Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7Sh8qXKnoV8f_LGY164eeeVzWwY.roa
File: 7Sh8qXKnoV8f_LGY164eeeVzWwY.roa (raw, json)
Hash identifier: h/eQK/wLOp5ta++3VeBPvQxzXRr/Q6UnPMs4Xvr7Ojc=
Subject key identifier: ED:28:7C:A9:72:A7:A1:5F:1F:FC:B1:98:D7:AE:1E:79:E5:73:5B:06
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A12036F732BDDFF5265E1B7812EB7D616C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7Sh8qXKnoV8f_LGY164eeeVzWwY.roa
Signing time: Fri 09 Oct 2026 10:30:35 +0000
ROA not before: Fri 09 Oct 2026 10:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41998
IP address blocks: 77.90.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:36:f7:32:bd:df:f5:26:5e:1b:78:12:eb:7d:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 9 10:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed287ca972a7a15f1ffcb198d7ae1e79e5735b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:7c:f2:8f:e1:ad:2c:05:97:28:9b:75:d8:
65:72:b6:5f:ce:c3:6d:bf:45:e8:a1:af:b1:c1:0f:
38:af:4e:a8:4d:bc:ef:87:b9:83:6b:07:6b:b8:88:
71:1a:18:66:ed:a6:ca:b6:58:ac:e5:ec:8f:bb:ef:
5d:fa:be:33:84:f8:9d:b0:8d:e5:1b:9c:93:8b:af:
95:f4:82:93:87:f0:fb:c7:ce:83:00:2c:07:5f:bb:
e6:00:c9:b0:ff:88:dd:86:02:94:9c:c1:fb:24:f0:
51:68:cf:f6:69:79:37:1a:bc:d8:ea:57:90:78:d4:
98:20:24:47:5b:ec:61:f7:a4:d3:74:c0:9e:38:a4:
02:12:29:15:f4:cf:0c:23:07:df:1d:b8:ed:3e:ad:
8d:ff:12:6f:c0:fd:0f:f3:55:a1:e4:3d:df:f1:a6:
6f:d7:4b:43:c6:c5:55:2c:3c:68:54:c1:54:e2:b0:
f9:64:9b:4e:5d:e2:17:4c:44:9a:55:dd:70:b0:4f:
54:c3:e5:65:25:c3:28:c1:22:ad:d0:a3:db:00:a7:
59:25:f0:09:09:2b:0f:68:0c:ca:48:f1:1b:f9:39:
a7:9c:67:0d:da:d2:e7:c3:ce:b1:55:b3:83:c7:3c:
32:aa:fb:63:dc:e0:46:74:53:a8:5e:ae:a1:11:3a:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:28:7C:A9:72:A7:A1:5F:1F:FC:B1:98:D7:AE:1E:79:E5:73:5B:06
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7Sh8qXKnoV8f_LGY164eeeVzWwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:01:21:28:14:52:56:ae:1f:07:aa:49:67:43:31:af:55:35:
c5:c2:12:f9:56:ba:9b:7f:9d:8f:0a:ba:55:20:1a:07:c0:3c:
72:a3:b7:33:e3:3b:66:10:60:75:a5:56:26:89:70:7c:8b:ae:
88:e3:63:2e:be:4c:da:fe:1d:37:b5:53:9d:76:13:df:42:d8:
26:2b:9d:76:0f:9c:e0:3d:de:9c:ce:63:1c:fa:c7:3b:04:0b:
e9:2f:84:81:12:a1:2f:83:9c:6c:88:64:01:fa:59:ac:23:3c:
cc:b1:01:64:cc:72:d7:9d:aa:f9:36:e8:ad:1c:37:7f:ad:72:
6d:7a:6f:e6:93:66:c3:89:54:f3:7d:e0:6f:2a:6a:31:db:32:
f8:64:c3:23:c4:c6:65:7e:fc:b5:be:29:39:dd:4e:32:aa:17:
0a:31:5b:ae:da:c4:d7:54:af:2c:ac:0e:0e:d1:69:0b:de:5f:
37:4d:29:b8:3c:18:11:7e:e0:c9:4b:84:b3:8a:b0:0f:2f:63:
7c:34:5b:9c:36:97:46:ba:b9:2e:20:64:f4:36:63:1e:6f:f0:
e5:4b:83:24:5d:3a:4e:06:cc:86:74:5b:7d:1a:fd:57:54:75:
3a:cf:39:36:56:16:c3:ae:4e:a9:73:da:20:23:d2:6d:5f:5f:
0e:7c:83:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEgNvcyvd/1Jl4beBLrfWFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYxMDA5MTAzMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI4N2NhOTcyYTdhMTVmMWZmY2IxOThkN2FlMWU3OWU1NzM1YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCN88o/hrSwFlyibddhlcrZfzsNt
v0Xooa+xwQ84r06oTbzvh7mDawdruIhxGhhm7abKtlis5eyPu+9d+r4zhPidsI3l
G5yTi6+V9IKTh/D7x86DACwHX7vmAMmw/4jdhgKUnMH7JPBRaM/2aXk3GrzY6leQ
eNSYICRHW+xh96TTdMCeOKQCEikV9M8MIwffHbjtPq2N/xJvwP0P81Wh5D3f8aZv
10tDxsVVLDxoVMFU4rD5ZJtOXeIXTESaVd1wsE9Uw+VlJcMowSKt0KPbAKdZJfAJ
CSsPaAzKSPEb+TmnnGcN2tLnw86xVbODxzwyqvtj3OBGdFOoXq6hETooHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0ofKlyp6FfH/yxmNeuHnnlc1sGMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvN1NoOHFYS25vVjhmX0xHWTE2NGVlZVZ6V3dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqaMA0G
CSqGSIb3DQEBCwUAA4IBAQBdASEoFFJWrh8HqklnQzGvVTXFwhL5Vrqbf52PCrpV
IBoHwDxyo7cz4ztmEGB1pVYmiXB8i66I42Muvkza/h03tVOddhPfQtgmK512D5zg
Pd6czmMc+sc7BAvpL4SBEqEvg5xsiGQB+lmsIzzMsQFkzHLXnar5NuitHDd/rXJt
em/mk2bDiVTzfeBvKmox2zL4ZMMjxMZlfvy1vik53U4yqhcKMVuu2sTXVK8srA4O
0WkL3l83TSm4PBgRfuDJS4SzirAPL2N8NFucNpdGurkuIGT0NmMeb/DlS4MkXTpO
BsyGdFt9Gv1XVHU6zzk2VhbDrk6pc9ogI9JtX18OfINa
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:41 2026 by rpki-client