Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa
File: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (raw, json)
Hash identifier: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=
Subject key identifier: DA:53:A4:A5:20:A8:F2:C6:4B:30:13:0C:DC:B3:E8:6A:A5:7D:CF:96
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019E933C1B5C9C89EC00696749B79D893546
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa
Signing time: Thu 04 Jun 2026 15:24:10 +0000
ROA not before: Thu 04 Jun 2026 15:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 77.90.141.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:3c:1b:5c:9c:89:ec:00:69:67:49:b7:9d:89:35:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 4 15:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da53a4a520a8f2c64b30130cdcb3e86aa57dcf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:55:f0:93:24:b7:a6:ad:d4:24:68:5c:06:
e8:bf:44:88:db:de:31:ee:1b:ab:ed:49:01:2c:3c:
47:26:1a:2c:d1:35:c9:d2:91:af:0e:a5:b3:85:bb:
a3:0e:9e:3d:51:7c:95:e3:3c:05:2c:c9:ef:f4:0a:
7c:db:a5:b5:a6:37:02:49:30:66:8e:eb:6e:dd:7e:
f3:90:1a:35:15:34:93:73:f3:ef:c3:b6:a9:3e:f0:
e1:da:3d:56:45:cd:cd:cd:4c:0c:72:86:91:4b:2c:
31:27:42:9d:93:37:0a:35:1f:d8:34:56:34:c8:40:
85:07:89:9f:f1:61:08:d9:2e:fb:f0:b4:02:eb:ed:
04:07:55:37:86:32:89:d5:55:e2:b2:20:db:13:f2:
2f:14:36:75:3f:60:ae:7f:bb:52:7a:8f:41:56:5f:
32:c3:8f:8b:da:5b:48:8e:9d:b3:84:39:47:ff:db:
c0:a3:8c:07:96:e1:0f:23:8c:7f:54:15:f6:ce:a1:
0a:45:a5:ab:be:63:2d:32:bc:f7:d0:b5:47:ee:80:
30:a2:07:72:0d:7f:2b:b3:17:13:75:03:29:89:75:
ac:73:d1:28:d9:e7:d3:16:62:8c:8a:1f:61:37:5b:
a2:38:20:90:68:cc:c7:fd:8f:de:59:3f:e4:de:4b:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:A4:A5:20:A8:F2:C6:4B:30:13:0C:DC:B3:E8:6A:A5:7D:CF:96
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.141.0-77.90.142.255
Signature Algorithm: sha256WithRSAEncryption
b7:25:38:40:82:1c:82:58:84:6f:2e:5e:8a:2c:16:23:53:5d:
cd:9b:78:f6:14:a4:0f:ae:3a:f2:13:cd:25:e8:87:09:94:52:
68:82:87:d1:00:3f:68:20:08:d0:60:c4:59:96:13:88:75:86:
79:0a:99:65:40:18:45:fe:56:5e:84:a8:72:82:a0:eb:eb:74:
48:c6:c1:88:92:58:ef:d0:4b:6a:47:eb:0d:f8:1e:c4:86:ca:
95:a0:6e:13:44:51:01:44:a2:cd:d2:65:b9:6e:70:05:39:25:
ba:f9:74:ec:05:15:6f:6f:bf:76:fe:e3:ed:96:09:7b:fe:5f:
12:fd:37:69:0d:68:e8:f2:62:14:3e:0d:c0:83:1a:e4:37:51:
98:3d:cc:77:3b:7d:14:fc:8d:dc:e0:12:8f:55:6f:d9:aa:68:
cd:47:eb:80:a4:7a:2d:18:70:51:f3:42:bf:8d:ec:91:24:e9:
b4:e9:a9:fc:67:6f:42:22:ef:eb:b3:08:6c:8d:b1:eb:57:d2:
4e:63:79:e3:a9:e9:be:f7:d6:2e:ca:05:1d:15:8c:31:b0:fd:
bd:2e:e0:34:43:8e:99:d0:80:3a:68:6a:44:a7:24:f3:f8:35:
97:f0:14:e7:eb:c3:fe:23:1f:d1:09:de:c5:bf:17:2c:8b:76:
3e:ce:8c:5f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ6TPBtcnInsAGlnSbediTVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNjA0MTUyNDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTUzYTRhNTIwYThmMmM2NGIzMDEzMGNkY2IzZTg2YWE1N2RjZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl9V8JMkt6at1CRoXAbov0SI294x
7hur7UkBLDxHJhos0TXJ0pGvDqWzhbujDp49UXyV4zwFLMnv9Ap826W1pjcCSTBm
jutu3X7zkBo1FTSTc/Pvw7apPvDh2j1WRc3NzUwMcoaRSywxJ0KdkzcKNR/YNFY0
yECFB4mf8WEI2S778LQC6+0EB1U3hjKJ1VXisiDbE/IvFDZ1P2Cuf7tSeo9BVl8y
w4+L2ltIjp2zhDlH/9vAo4wHluEPI4x/VBX2zqEKRaWrvmMtMrz30LVH7oAwogdy
DX8rsxcTdQMpiXWsc9Eo2efTFmKMih9hN1uiOCCQaMzH/Y/eWT/k3kvAIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNpTpKUgqPLGSzATDNyz6Gqlfc+WMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMmxPa3BTQ284c1pMTUJNTTNMUG9hcVY5ejVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNWo0D
BABNWo4wDQYJKoZIhvcNAQELBQADggEBALclOECCHIJYhG8uXoosFiNTXc2bePYU
pA+uOvITzSXohwmUUmiCh9EAP2ggCNBgxFmWE4h1hnkKmWVAGEX+Vl6EqHKCoOvr
dEjGwYiSWO/QS2pH6w34HsSGypWgbhNEUQFEos3SZblucAU5Jbr5dOwFFW9vv3b+
4+2WCXv+XxL9N2kNaOjyYhQ+DcCDGuQ3UZg9zHc7fRT8jdzgEo9Vb9mqaM1H64Ck
ei0YcFHzQr+N7JEk6bTpqfxnb0Ii7+uzCGyNsetX0k5jeeOp6b731i7KBR0VjDGw
/b0u4DRDjpnQgDpoakSnJPP4NZfwFOfrw/4jH9EJ3sW/FyyLdj7OjF8=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:51 2026 by rpki-client