Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8oKJbrOA0rsDp7n33mWPcysZ3VU.roa
File: 8oKJbrOA0rsDp7n33mWPcysZ3VU.roa (raw, json)
Hash identifier: a19m/8qSvSyLhLUWr6FbKES7iV/eFkGEIZn7b/NOXgI=
Subject key identifier: F2:82:89:6E:B3:80:D2:BB:03:A7:B9:F7:DE:65:8F:73:2B:19:DD:55
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A17990096977B95888B9393BB971A9409B
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8oKJbrOA0rsDp7n33mWPcysZ3VU.roa
Signing time: Mon 26 Oct 2026 18:54:05 +0000
ROA not before: Mon 26 Oct 2026 18:54:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134176
IP address blocks: 77.90.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:90:09:69:77:b9:58:88:b9:39:3b:b9:71:a9:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 26 18:54:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f282896eb380d2bb03a7b9f7de658f732b19dd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:03:09:7d:c0:8a:ab:9e:cc:d2:09:cb:f9:
f4:cb:05:f4:ee:64:6d:00:47:a1:55:07:51:25:80:
bf:a9:54:0f:7e:b1:a2:55:52:bb:d6:68:05:ae:1a:
57:0d:e6:48:3d:67:ef:f9:4c:24:d7:4e:f9:69:e3:
33:66:d1:0e:2c:d0:9e:a1:31:5e:69:f9:10:70:9b:
f3:85:ea:2e:98:85:42:8c:94:f5:7f:59:3c:ec:e7:
2b:41:a9:39:4e:fb:95:ae:8b:82:b5:88:2f:40:6d:
62:59:ba:c5:1e:e9:e8:26:aa:05:0f:3c:a3:ef:24:
44:9a:cd:31:f3:3b:c8:cb:18:84:39:a1:53:ee:a6:
55:d2:4e:32:1d:ad:e7:84:ac:35:84:39:2b:05:b0:
55:1f:3e:e8:da:be:2e:ec:20:26:ec:dc:f3:cc:31:
dd:fe:ae:04:4d:30:2d:a3:2d:8f:d0:b8:33:17:f0:
eb:c0:0c:7c:4e:59:2e:d7:76:26:d1:10:45:2f:94:
4e:dd:60:35:79:37:9d:0b:d5:05:13:6c:ac:4c:19:
04:fe:68:5e:6e:df:fd:51:1c:2d:93:69:dc:3e:72:
a6:16:1a:1b:a0:ab:61:87:ee:e0:0b:ab:99:1e:53:
ce:11:cb:01:70:87:19:26:c4:db:4e:bd:c7:09:f3:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:89:6E:B3:80:D2:BB:03:A7:B9:F7:DE:65:8F:73:2B:19:DD:55
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8oKJbrOA0rsDp7n33mWPcysZ3VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.154.0/24
Signature Algorithm: sha256WithRSAEncryption
78:db:e7:1a:3d:34:ee:7c:3f:4c:0e:6b:15:50:3d:44:44:b0:
52:ab:90:10:03:b5:9e:02:d6:08:08:ed:74:23:bf:a6:1b:4d:
fc:58:4d:30:12:e6:5c:c3:d0:ce:79:ed:9c:f8:9f:dd:a9:86:
22:02:54:94:4e:b2:44:54:c1:d0:29:8b:55:d2:f3:90:5f:41:
f6:ce:82:e3:c7:67:7c:aa:09:ff:8b:31:dc:81:79:5c:2e:60:
64:70:da:d0:5b:e8:db:5b:06:4c:ff:d1:36:a5:e3:48:3a:76:
be:41:05:5e:59:1a:20:1a:24:20:47:8e:85:4a:a5:61:08:ea:
fb:46:59:eb:ef:7b:16:85:11:87:6c:46:47:95:20:67:d1:ea:
bf:dd:ef:33:1e:84:49:11:e4:71:b7:b8:69:49:f7:06:b2:28:
b1:ff:fd:09:b6:56:10:49:df:c6:20:2c:18:5b:ac:8c:33:57:
1d:d9:01:83:c6:4b:fd:7f:85:03:13:a3:1f:ba:60:6b:d2:cd:
25:b7:f0:c3:38:b7:c0:25:02:6d:16:53:41:80:41:4b:7a:14:
10:78:9b:95:ab:70:e0:39:3f:07:9c:6a:2e:d6:b9:a5:dd:86:
34:d6:85:43:49:60:46:14:bb:96:c9:8f:19:e2:e8:23:26:64:
32:7a:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:04:10 2026 by rpki-client