Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/cxqiAJpPq12isjMxfe6AG8PVi2k.roa
File: cxqiAJpPq12isjMxfe6AG8PVi2k.roa (raw, json)
Hash identifier: PWSIOA0IFBTX5MYqwR7HqCu8ZXO2s0vpto1um9AjcjA=
Subject key identifier: 73:1A:A2:00:9A:4F:AB:5D:A2:B2:33:31:7D:EE:80:1B:C3:D5:8B:69
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A17A6E83A216D44AC35BBC2393E4A825F2
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/cxqiAJpPq12isjMxfe6AG8PVi2k.roa
Signing time: Mon 26 Oct 2026 22:57:05 +0000
ROA not before: Mon 26 Oct 2026 22:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:6e:83:a2:16:d4:4a:c3:5b:bc:23:93:e4:a8:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 26 22:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=731aa2009a4fab5da2b233317dee801bc3d58b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:02:f6:19:27:48:ee:83:71:29:12:f2:72:
72:20:2e:99:17:63:aa:7a:d7:74:fb:1c:08:6a:53:
ff:32:34:22:6b:44:55:74:87:38:01:5f:cf:86:fd:
4d:92:40:3e:2e:fc:99:78:cd:5e:c3:4e:0e:69:10:
b3:42:21:4e:95:db:2f:2a:73:6c:d6:db:2e:ac:1d:
2d:cf:4e:4c:7c:8e:5d:a4:c0:ba:c3:31:f3:05:bd:
f5:85:ad:c8:ab:2b:95:1c:00:b6:8f:6b:11:6d:83:
b3:ee:6f:9a:36:92:38:a3:c9:80:2f:64:aa:3d:d8:
66:94:be:26:ce:68:de:3d:89:27:80:e5:3f:44:fd:
b8:a9:1a:98:85:19:34:8b:c8:3b:61:82:06:68:58:
49:26:7d:89:21:3a:f0:bd:d3:0f:6a:20:fb:45:2c:
7b:9f:76:10:e9:13:e2:db:f4:af:92:79:24:e0:6f:
d3:6d:3c:7a:9b:d6:90:e2:a3:51:68:86:6d:96:b1:
37:27:7d:70:6b:ee:05:fd:c8:41:4c:f0:3f:03:1c:
11:1c:ef:be:11:41:ec:45:11:34:5d:5e:de:bd:67:
96:a5:39:5c:4a:6e:b5:cc:70:3a:86:42:4f:a9:f1:
99:ac:7e:04:38:ec:94:df:56:e5:0c:4e:2a:ce:13:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:A2:00:9A:4F:AB:5D:A2:B2:33:31:7D:EE:80:1B:C3:D5:8B:69
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/cxqiAJpPq12isjMxfe6AG8PVi2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.171.0-77.90.172.255
Signature Algorithm: sha256WithRSAEncryption
89:c4:de:fe:53:14:45:90:d9:b9:8c:dd:f2:9e:6e:7b:2f:44:
f3:d3:37:61:95:2d:22:5e:ea:3a:47:95:79:39:0b:8d:5a:55:
b7:26:90:ac:03:2f:f6:38:fa:2b:86:b8:48:c7:22:c1:08:f4:
f3:a9:47:92:bc:81:27:78:45:48:55:2b:e0:d8:92:d1:d5:a1:
70:42:7c:c6:b5:1e:ae:6b:8f:15:06:67:e2:be:37:fb:01:da:
b0:e4:f0:36:f8:34:51:f5:ce:e7:b4:7a:ac:c1:49:4a:24:e7:
ad:0a:c6:1b:1e:d0:88:1b:e0:a8:d2:b0:c5:b7:1c:f0:a6:17:
fa:f3:8f:68:98:14:8f:a9:f8:45:a1:82:20:53:15:07:81:55:
75:6c:77:28:ec:84:4c:23:11:77:a2:99:51:16:54:8d:8d:49:
ee:98:88:4e:af:a0:f2:45:4e:a0:66:27:d8:b0:59:fc:21:66:
9e:12:6f:2c:12:ad:ed:bb:3c:b5:ba:20:0d:50:d0:2a:0a:b5:
77:f7:22:01:94:b0:5b:90:c5:b1:6e:63:e5:ec:07:87:12:f2:
a3:b5:c7:bf:47:71:6b:b4:12:61:1c:3b:4c:1b:c3:a9:5d:88:
6f:f1:b5:3f:e5:36:b9:45:98:ca:39:e9:dd:b7:54:d3:7b:a2:
8b:df:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:08:23 2026 by rpki-client