Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/agKDW7KFVEguNXRS4bYZpMhq0l8.roa
File: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (raw, json)
Hash identifier: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=
Subject key identifier: 6A:02:83:5B:B2:85:54:48:2E:35:74:52:E1:B6:19:A4:C8:6A:D2:5F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019E933D0518F92AB1A9C9E3898D8E77A25F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/agKDW7KFVEguNXRS4bYZpMhq0l8.roa
Signing time: Thu 04 Jun 2026 15:25:10 +0000
ROA not before: Thu 04 Jun 2026 15:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 77.90.141.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:3d:05:18:f9:2a:b1:a9:c9:e3:89:8d:8e:77:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 4 15:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a02835bb28554482e357452e1b619a4c86ad25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:3e:ea:e8:37:19:3d:ac:e3:c0:46:6f:f4:
5c:e8:86:19:d5:23:a7:56:ae:f1:d5:67:6a:93:46:
ba:4a:ec:b5:c8:b1:7b:2a:ec:12:8f:c7:c0:a8:f0:
6e:33:8d:cf:30:42:be:f9:65:2d:7b:c2:36:66:0b:
ab:21:e3:a9:bc:56:00:52:72:52:17:ba:d4:08:c6:
b3:11:a7:6e:2b:a3:35:b4:9b:90:3e:34:88:d9:33:
73:e9:ed:fb:5a:ae:41:2d:c0:8b:97:04:d5:a7:24:
ab:54:e9:e7:02:c0:da:71:f5:d1:86:18:0e:e6:10:
f6:4a:bf:c2:5b:80:8d:cf:0d:e3:28:a1:05:6d:27:
5f:9b:12:99:a8:65:a2:7e:15:32:2f:7d:6a:04:81:
c7:a0:4b:49:77:16:b8:ef:5a:ab:73:a0:5f:6b:a2:
ca:94:2b:c8:8b:33:1a:65:ff:93:98:19:43:8f:76:
47:e1:9f:e0:5c:25:30:36:3e:5d:9d:d7:46:fa:d9:
d5:b7:af:9c:07:ab:21:0b:7e:98:14:5e:03:af:07:
51:b1:5c:33:b7:dc:d3:c9:bc:b8:df:1b:a4:98:c1:
37:0e:0f:c0:37:ba:59:48:58:0d:2c:b2:3e:9d:bb:
56:4b:ad:dc:44:d7:6f:44:f4:d4:a1:1c:35:7e:61:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:83:5B:B2:85:54:48:2E:35:74:52:E1:B6:19:A4:C8:6A:D2:5F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/agKDW7KFVEguNXRS4bYZpMhq0l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.141.0-77.90.142.255
Signature Algorithm: sha256WithRSAEncryption
6a:c9:63:86:6f:9a:ca:d3:8f:1c:2e:df:dc:9c:b8:69:df:35:
dc:16:f9:de:3c:44:55:bc:35:83:f0:0b:5e:dd:16:c2:34:46:
3e:4f:31:17:b7:fc:83:ce:14:ce:ab:6e:33:74:26:cf:2b:ce:
49:39:2c:e1:b9:93:69:15:43:da:e7:b8:01:f3:3d:5d:33:13:
86:8a:33:e7:e4:e2:9d:37:f2:8a:fd:fd:a8:f0:93:7a:26:50:
d5:03:36:7d:ce:ad:b5:e3:4f:c4:92:7a:fd:4d:e2:cc:4d:b9:
ac:27:f3:c6:af:86:32:4b:96:06:11:16:ab:52:29:ca:be:b4:
c7:17:a4:ef:10:ee:6b:96:1a:43:3c:53:c7:f7:50:8b:7f:5a:
c9:c2:a2:f9:22:d3:bf:79:57:b5:1e:2e:e1:10:c4:e8:98:79:
a6:20:03:61:97:2e:a6:03:fe:0a:c2:dd:15:da:00:4c:04:05:
f5:34:f8:bb:76:df:80:a7:cd:8f:f4:a0:20:d0:98:74:c0:4c:
4b:72:14:30:49:d7:66:88:35:8e:8a:ce:27:68:05:fd:44:c9:
c5:82:15:c6:a8:06:35:ab:19:b3:3a:d2:ac:09:a6:12:d7:8d:
b8:8e:d1:a3:bc:a7:60:ae:fa:e0:7b:e9:cf:33:d3:c7:8d:33:
9a:fd:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:24 2026 by rpki-client