Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-cCN5fKkBx-1CnMu2h0S360pudU.roa
File: 1-cCN5fKkBx-1CnMu2h0S360pudU.roa (raw, json)
Hash identifier: SfNQXzL9IxP/9ufOvlCpE32kV3j+g2yy7+anpcxEBEY=
Subject key identifier: F9:C0:8D:E5:F2:A4:07:1F:B5:0A:73:2E:DA:1D:12:DF:AD:29:B9:D5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A17A6F6E3E7622F44D6110F844BF74D985
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-cCN5fKkBx-1CnMu2h0S360pudU.roa
Signing time: Mon 26 Oct 2026 22:58:05 +0000
ROA not before: Mon 26 Oct 2026 22:58:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 77.90.139.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.190.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:6f:6e:3e:76:22:f4:4d:61:10:f8:44:bf:74:d9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 26 22:58:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9c08de5f2a4071fb50a732eda1d12dfad29b9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:29:66:5f:e9:19:82:ae:ad:f0:fa:07:2a:
fc:b7:b2:06:fc:0d:6f:45:a7:5b:f8:d1:68:d9:80:
e0:ba:bd:fc:59:cc:0b:5c:de:29:14:8e:06:5f:42:
7f:67:1f:34:bd:a2:e6:c3:f9:d3:34:a5:6f:b9:cc:
02:e0:e5:46:7e:ef:63:cb:d3:7a:e8:2a:d4:cc:7d:
51:02:49:a3:2e:cb:05:e2:98:c4:a4:42:34:3b:a0:
65:76:d6:08:11:9b:37:1b:59:da:46:53:9b:7c:39:
08:7e:a0:36:80:b2:2d:f1:26:96:c4:00:df:f1:b1:
88:06:e1:14:a4:7f:65:41:0c:2e:db:49:d1:c8:fc:
7f:66:0c:ab:f7:62:2f:2f:f0:10:15:2e:38:13:26:
1d:c6:f5:ad:9e:ea:a2:de:6f:a0:77:ca:60:94:61:
70:9a:2d:19:37:03:bd:a3:d4:a3:0d:67:1e:9a:8d:
71:e6:73:ef:a8:ca:66:b2:3f:8a:9f:44:48:e5:c2:
27:01:8a:36:f1:85:e1:3f:2d:25:99:a4:04:b1:9c:
1c:63:e6:ae:0c:a8:95:e7:a2:b5:9a:f8:18:dc:b3:
94:c0:fc:49:2b:e9:db:b3:7f:5f:10:33:78:45:32:
d7:7c:59:a1:01:b2:0d:5b:75:be:53:e2:20:d0:89:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:8D:E5:F2:A4:07:1F:B5:0A:73:2E:DA:1D:12:DF:AD:29:B9:D5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-cCN5fKkBx-1CnMu2h0S360pudU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.139.0/24
77.90.148.0/24
77.90.156.0/24
77.90.170.0/24
77.90.190.0/23
213.209.139.0/24
213.209.141.0/24
213.209.143.0/24
213.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:90:df:c6:77:cf:79:93:0c:6b:cf:1c:c6:91:57:8b:e2:4c:
75:1c:36:75:74:1c:99:88:97:ef:ef:48:8d:0d:a0:50:29:de:
84:c7:62:d6:2b:89:d2:98:66:c1:10:54:8e:29:fc:42:b6:61:
f5:71:fb:08:ca:8d:1c:2a:5f:00:a4:fe:60:24:06:b9:e1:a0:
e1:1b:59:bd:99:e3:fb:92:60:1d:e5:7b:1f:91:8d:6d:f2:3a:
a5:5b:3b:86:86:05:f8:0d:8e:f4:ce:de:6f:2c:b3:a6:54:ca:
da:09:da:2e:ca:13:65:1a:d9:c2:6b:1f:af:7e:da:49:90:72:
dc:d2:e3:fb:9c:57:82:c8:d9:e3:0a:63:b3:dd:9f:4b:c0:ac:
2d:eb:45:a4:d0:89:ae:37:c2:8c:b7:4f:2e:7d:79:a1:2b:0d:
66:2c:7d:82:c3:44:91:e7:f6:d6:ac:6d:0a:cd:d1:08:40:2b:
60:d8:d9:f2:f7:3b:2f:b5:7c:86:0e:66:94:e7:83:12:50:32:
27:ae:02:9c:81:5c:33:e6:7f:be:45:50:9a:a2:68:ab:9a:70:
b1:55:8f:a7:b9:41:71:e1:e8:2a:07:79:15:5a:a6:28:93:1b:
b0:29:1a:15:03:76:37:9b:34:a8:dd:3f:61:73:1b:2f:43:69:
f4:47:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:03:51 2026 by rpki-client