Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa
File: 5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa (raw, json)
Hash identifier: LJTrOsci6Dw72z3TAo1qYXwRYs/MlFjYW3VDOUG/E6w=
Subject key identifier: E4:24:73:1A:1A:14:FD:EE:DE:05:49:C0:2B:2F:0E:F0:3E:04:B5:09
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A06C740EEAD03F32D4012197A9A8E69ED9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa
Signing time: Fri 04 Sep 2026 12:45:40 +0000
ROA not before: Fri 04 Sep 2026 12:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.159.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:74:0e:ea:d0:3f:32:d4:01:21:97:a9:a8:e6:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 4 12:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e424731a1a14fdeede0549c02b2f0ef03e04b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:b8:2f:52:6d:e5:8b:5c:64:0c:fc:fc:b0:
fb:8e:2e:a5:4f:40:7a:5b:6b:f5:40:29:2a:16:9c:
ef:17:4b:7d:61:b0:2f:2b:d4:94:cc:3a:7a:5e:97:
74:df:6a:57:15:a1:df:b3:86:1b:e7:22:34:24:d9:
dd:0a:cb:0c:5a:2c:72:4b:17:0a:70:14:19:d7:1d:
ab:7c:ee:14:04:62:53:e3:52:ce:0f:43:be:97:33:
68:93:03:4a:1b:c3:9a:d8:df:fc:05:35:37:32:9e:
24:fa:06:e4:c1:66:14:8c:67:8f:01:b4:50:0a:8c:
7f:68:b8:b9:e6:b7:55:31:64:7f:20:10:98:0a:48:
b3:8c:58:36:2c:e4:03:04:d9:ac:06:ab:eb:96:d1:
27:94:bc:7b:51:8f:41:09:60:43:b0:ca:52:b4:9d:
c4:54:f9:a2:ab:3f:7b:b9:8b:96:34:59:14:d6:e0:
f7:6d:01:17:9b:12:20:be:b6:dd:de:30:cc:30:bf:
97:dd:40:c4:e1:e7:bf:14:4f:f0:ea:c7:cc:e4:dd:
2b:d4:12:00:9d:14:4c:6c:c7:7e:e9:d3:ad:c9:d1:
57:82:95:e9:24:ea:52:22:70:71:7f:bb:66:34:4b:
4d:3c:15:98:4d:3a:a3:f2:12:40:84:17:7b:c7:60:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:24:73:1A:1A:14:FD:EE:DE:05:49:C0:2B:2F:0E:F0:3E:04:B5:09
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.148.0/24
77.90.156.0/23
77.90.159.0-77.90.163.255
77.90.165.0-77.90.166.255
77.90.169.0-77.90.172.255
Signature Algorithm: sha256WithRSAEncryption
4b:7b:26:d9:03:d3:e5:40:81:a4:1e:bb:04:b4:c0:fd:f1:64:
dd:15:63:1f:e9:77:f2:64:40:6d:d6:5e:7d:d3:ba:8e:38:cb:
9b:39:9b:ce:48:f0:70:db:c5:5c:c7:e2:71:46:dc:47:bf:8b:
69:50:e9:ce:23:80:7c:52:cb:0b:dd:c4:ab:80:b0:d6:53:95:
60:05:68:f5:65:10:0f:30:e0:d7:ef:60:2b:de:3e:95:84:08:
07:c4:b5:06:64:e0:b9:a3:ea:c0:2a:3f:de:44:b1:fc:f2:d2:
6e:22:9b:7a:43:0d:60:dc:04:f3:6f:eb:34:af:5b:67:e5:db:
06:90:f1:70:07:eb:56:6c:8e:ca:3c:79:36:21:dd:2a:4d:15:
85:6a:e9:f1:81:ce:38:68:f3:20:1f:13:4a:e7:5f:ef:98:43:
a1:e8:10:d6:aa:bb:8d:32:8b:26:ab:74:42:0b:55:e8:a6:30:
b2:e8:a9:68:c2:75:91:12:b3:86:d8:e0:63:07:91:c2:af:7d:
c8:57:ae:94:66:f4:f8:2e:1b:05:97:f7:70:de:2e:8b:02:df:
d2:49:b4:eb:d0:45:54:a3:16:7f:52:98:e7:2b:79:90:03:e9:
87:6e:92:61:41:f7:9a:c8:ce:2e:f6:f2:32:83:9e:9e:1b:80:
6e:ac:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:41 2026 by rpki-client