Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/MQUOJcot1m59am7i5huzRadLQ6w.roa
File: MQUOJcot1m59am7i5huzRadLQ6w.roa (raw, json)
Hash identifier: MZYv25n0/cmEud0Sv2JjULQ7cHihlMOVMDKQ1uc2C7o=
Subject key identifier: 31:05:0E:25:CA:2D:D6:6E:7D:6A:6E:E2:E6:1B:B3:45:A7:4B:43:AC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019E8D436E682F6EC643738CB909AF58ED51
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/MQUOJcot1m59am7i5huzRadLQ6w.roa
Signing time: Wed 03 Jun 2026 11:34:27 +0000
ROA not before: Wed 03 Jun 2026 11:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.165.0/24 maxlen: 24
77.90.175.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:43:6e:68:2f:6e:c6:43:73:8c:b9:09:af:58:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 3 11:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31050e25ca2dd66e7d6a6ee2e61bb345a74b43ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:87:fb:1f:37:0e:10:c0:8b:de:03:57:e6:
e8:ba:de:ae:2c:bc:d2:73:41:02:f3:5f:33:c2:ed:
60:e7:4d:07:8d:b9:02:f9:d4:5f:27:da:54:7f:ea:
27:fc:f4:6c:43:78:ae:57:45:22:8c:de:a2:36:52:
7f:94:1b:b1:3e:fa:11:e0:54:59:1f:78:cf:5a:56:
31:03:fd:4a:c5:fb:da:b7:93:25:88:86:8c:11:31:
c4:df:d9:d7:ad:2a:18:5b:97:e6:86:2b:8a:08:78:
30:a0:a5:89:42:32:3f:2b:67:12:0a:84:c6:c0:19:
ba:27:24:c2:8d:46:19:9c:6a:94:93:3e:53:01:04:
66:d1:24:86:99:8e:bc:ce:eb:fb:ef:3c:24:d9:e0:
07:88:82:5d:82:a7:84:f7:52:bb:25:98:dd:9a:81:
bd:3f:84:db:38:fd:e8:94:15:09:01:a6:d2:0c:5c:
97:1d:c6:9a:63:fc:d3:e7:25:88:b0:b7:fb:0b:f1:
6e:72:4d:e5:f1:2c:78:d5:86:d5:59:bf:28:8e:db:
7e:4d:31:d2:5e:21:bc:97:cf:64:a4:d1:48:b4:6f:
4b:8d:af:69:ea:ef:a6:9c:44:7a:7e:b5:ec:c8:87:
4d:cf:bc:e9:b7:fc:04:95:a4:a7:12:f3:65:f6:2f:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:05:0E:25:CA:2D:D6:6E:7D:6A:6E:E2:E6:1B:B3:45:A7:4B:43:AC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/MQUOJcot1m59am7i5huzRadLQ6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.165.0/24
77.90.175.0/24
77.90.177.0/24
77.90.182.0/24
77.90.186.0/24
213.209.129.0/24
213.209.131.0/24
213.209.143.0/24
213.209.145.0/24
213.209.152.0/24
213.209.155.0-213.209.157.255
Signature Algorithm: sha256WithRSAEncryption
b4:9f:e1:bc:e2:35:30:d8:94:e7:3b:38:c9:0a:2c:39:7f:a9:
0c:9d:0a:ae:91:73:b2:ef:ec:d1:e5:06:ac:65:85:d0:4d:6d:
17:c7:05:c5:87:0e:09:b5:6b:2c:17:13:c6:21:d7:16:e5:05:
df:51:84:b0:32:5f:98:9b:fd:61:17:2c:bf:40:48:51:27:94:
68:a2:16:1c:bf:e0:17:f6:0a:ac:9e:cc:dc:72:d1:4a:83:0a:
a0:9c:a7:10:b1:d5:bd:2b:f5:72:54:cc:79:a6:8d:09:ef:5a:
03:58:ff:c7:f9:42:13:31:62:04:b8:bf:13:38:60:00:8c:a1:
2c:52:67:3a:e1:f0:40:28:b8:dd:e0:20:f7:21:4b:a3:a3:3f:
4f:fe:6e:27:bb:0a:7e:f6:74:cb:90:6e:75:8c:c9:ea:b8:ea:
91:f8:39:47:5e:b4:1a:1d:e4:8b:2f:d2:c1:b6:6d:0d:54:77:
ff:fe:53:5c:97:3c:10:1b:8c:3f:ef:f7:af:73:e8:2e:f9:19:
6d:7a:34:0f:46:c6:b7:82:43:93:06:6e:24:bc:50:6b:20:69:
3d:c7:86:fe:74:98:46:44:a9:b7:38:9c:3e:07:7c:90:34:6f:
9d:09:fc:4e:9a:64:0b:15:b4:3e:a7:0e:39:16:71:03:ff:6f:
b4:54:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:27 2026 by rpki-client