Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/nSq7E5lM5UyPvCzGi2CumGFbKFY.roa
File: nSq7E5lM5UyPvCzGi2CumGFbKFY.roa (raw, json)
Hash identifier: tcoOtJaj6pxq095E88cEzvoHRjXiNqR98DdnEV83M7Q=
Subject key identifier: 9D:2A:BB:13:99:4C:E5:4C:8F:BC:2C:C6:8B:60:AE:98:61:5B:28:56
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A03E804163C8C0047449605DC2F2F60456
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/nSq7E5lM5UyPvCzGi2CumGFbKFY.roa
Signing time: Wed 26 Aug 2026 14:36:27 +0000
ROA not before: Wed 26 Aug 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 77.90.149.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
77.90.174.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:80:41:63:c8:c0:04:74:49:60:5d:c2:f2:f6:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 26 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d2abb13994ce54c8fbc2cc68b60ae98615b2856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:23:17:c0:96:2c:af:5e:4a:22:a3:d7:47:
29:6a:e8:dc:d0:90:4e:6c:38:b6:6f:32:5d:51:46:
9a:52:ef:11:2a:bd:5e:79:f7:1d:0b:4e:42:e4:7b:
0c:b7:9a:f4:30:59:4b:1a:22:11:21:87:08:30:9c:
2f:2e:63:81:3e:60:25:bb:68:24:6d:c8:0b:15:92:
00:ed:41:b0:5d:47:9c:60:51:0d:b9:ad:75:61:a2:
21:ca:04:1d:ba:8b:6e:80:88:b0:38:fa:04:3c:d7:
df:2a:f3:02:d6:45:85:51:b2:83:30:1e:d8:da:cb:
ad:99:25:fb:15:b0:d7:bb:bc:b3:83:85:fc:f1:f9:
63:06:58:e0:3b:af:c7:56:2a:42:17:97:16:81:a7:
6b:54:08:91:6d:57:0b:38:5f:21:a5:ec:a1:5c:62:
29:5f:c4:d5:bd:8a:5f:0f:1b:fb:6b:c3:bb:d1:e3:
a2:96:c9:ef:0e:a2:e5:c1:3c:9c:3a:f9:84:f1:e2:
ff:c9:42:2e:18:3e:dc:1e:c1:e6:19:74:4e:ed:9d:
7a:51:6a:ae:59:10:59:ea:82:c7:5d:f8:87:35:fc:
c9:69:4a:01:97:a6:ae:f7:bc:bd:e4:e0:3e:c8:0b:
da:77:0f:92:41:49:85:ba:90:4b:40:66:30:00:b1:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2A:BB:13:99:4C:E5:4C:8F:BC:2C:C6:8B:60:AE:98:61:5B:28:56
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/nSq7E5lM5UyPvCzGi2CumGFbKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/24
77.90.155.0/24
77.90.167.0/24
77.90.174.0/24
77.90.179.0-77.90.181.255
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.137.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
25:9e:52:ff:58:30:56:2a:3e:32:f6:ab:f8:b3:1a:cc:de:eb:
b4:15:55:f8:dd:4c:f8:fc:fc:8a:b5:65:49:2b:8c:b8:8f:b5:
4b:02:73:33:1f:31:f7:3b:d1:f6:8f:2b:f6:31:72:c6:52:92:
19:e2:47:0e:e6:61:5e:a7:f8:1b:b8:f5:f4:6b:f8:eb:46:1b:
2d:86:d9:b5:1d:c9:8f:19:2a:ff:98:4b:81:c6:aa:07:1e:ab:
7e:8e:50:bd:50:00:5a:33:1d:8e:86:6a:8f:b8:d8:85:77:74:
3c:6e:bb:df:c9:3f:cf:a9:ec:e7:9d:d2:e3:b9:07:5f:3a:e9:
bf:44:6c:e9:2f:99:81:d5:99:ad:70:69:b2:cb:f0:09:e6:92:
92:fa:c2:bd:ed:cc:05:35:a8:c9:3e:8d:3b:cf:93:4b:91:9e:
b5:18:be:8b:5e:f3:2a:ea:fd:02:fb:4d:63:cb:a8:bd:e7:6a:
49:18:72:34:f2:55:99:06:78:8d:0f:fa:5b:17:8d:30:2c:90:
09:40:e1:b3:d7:ab:09:b7:f8:22:82:06:a2:59:22:5d:0b:e4:
60:68:b3:70:d2:7a:d2:ee:44:76:d2:38:91:bc:89:1f:f8:16:
8f:16:dc:c7:df:2a:9d:08:55:ac:c2:90:ba:a9:16:59:40:d9:
7a:a8:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:37 2026 by rpki-client