Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9-qnUIUgALNLXr9kc-W4Rp_ypek.roa
File: 9-qnUIUgALNLXr9kc-W4Rp_ypek.roa (raw, json)
Hash identifier: 0Ht+KbAol8hyl4XyJvy1w5p5czvvmCyS8xC2e+SIbRY=
Subject key identifier: F7:EA:A7:50:85:20:00:B3:4B:5E:BF:64:73:E5:B8:46:9F:F2:A5:E9
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0AFDA7EB048FF83E6D661CEB87FF3B062
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9-qnUIUgALNLXr9kc-W4Rp_ypek.roa
Signing time: Thu 17 Sep 2026 14:52:07 +0000
ROA not before: Thu 17 Sep 2026 14:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.175.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:da:7e:b0:48:ff:83:e6:d6:61:ce:b8:7f:f3:b0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 17 14:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7eaa750852000b34b5ebf6473e5b8469ff2a5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:d8:55:b0:c4:06:1b:21:da:af:eb:6e:65:
35:16:cd:68:a1:ab:ff:70:0e:0d:b8:57:7e:5a:c0:
b9:bb:17:fe:00:43:3b:52:8b:3f:ea:97:cc:09:27:
cb:8e:47:e7:d3:9b:62:b6:2b:a0:1c:6f:49:ad:63:
d9:1e:15:8a:84:c3:65:a4:64:4c:1f:c3:d2:fe:aa:
fd:3f:44:af:d3:4b:69:3d:1d:88:b9:da:b4:56:46:
0b:20:82:83:be:ac:86:b3:99:e5:58:2f:e2:0d:44:
85:f0:b0:4e:49:e5:f3:d7:90:81:0d:02:53:73:94:
d4:01:f0:48:49:b7:ee:81:1a:1b:76:65:ac:f5:15:
2f:a5:1f:14:23:64:38:91:6d:3e:3e:4a:97:c4:d8:
76:91:eb:87:b8:63:84:ea:4d:1d:2d:29:1f:94:ae:
d1:1b:bc:51:80:72:c6:a1:ee:28:e8:ab:5b:9b:c2:
0c:e4:45:7b:76:5c:96:df:58:b4:70:b7:52:f9:95:
a2:e8:da:08:da:c3:9d:8d:14:26:eb:63:1c:87:29:
4a:72:b5:2f:02:14:6b:55:dc:1e:62:3b:17:4c:62:
0b:04:79:92:3a:e2:d2:2e:06:fb:d8:9e:e3:b9:61:
96:10:41:ba:bd:94:54:ef:ab:f8:71:e7:5b:19:f8:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:A7:50:85:20:00:B3:4B:5E:BF:64:73:E5:B8:46:9F:F2:A5:E9
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9-qnUIUgALNLXr9kc-W4Rp_ypek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.175.0/24
77.90.182.0/24
77.90.186.0/24
213.209.129.0/24
213.209.131.0/24
213.209.152.0/24
213.209.155.0/24
Signature Algorithm: sha256WithRSAEncryption
69:49:6d:ff:f4:75:05:c9:27:6f:fe:0a:9e:ac:58:1a:8f:dc:
02:94:37:75:38:58:74:31:e3:4e:b0:a9:63:2d:e8:6e:cc:08:
56:29:70:f5:c2:24:de:0a:6c:aa:e7:e4:57:6e:7d:6c:4b:bd:
8b:5f:3a:b9:26:a5:7d:4f:e7:68:e3:e1:f3:1a:87:e4:fa:95:
8e:8c:0e:8d:08:fe:e9:14:1f:70:5a:78:f5:b7:07:a9:84:1f:
82:7d:ec:f9:f0:bf:99:8a:a0:6b:b7:8b:41:dd:58:5a:6d:38:
d4:92:ce:e7:1d:87:92:e2:7a:1c:89:79:35:d0:d9:61:7c:4b:
3e:d9:3d:6f:d3:de:82:ee:4f:2a:8b:d3:9b:2d:65:b9:55:0d:
d7:1a:08:60:84:0f:c8:fa:95:7f:5d:46:08:b4:6e:56:ea:2e:
d0:ae:d7:7f:80:6f:05:15:dd:4d:83:4a:99:cd:c0:06:b1:3b:
cb:9e:df:a0:08:f7:dc:92:9e:bd:f4:5e:3e:f0:37:25:26:82:
4c:45:09:16:c6:65:ba:c9:6e:8d:4d:cc:3d:52:ac:82:ca:a2:
95:36:4c:1d:56:09:c5:e7:75:13:6a:d4:2a:eb:e9:98:83:bb:
42:8e:48:3d:c0:3d:a9:64:37:21:5f:46:95:1c:1a:5c:d6:6f:
8d:2d:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:06 2026 by rpki-client