3b:63:fa:72:91:69:a9:72:4e:
c2:be:9d:ec:7b:a3:27:34:a9:9f:72:ce:f4:a5:c3:
80:dd:45:1d:81:51:67:cd:6e:87:56:72:e2:06:40:
c7:76:71:2c:d4:98:c4:1c:44:53:2a:68:96:31:bb:
4e:3a:7b:67:69:b2:b1:bc:9a:45:ff:47:e2:fb:b5:
14:a8:89:6e:75:c3:f4:63:6f:38:d0:19:55:c7:94:
67:71:36:07:2e:9c:a7:a1:3a:d4:10:85:16:81:b3:
e6:7e:d5:3a:b7:fc:38:90:cf:57:66:9c:fc:46:54:
6b:5a:7e:55:8c:9e:0a:14:7f:a6:82:94:c2:1a:f5:
0c:3e:fc:ce:c1:f0:2d:59:69:f1:bc:a4:11:0b:5e:
0c:0d:3c:ef:eb:01:fb:74:9a:a3:53:63:bd:a3:9f:
ed:2d:96:96:99:fa:78:30:de:df:97:8b:88:fc:8c:
dc:de:c1:61:d8:79:99:36:54:22:cc:c2:f9:79:98:
25:39:3a:fe:1c:cc:e4:70:62:77:8e:1f:5d:c4:d2:
a1:5d:f8:13:b7:68:3c:87:8d:4b:bf:cd:e2:4e:83:
09:34:64:90:5b:97:aa:3f:31:10:8c:00:72:5d:f3:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:31:97:4C:52:A7:1E:9C:2F:03:9C:93:9F:25:73:5D:D9:D4:B0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rwIxl0xSpx6cLwOck58lc13Z1LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.181.0/24
213.209.133.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
6f:33:c0:8d:87:3a:db:8a:c5:78:98:ae:02:d4:f3:aa:e3:f1:
59:41:8d:3d:0b:e5:f2:00:76:53:7f:fe:69:fe:8d:d0:f7:61:
1e:3a:86:86:59:b7:a1:89:0f:a6:51:c0:17:b7:72:77:ca:95:
20:e1:31:18:c9:61:89:b0:5e:73:b3:05:18:0f:18:00:36:75:
4e:0f:0d:69:a0:86:15:d4:59:66:30:38:ea:33:a1:d9:a5:81:
9d:54:25:34:73:db:9a:af:5e:64:30:91:e7:cd:6a:56:25:9d:
16:c5:f0:a9:3e:ac:fd:8a:b3:4f:8c:b4:6d:38:2a:54:8f:87:
c4:68:15:e3:01:a0:61:c0:88:1e:51:f7:eb:ae:9e:67:7b:25:
da:c2:9c:79:86:04:6a:a4:34:38:b3:ba:66:e2:13:4d:a2:f0:
ad:3f:9a:d0:df:7a:04:7a:bb:77:52:9f:b5:b4:e8:4d:b4:fb:
8c:19:5b:e0:1f:12:f2:b9:34:13:cf:0b:a0:13:61:a6:53:f6:
fb:d7:eb:96:ed:19:8f:be:5c:7a:44:70:31:d5:26:d1:3f:b3:
af:8c:ab:41:4c:21:50:4b:cf:de:3a:a8:76:bc:24:04:6f:84:
45:58:d0:c4:2f:48:ce:41:99:cd:3e:88:0f:fb:af:a1:26:a1:
d4:d0:96:2d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaCv0VdXaZwuQRB1Bnav2OlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwOTE3MTQ0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjAyMzE5NzRjNTJhNzFlOWMyZjAzOWM5MzlmMjU3MzVkZDlkNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDk3ZhnoECbmo8WN0D3UiorqF+k7
Y/pykWmpck7Cvp3se6MnNKmfcs70pcOA3UUdgVFnzW6HVnLiBkDHdnEs1JjEHERT
KmiWMbtOOntnabKxvJpF/0fi+7UUqIludcP0Y2840BlVx5RncTYHLpynoTrUEIUW
gbPmftU6t/w4kM9XZpz8RlRrWn5VjJ4KFH+mgpTCGvUMPvzOwfAtWWnxvKQRC14M
DTzv6wH7dJqjU2O9o5/tLZaWmfp4MN7fl4uI/Izc3sFh2HmZNlQizML5eZglOTr+
HMzkcGJ3jh9dxNKhXfgTt2g8h41Lv83iToMJNGSQW5eqPzEQjAByXfNbswIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFK8CMZdMUqcenC8DnJOfJXNd2dSwMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvcndJeGwweFNweDZjTHdPY2s1OGxjMTNaMUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQATVq1AwQA
1dGFMAwDBADV0ZkDBADV0ZowDQYJKoZIhvcNAQELBQADggEBAG8zwI2HOtuKxXiY
rgLU86rj8VlBjT0L5fIAdlN//mn+jdD3YR46hoZZt6GJD6ZRwBe3cnfKlSDhMRjJ
YYmwXnOzBRgPGAA2dU4PDWmghhXUWWYwOOozodmlgZ1UJTRz25qvXmQwkefNalYl
nRbF8Kk+rP2Ks0+MtG04KlSPh8RoFeMBoGHAiB5R9+uunmd7JdrCnHmGBGqkNDiz
umbiE02i8K0/mtDfegR6u3dSn7W06E20+4wZW+AfEvK5NBPPC6ATYaZT9vvX65bt
GY++XHpEcDHVJtE/s6+Mq0FMIVBLz946qHa8JARvhEVY0MQvSM5Bmc0+iA/7r6Em
odTQli0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:53 2026 by rpki-client