Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JwhseqEU52AOEPBi0chPmCNtUI0.roa
File: JwhseqEU52AOEPBi0chPmCNtUI0.roa (raw, json)
Hash identifier: /a2TVrOcM4P+LJSIiJ0JbsH1G/ALY7F0MYP/SRiM7WY=
Subject key identifier: 27:08:6C:7A:A1:14:E7:60:0E:10:F0:62:D1:C8:4F:98:23:6D:50:8D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019D0A5A66323EA3A6BC98BEBBCCBAC928CF
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JwhseqEU52AOEPBi0chPmCNtUI0.roa
Signing time: Fri 20 Mar 2026 08:26:29 +0000
ROA not before: Fri 20 Mar 2026 08:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.148.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:5a:66:32:3e:a3:a6:bc:98:be:bb:cc:ba:c9:28:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 20 08:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27086c7aa114e7600e10f062d1c84f98236d508d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:d0:29:3e:90:64:6d:d0:bc:ad:13:ae:af:
d4:5b:54:a9:d9:7e:84:27:e5:f0:3c:8a:1d:c6:d8:
a4:de:22:7b:14:6b:3b:1a:7a:cb:23:61:e1:2a:11:
79:e2:d9:59:e1:79:07:46:44:18:60:f5:05:97:f6:
1c:1d:55:47:54:16:66:d1:59:3c:43:06:28:ee:01:
5e:e4:ad:94:0a:c4:54:f6:8c:ef:34:c4:98:1f:fb:
74:1b:4e:40:16:72:2c:a5:aa:ab:bf:8a:be:a2:04:
ed:88:a4:c8:1f:47:f5:ed:c8:17:24:e1:90:66:12:
9b:3a:f2:19:d9:c4:8b:e9:0f:e4:0a:51:9c:2b:01:
c2:92:fe:35:0a:de:d1:a6:c6:e5:93:20:86:0e:2a:
38:fe:04:56:7e:f5:7d:b3:0e:4f:90:ec:53:70:fb:
a3:94:84:4c:fd:3a:aa:d9:82:1e:79:30:17:aa:c1:
68:df:ca:6f:8a:c1:1d:aa:5c:f3:c4:ce:a1:c9:07:
0a:b1:4b:bd:7e:f5:70:d3:f2:1e:17:4f:bc:ff:12:
21:d1:d9:09:38:57:91:61:c6:9e:63:19:0a:5e:b5:
1c:d7:b2:9a:ce:d5:ab:03:6a:d7:15:85:4e:4d:8b:
6b:ad:ee:b0:37:b4:d4:57:34:9a:5b:fe:66:54:0b:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:6C:7A:A1:14:E7:60:0E:10:F0:62:D1:C8:4F:98:23:6D:50:8D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JwhseqEU52AOEPBi0chPmCNtUI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.148.0/24
213.209.129.0/24
213.209.143.0/24
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cf:b2:f4:f3:61:1a:49:e1:ae:86:53:d2:38:a3:f2:d4:cb:
7e:63:29:55:f0:cb:cb:7f:4d:be:f7:17:78:e0:ba:34:6a:0e:
51:3e:c3:18:6a:ea:23:f8:9a:6b:ca:d4:88:fa:78:80:1c:cf:
5f:a0:97:ca:83:d6:b9:50:62:d7:cb:27:bf:2e:2d:27:b1:0d:
66:14:f1:ef:93:06:d6:8a:b4:c4:c2:25:7b:33:c4:de:3c:02:
5c:cf:81:55:fd:cf:7a:32:35:97:98:cc:8a:72:e7:68:a4:6b:
75:80:51:c7:5f:d4:6b:4c:94:b8:98:fb:f4:fb:65:ba:25:78:
22:53:dd:50:fe:d5:34:8f:95:e7:ff:53:8d:2b:a1:b0:cf:87:
ba:c2:ce:ef:23:d6:39:ee:68:5a:6c:43:55:bb:8a:d6:34:3d:
73:32:d1:b8:0f:ae:23:bf:b2:cb:73:d0:a0:b6:67:cb:3a:2d:
f0:92:28:9b:c0:e6:10:cc:ce:6d:05:ff:de:df:43:d1:4e:1c:
2b:c8:f6:24:24:9f:c6:8b:4d:da:90:4e:02:37:b7:47:d4:2f:
ae:b3:f4:68:35:75:dd:0c:1b:5b:40:b5:b6:ec:dc:b7:ea:03:
fa:ab:9e:fb:79:de:51:33:a3:f5:57:24:68:68:01:b6:6b:a1:
6c:57:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:16:29 2026 by rpki-client