Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B90w4YB5rd-JM3tWy87r4Fng-Yg.roa
File: B90w4YB5rd-JM3tWy87r4Fng-Yg.roa (raw, json)
Hash identifier: lgXttdbNe5dP/8U1LIzq25Wt/KOsPslz7Tg6INCGxH0=
Subject key identifier: 07:DD:30:E1:80:79:AD:DF:89:33:7B:56:CB:CE:EB:E0:59:E0:F9:88
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A034F77751C9374E2F63F9BE4D899C4CE3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B90w4YB5rd-JM3tWy87r4Fng-Yg.roa
Signing time: Mon 24 Aug 2026 18:10:28 +0000
ROA not before: Mon 24 Aug 2026 18:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6718
IP address blocks: 80.96.42.0/24 maxlen: 24
80.97.49.0/24 maxlen: 24
81.180.207.0/24 maxlen: 24
85.120.222.0/24 maxlen: 24
85.120.223.0/24 maxlen: 24
85.120.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:f7:77:51:c9:37:4e:2f:63:f9:be:4d:89:9c:4c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 24 18:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07dd30e18079addf89337b56cbceebe059e0f988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:ac:21:3c:b1:7e:5d:36:47:3d:b8:0d:93:
10:bd:b8:b4:70:c2:69:64:48:25:5c:08:46:27:7b:
ec:fe:da:ee:b6:93:ee:9d:66:8d:62:32:a7:27:53:
41:d9:23:f2:10:82:bf:11:cd:29:b7:e6:f9:5e:cb:
c4:f8:79:53:c3:7b:42:0b:24:24:04:aa:64:13:45:
21:47:9b:4e:fd:2c:ab:1c:bd:f6:99:9a:07:b5:82:
08:39:dd:dc:20:8e:47:cd:21:62:2e:95:e4:b2:9e:
e4:f1:a5:84:a6:bf:9e:17:d4:17:ec:d3:2c:15:c1:
a0:0b:c0:da:bd:12:c4:9c:96:12:8d:f9:69:b5:72:
c8:07:4e:91:b8:52:70:37:29:15:e4:02:b9:13:68:
ff:74:c5:79:72:df:c1:44:23:39:1e:c5:a6:59:0e:
67:cd:b9:e8:fe:26:58:34:4f:1e:d5:d9:dd:74:0a:
74:a5:d8:35:4e:cc:18:78:f2:4a:4e:be:fa:1a:20:
6d:9c:0f:23:e0:2e:80:60:82:8d:8a:81:a2:e4:74:
22:01:56:c4:bc:a1:de:a1:20:4c:93:c8:0b:12:c1:
61:38:3f:c0:a0:1b:e2:8a:45:b2:8c:31:05:45:1a:
52:98:66:1a:84:28:af:ef:30:86:70:82:a1:16:28:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:30:E1:80:79:AD:DF:89:33:7B:56:CB:CE:EB:E0:59:E0:F9:88
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B90w4YB5rd-JM3tWy87r4Fng-Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.42.0/24
80.97.49.0/24
81.180.207.0/24
85.120.222.0/23
85.120.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:07:bf:70:e7:29:4d:e8:9c:60:1a:b3:33:b9:b5:3a:65:8c:
a2:a9:bc:e1:e9:c2:92:c0:f9:db:94:e5:9a:8c:f9:3c:4c:d0:
33:2e:ef:35:16:21:f2:a5:be:cf:24:2f:65:f1:1b:3d:2b:e7:
a6:65:4c:90:f5:07:44:40:bc:9d:b6:eb:a4:20:72:78:7f:6f:
0e:ba:c8:88:7e:ef:ab:3b:bf:45:8b:36:28:0b:04:e0:ec:88:
b6:98:0f:43:59:2a:e3:32:8c:cd:52:da:74:b3:fd:1f:56:4a:
99:61:44:99:30:b6:93:7b:9c:d6:9c:61:ad:7b:63:98:a4:8f:
a7:f9:1f:d0:bf:b5:a5:60:9a:58:5a:fa:be:47:c3:22:fb:46:
82:db:3d:e7:25:17:db:3c:8a:d4:c8:02:b8:f9:b3:00:c3:fb:
f4:a9:1f:ba:88:67:52:fe:07:72:09:a9:39:92:0d:72:7d:44:
7b:d6:14:a6:21:75:1d:0a:f1:ed:9b:ed:72:5c:fe:d4:ff:07:
cd:d2:25:45:55:7a:29:45:3d:e0:71:03:9b:c3:a8:0b:64:22:
12:ab:21:ca:c9:b0:cb:05:0f:aa:b0:6f:1a:49:ab:4c:19:07:
41:3b:b9:8d:3e:a8:31:9c:6a:1c:36:52:c4:11:73:63:3d:9f:
b8:a4:fa:ba
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaA093dRyTdOL2P5vk2JnEzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwODI0MTgxMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2RkMzBlMTgwNzlhZGRmODkzMzdiNTZjYmNlZWJlMDU5ZTBmOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKWsITyxfl02Rz24DZMQvbi0cMJp
ZEglXAhGJ3vs/trutpPunWaNYjKnJ1NB2SPyEIK/Ec0pt+b5XsvE+HlTw3tCCyQk
BKpkE0UhR5tO/SyrHL32mZoHtYIIOd3cII5HzSFiLpXksp7k8aWEpr+eF9QX7NMs
FcGgC8DavRLEnJYSjflptXLIB06RuFJwNykV5AK5E2j/dMV5ct/BRCM5HsWmWQ5n
zbno/iZYNE8e1dnddAp0pdg1TswYePJKTr76GiBtnA8j4C6AYIKNioGi5HQiAVbE
vKHeoSBMk8gLEsFhOD/AoBviikWyjDEFRRpSmGYahCiv7zCGcIKhFig9owIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAfdMOGAea3fiTN7VsvO6+BZ4PmIMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvQjkwdzRZQjVyZC1KTTN0V3k4N3I0Rm5nLVlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUGAqAwQA
UGExAwQAUbTPAwQBVXjeAwQAVXjlMA0GCSqGSIb3DQEBCwUAA4IBAQCdB79w5ylN
6JxgGrMzubU6ZYyiqbzh6cKSwPnblOWajPk8TNAzLu81FiHypb7PJC9l8Rs9K+em
ZUyQ9QdEQLydtuukIHJ4f28OusiIfu+rO79FizYoCwTg7Ii2mA9DWSrjMozNUtp0
s/0fVkqZYUSZMLaTe5zWnGGte2OYpI+n+R/Qv7WlYJpYWvq+R8Mi+0aC2z3nJRfb
PIrUyAK4+bMAw/v0qR+6iGdS/gdyCak5kg1yfUR71hSmIXUdCvHtm+1yXP7U/wfN
0iVFVXopRT3gcQObw6gLZCISqyHKybDLBQ+qsG8aSatMGQdBO7mNPqgxnGocNlLE
EXNjPZ+4pPq6
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:46:14 2026 by rpki-client