Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GLqdFHyBNivF0Mu23wp_efQJ1Yw.roa
File: GLqdFHyBNivF0Mu23wp_efQJ1Yw.roa (raw, json)
Hash identifier: CVgYAd+e1P8gd4vLjfRU6ueccV4oKkBA5gUTEDdtI6c=
Subject key identifier: 18:BA:9D:14:7C:81:36:2B:C5:D0:CB:B6:DF:0A:7F:79:F4:09:D5:8C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A03E8040D79D786FC4E97B8403374F50E1
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GLqdFHyBNivF0Mu23wp_efQJ1Yw.roa
Signing time: Wed 26 Aug 2026 14:36:27 +0000
ROA not before: Wed 26 Aug 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 77.90.181.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:80:40:d7:9d:78:6f:c4:e9:7b:84:03:37:4f:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 26 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ba9d147c81362bc5d0cbb6df0a7f79f409d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:e3:ea:bb:4b:77:14:11:2c:2d:96:23:8a:
57:56:8a:8a:fb:5c:9c:fc:01:d3:39:bc:fe:f6:4b:
2c:ba:b3:1f:03:11:49:27:53:d1:c1:b2:9b:ca:38:
d8:87:41:78:d6:c1:18:ba:67:92:2b:af:71:52:6c:
72:98:c7:7b:be:95:a9:d6:c1:9d:aa:af:6c:0a:eb:
3e:e3:3b:a2:08:b2:cd:17:32:1f:f4:02:85:e5:b8:
6f:2c:8b:4c:87:f7:f7:25:cb:c8:99:77:b9:fd:ea:
9e:b2:f2:f0:56:b1:15:d0:e4:1f:30:37:d5:64:d3:
36:f1:a7:63:95:7f:2e:27:6b:1c:60:4e:fe:c0:49:
21:11:c2:7a:4c:04:45:57:9d:b1:75:1b:c9:b3:be:
d4:9a:c7:f8:ba:22:87:ae:44:66:02:59:25:58:88:
41:33:8e:61:f9:e9:99:84:21:f9:be:75:b8:4a:9a:
56:5d:6d:da:12:74:7d:ba:16:29:5c:d4:c6:3f:9c:
2d:6c:03:3c:bd:1d:19:8e:8d:8c:6d:0b:7e:9f:4a:
9b:00:3f:d3:60:ae:87:41:05:c5:a5:cd:87:db:ba:
7c:82:9f:56:40:b6:0e:d1:8a:8a:cc:ac:c0:55:2b:
fc:e0:98:cf:72:bd:0c:32:69:5f:1e:4b:42:1e:de:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:9D:14:7C:81:36:2B:C5:D0:CB:B6:DF:0A:7F:79:F4:09:D5:8C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GLqdFHyBNivF0Mu23wp_efQJ1Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.181.0/24
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
1e:d6:5f:c9:b0:f7:f2:b2:a9:a4:9e:e6:07:b2:3f:be:98:af:
c5:ce:93:70:d2:95:09:eb:1d:28:6d:21:5e:63:46:48:2c:8d:
84:6f:51:fd:48:09:c8:38:38:18:4a:7a:44:e3:1d:1b:7b:7b:
cd:aa:51:1e:1c:f1:a8:9c:b1:14:bc:fb:a9:4d:72:a8:01:60:
24:fd:6d:e3:91:ff:3f:d7:49:f6:ac:67:4e:3b:7c:f5:08:30:
01:83:1a:5b:af:0e:5c:13:bd:c4:7d:b7:a5:1a:2b:e4:87:67:
44:b5:02:ac:51:f2:67:b9:c2:2b:17:59:db:c1:a7:6c:2c:fc:
5a:eb:30:f0:06:94:d6:5d:7b:c6:ed:1d:66:7d:0e:f4:82:a9:
e5:b7:57:34:06:46:38:e8:15:fa:29:33:9c:9a:a1:ca:5f:8a:
d4:26:85:c1:b8:3b:13:81:0f:fc:16:07:5a:70:fe:c3:c0:49:
11:f0:0d:a1:b4:c2:54:db:53:ba:fb:30:62:fa:88:4c:cc:08:
b4:2f:af:c1:ff:a0:8c:0a:42:f7:db:49:6d:2a:2d:0e:e2:d9:
c6:ef:d7:c0:3a:54:dd:25:58:8c:07:b7:80:f6:5b:ca:2c:c5:
20:97:7c:76:cf:4c:eb:9f:90:ae:39:64:24:4e:d2:07:6d:e2:
c6:9d:01:1c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAaA+gEDXnXhvxOl7hAM3T1DhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwODI2MTQzNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGJhOWQxNDdjODEzNjJiYzVkMGNiYjZkZjBhN2Y3OWY0MDlkNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA047j6rtLdxQRLC2WI4pXVoqK+1yc
/AHTObz+9kssurMfAxFJJ1PRwbKbyjjYh0F41sEYumeSK69xUmxymMd7vpWp1sGd
qq9sCus+4zuiCLLNFzIf9AKF5bhvLItMh/f3JcvImXe5/eqesvLwVrEV0OQfMDfV
ZNM28adjlX8uJ2scYE7+wEkhEcJ6TARFV52xdRvJs77Umsf4uiKHrkRmAlklWIhB
M45h+emZhCH5vnW4SppWXW3aEnR9uhYpXNTGP5wtbAM8vR0Zjo2MbQt+n0qbAD/T
YK6HQQXFpc2H27p8gp9WQLYO0YqKzKzAVSv84JjPcr0MMmlfHktCHt6KCwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFBi6nRR8gTYrxdDLtt8Kf3n0CdWMMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvR0xxZEZIeUJOaXZGME11MjN3cF9lZlFKMVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQATVq1AwQA
ueYMMAwDBADV0YUDBADV0YYwDAMEANXRmQMEANXRmjANBgkqhkiG9w0BAQsFAAOC
AQEAHtZfybD38rKppJ7mB7I/vpivxc6TcNKVCesdKG0hXmNGSCyNhG9R/UgJyDg4
GEp6ROMdG3t7zapRHhzxqJyxFLz7qU1yqAFgJP1t45H/P9dJ9qxnTjt89QgwAYMa
W68OXBO9xH23pRor5IdnRLUCrFHyZ7nCKxdZ28GnbCz8Wusw8AaU1l17xu0dZn0O
9IKp5bdXNAZGOOgV+ikznJqhyl+K1CaFwbg7E4EP/BYHWnD+w8BJEfANobTCVNtT
uvswYvqITMwItC+vwf+gjApC99tJbSotDuLZxu/XwDpU3SVYjAe3gPZbyizFIJd8
ds9M65+QrjlkJE7SB23ixp0BHA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:32 2026 by rpki-client