Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6kj0WBo7RhYuoa_ZcllhbwuTJwk.roa
File: 6kj0WBo7RhYuoa_ZcllhbwuTJwk.roa (raw, json)
Hash identifier: zUUP1K51jtMe4GjcoKsyx90pIO4xCfmIgVqgS4RaZWQ=
Subject key identifier: EA:48:F4:58:1A:3B:46:16:2E:A1:AF:D9:72:59:61:6F:0B:93:27:09
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019FB9D47299168FEE399C0791F823BF52CC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6kj0WBo7RhYuoa_ZcllhbwuTJwk.roa
Signing time: Fri 31 Jul 2026 20:18:55 +0000
ROA not before: Fri 31 Jul 2026 20:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 77.90.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:d4:72:99:16:8f:ee:39:9c:07:91:f8:23:bf:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 31 20:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea48f4581a3b46162ea1afd97259616f0b932709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:66:c6:8a:92:2a:1b:ca:e9:15:35:39:da:
9b:dd:95:f5:1e:f3:95:a5:e4:2a:14:45:f4:e3:cf:
ff:0b:97:49:38:32:bb:e1:9c:1f:96:08:ed:7a:7c:
2b:fd:64:a3:42:b4:63:53:96:f2:65:82:71:4e:d3:
96:a7:f9:7b:34:cc:8b:e7:07:a9:7e:ce:cb:f1:f7:
eb:3a:50:c4:b5:dd:11:4f:fe:56:c7:55:23:a4:95:
bb:e0:64:81:d5:a6:19:da:3e:49:c5:d6:7c:6c:87:
fe:d7:ac:c8:a8:61:40:50:c9:16:f7:f0:8b:7f:7e:
07:3a:4b:df:51:cd:da:f3:7a:0a:85:bf:a2:62:de:
4d:65:26:53:bd:22:c3:9d:19:54:35:b3:83:b8:c6:
fc:2c:03:97:b8:91:4a:a1:78:77:ae:88:c4:b3:54:
ed:55:46:45:8f:92:9e:f9:a7:64:6c:3a:c9:10:42:
8f:27:b3:70:0f:e1:54:0e:1c:d3:7e:81:42:6b:77:
74:f2:8d:f5:ff:c3:0d:36:74:d6:e7:c9:23:37:27:
9d:09:f4:b9:73:c6:01:69:2a:3f:cd:03:a3:46:c5:
9d:3b:8c:4b:7c:2f:da:8c:45:e1:b2:06:8b:ab:82:
2f:e4:bd:c8:d3:84:ed:1f:0f:a3:09:82:84:09:6e:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:F4:58:1A:3B:46:16:2E:A1:AF:D9:72:59:61:6F:0B:93:27:09
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6kj0WBo7RhYuoa_ZcllhbwuTJwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.139.0/24
213.209.141.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0d:1a:72:c3:1a:da:cd:fc:ae:8b:cc:b6:2b:33:c7:ef:d4:
f9:9f:44:35:56:86:36:71:e3:3f:b5:4f:f4:88:ec:2d:6b:5c:
ee:82:e6:30:7c:24:c6:22:15:7b:3e:09:bc:d1:82:e1:85:9e:
7c:d8:5c:78:5b:09:86:ea:e1:f8:62:27:58:ce:61:f2:69:40:
d6:7a:0c:ac:3b:31:8e:6a:b6:62:99:c2:97:ae:29:3c:5c:e4:
9e:83:0b:5f:7a:de:3d:89:e6:1c:26:20:09:a2:39:63:16:a8:
e0:3d:81:cb:7d:03:20:a1:30:78:62:06:2f:b4:5c:c7:57:24:
7b:66:bf:b5:1c:19:90:7b:6c:3e:2a:6a:29:44:a6:2a:a7:b7:
9b:5d:fd:f0:7c:78:22:8b:b2:08:6a:b7:7c:89:69:37:67:ac:
10:b4:dd:fb:57:3d:99:e7:cd:0b:cf:7d:61:e8:54:7e:97:88:
44:3a:04:99:39:b1:b9:01:4f:71:2b:cc:09:3e:f5:82:d9:36:
ed:e6:64:7d:fc:b3:4d:c2:bf:b3:22:4a:6b:76:cd:da:3e:f0:
40:d5:52:39:8e:af:16:8d:a9:06:a9:75:23:91:20:23:75:ee:
16:29:b9:ea:88:db:be:b0:e6:96:85:aa:be:85:6f:b1:39:6e:
b4:ea:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:31:04 2026 by rpki-client