Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wQfUOZUDduKHjuN1Q8eC7SmRpHo.roa
File: wQfUOZUDduKHjuN1Q8eC7SmRpHo.roa (raw, json)
Hash identifier: MSpDSRT9tYejkLeNYTeyW7s3nPEinm5HrqujSTSgUwk=
Subject key identifier: C1:07:D4:39:95:03:76:E2:87:8E:E3:75:43:C7:82:ED:29:91:A4:7A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019A2C427176796AB721648E5F5ACAD05C98
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wQfUOZUDduKHjuN1Q8eC7SmRpHo.roa
Signing time: Tue 28 Oct 2025 19:19:03 +0000
ROA not before: Tue 28 Oct 2025 19:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:42:71:76:79:6a:b7:21:64:8e:5f:5a:ca:d0:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 28 19:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c107d439950376e2878ee37543c782ed2991a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:e0:33:91:4b:9c:2d:f8:dc:f4:ba:69:13:
9e:1f:9b:06:fc:dd:0f:64:20:8a:c4:d2:9b:a8:7f:
50:e2:4a:f0:0d:4d:22:f1:e1:fe:b8:26:46:05:cc:
0f:bd:e6:f2:8d:31:fc:17:9c:dd:ee:48:8f:6c:36:
0e:85:d3:1e:ea:2c:43:15:6c:de:08:9d:ea:4f:77:
a1:71:47:64:55:62:cf:78:6f:1c:53:31:c4:1f:9b:
d3:d8:d5:e5:74:9c:09:b4:4b:bf:4e:6c:4d:86:70:
40:bd:2d:d2:a0:c1:b4:84:49:f3:b4:22:86:a9:22:
55:37:df:ce:ee:ab:f4:a1:ce:47:4e:bd:e4:ab:da:
42:6c:af:49:a0:50:fc:6c:b9:86:49:25:0e:6c:01:
01:10:09:ec:c2:c1:aa:a6:63:7d:3c:5d:96:b3:d0:
f3:23:81:2f:76:d9:6e:05:73:4b:93:d1:b4:38:bc:
97:88:45:dc:36:e9:82:49:00:91:39:10:73:6b:ea:
b0:ab:04:70:7f:d4:fa:17:ad:3c:23:c4:4f:f9:84:
b9:d3:ff:9c:f5:5f:98:95:30:7c:f4:95:60:e3:a4:
97:68:70:91:bf:26:9e:a3:a2:f2:6f:2f:c8:42:8b:
6c:55:12:ee:04:37:4f:ef:9b:bd:01:68:9b:f7:c3:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:D4:39:95:03:76:E2:87:8E:E3:75:43:C7:82:ED:29:91:A4:7A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wQfUOZUDduKHjuN1Q8eC7SmRpHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.148.0/24
77.90.156.0/24
77.90.188.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:90:ca:b3:d5:ba:31:86:dd:87:8c:34:4b:80:3c:e9:a0:e2:
0d:13:c7:cf:61:3b:3f:fc:42:37:01:d9:6a:c9:f3:aa:e5:d0:
2b:a8:f1:55:21:54:ad:ff:32:20:74:86:62:51:7a:8c:29:82:
07:31:93:14:82:0c:6c:c1:62:2a:6d:39:03:a4:7a:46:73:fa:
ac:8a:29:88:47:49:eb:75:c0:e3:6d:3f:7a:6e:cd:16:b0:85:
aa:e8:82:c1:2b:4f:f2:e3:83:b6:a5:1f:e1:48:73:4c:4b:46:
98:b4:0f:ab:69:61:3c:b6:82:f8:74:2e:d5:8f:7b:f7:2a:54:
6d:b9:e8:76:5b:5f:c1:c9:60:0c:90:cf:fa:82:13:b7:62:de:
2e:e9:80:9c:2d:d1:74:9e:75:62:ca:24:5c:31:25:17:2f:d8:
49:88:9a:5d:aa:60:3c:ca:9c:4a:65:7c:6d:c8:61:92:9c:0c:
44:df:2d:a8:d9:29:88:9b:90:11:68:28:a2:03:97:d1:ff:16:
65:24:50:57:a9:bf:43:14:43:09:6d:dd:66:7c:df:61:28:64:
21:df:5f:7c:13:95:02:50:0c:a4:48:0c:5d:e6:11:fb:7d:d0:
69:a1:98:dd:00:73:31:d1:df:cb:77:78:2e:eb:f1:d9:17:3f:
ec:cf:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:47 2025 by rpki-client