Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/H5ZYe_Ag7prsC3TXqbV6CRa9FlY.roa
File: H5ZYe_Ag7prsC3TXqbV6CRa9FlY.roa (raw, json)
Hash identifier: 3IwOGJbM2WxEKxC9Fa9yZDt79Q/TfZFjPHgrWJIXGcU=
Subject key identifier: 1F:96:58:7B:F0:20:EE:9A:EC:0B:74:D7:A9:B5:7A:09:16:BD:16:56
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A10D51F1B068663E08854822772283698A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/H5ZYe_Ag7prsC3TXqbV6CRa9FlY.roa
Signing time: Mon 05 Oct 2026 18:27:16 +0000
ROA not before: Mon 05 Oct 2026 18:27:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 77.90.141.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:51:f1:b0:68:66:3e:08:85:48:22:77:22:83:69:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 5 18:27:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f96587bf020ee9aec0b74d7a9b57a0916bd1656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:67:d3:45:1b:d7:03:84:6b:5f:63:39:e3:
50:27:51:41:9d:43:14:8a:8e:7a:58:69:6b:4f:23:
8f:cb:77:50:81:21:5a:51:66:e5:9f:81:9a:90:7d:
40:9f:b1:c5:d4:cc:49:86:65:49:6c:1f:a3:08:84:
16:02:15:29:6f:02:b4:62:98:9b:d2:e7:5d:25:1e:
3d:eb:fa:34:b1:fe:0b:28:08:67:b6:cc:56:ea:6a:
71:3c:eb:97:69:d6:c1:0c:cc:a8:2f:13:bc:54:5e:
38:13:97:a5:9e:e6:78:9c:ca:89:44:21:c6:5b:91:
60:f8:a9:9d:74:6d:50:8a:8f:d9:37:35:1e:4e:1c:
84:dd:92:58:4a:67:75:a1:9d:82:d4:f5:27:ed:f1:
ef:81:ae:30:9e:8f:02:8d:ac:23:9d:34:17:4b:2c:
3a:85:e8:3e:06:d3:24:e9:f9:c8:d4:d0:9b:e1:b8:
b4:b8:08:93:64:06:f5:83:d4:db:7d:f3:3e:22:1b:
d0:2e:f3:37:7c:38:ef:77:b1:5e:ab:a8:40:fe:9a:
a0:1c:75:25:a7:41:42:a9:62:0a:ca:6a:7a:62:ae:
7b:04:0c:ad:0e:68:00:a8:9b:62:d2:64:52:65:e9:
68:7e:ed:99:a6:a8:a8:43:2c:e4:74:3f:9c:e8:6a:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:58:7B:F0:20:EE:9A:EC:0B:74:D7:A9:B5:7A:09:16:BD:16:56
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/H5ZYe_Ag7prsC3TXqbV6CRa9FlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.141.0-77.90.142.255
Signature Algorithm: sha256WithRSAEncryption
3d:1d:87:17:21:de:f6:de:f9:68:d6:2e:78:7f:84:00:ae:f6:
ee:8f:83:1a:d1:be:8b:c0:15:51:d2:81:78:d7:38:42:51:50:
b0:4c:23:bf:64:b2:c2:16:2a:c8:18:f8:f7:b3:1a:47:19:a3:
f0:3a:4c:ab:14:76:66:a2:c1:8c:7f:77:89:ae:e3:9d:b1:a6:
45:ca:14:be:ec:6b:ef:5c:01:0d:7b:a7:ae:d0:ce:a4:b8:6d:
0e:c0:ee:30:e6:f9:42:94:37:dd:ea:75:59:5f:9d:51:88:b6:
69:0e:a5:24:1f:fd:a7:c3:15:39:36:30:92:dc:74:14:eb:59:
4d:b0:4d:26:f4:14:2e:23:2f:bd:ca:2e:80:29:33:0d:c5:cb:
9a:db:68:e7:b1:54:b1:73:83:cd:c1:ad:7f:ff:6a:73:1a:12:
fb:64:5e:1e:0e:53:6f:04:d2:32:88:2c:67:7f:90:06:69:bb:
03:8f:11:8d:0d:90:d5:35:0b:38:eb:20:d3:9c:09:44:0c:65:
58:97:dd:f2:72:37:20:c3:16:0f:34:12:3c:56:6f:67:d0:91:
d7:eb:0e:d7:8b:56:80:d8:ad:01:76:f9:9b:4a:ff:27:9d:4f:
89:59:cb:1e:35:a3:06:66:cd:df:e8:51:2f:0b:fb:ab:e2:4c:
22:c7:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:16 2026 by rpki-client