Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/pOduAFIfvLT9GzyFJhPpY9stmIA.roa
File: pOduAFIfvLT9GzyFJhPpY9stmIA.roa (raw, json)
Hash identifier: LXiKEdSKVwx+2ZqkefWLPfH5EUJFMnKpd9lGvZUEKz8=
Subject key identifier: A4:E7:6E:00:52:1F:BC:B4:FD:1B:3C:85:26:13:E9:63:DB:2D:98:80
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A18E06158174EC3CDAEEAC98F253FBDE79
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/pOduAFIfvLT9GzyFJhPpY9stmIA.roa
Signing time: Fri 30 Oct 2026 18:15:25 +0000
ROA not before: Fri 30 Oct 2026 18:15:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 77.90.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:06:15:81:74:ec:3c:da:ee:ac:98:f2:53:fb:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 30 18:15:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4e76e00521fbcb4fd1b3c852613e963db2d9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:90:05:6e:93:3e:98:f4:f4:58:84:ed:54:
c9:3e:47:a8:4d:fb:0c:8d:51:85:6e:ba:33:77:76:
98:7c:2d:8f:9d:ed:de:73:a3:4a:56:41:76:49:28:
92:4d:ca:f7:43:37:b5:c7:4e:d8:14:b0:f3:4a:9d:
e2:ea:99:57:02:4e:93:5a:fa:67:e3:0b:5e:b8:6d:
5a:c5:2e:15:ea:91:e2:ea:20:5c:52:08:27:8a:25:
a8:6d:c7:c2:31:82:bd:47:0e:05:f9:30:21:2c:79:
69:f6:62:d7:9f:78:fb:43:3f:53:82:8f:a1:30:e9:
4d:10:b4:d6:1f:e7:c5:e4:ce:f2:dc:e1:29:ad:36:
86:2a:70:8f:ed:7e:ea:9e:0c:05:ab:e3:e6:d6:66:
4a:1f:15:6c:c6:18:a5:ae:22:d0:7f:d3:d5:e0:bf:
d7:f2:39:9a:81:48:51:2c:72:9e:0d:c2:ac:a1:ec:
e6:11:dd:49:af:af:94:3d:62:b3:0f:78:dd:33:d7:
44:88:dc:40:46:2e:42:fa:d5:4c:8b:fa:09:bf:c5:
77:7b:40:42:26:ce:df:ca:21:20:68:ab:a6:8d:28:
36:14:2f:f0:f0:5e:b5:27:bc:d9:03:79:96:1c:c3:
3d:97:51:13:8c:46:f0:eb:e4:89:3d:b9:7d:06:8b:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:6E:00:52:1F:BC:B4:FD:1B:3C:85:26:13:E9:63:DB:2D:98:80
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/pOduAFIfvLT9GzyFJhPpY9stmIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.168.0/23
Signature Algorithm: sha256WithRSAEncryption
52:35:59:1f:05:86:29:e4:ca:44:ef:e4:1e:d1:e4:33:b7:89:
b7:e7:32:ca:1c:7f:7a:15:63:85:45:f1:76:b1:5f:40:93:94:
2a:3e:9d:96:12:31:6f:03:cf:b9:54:37:8c:ab:22:7a:6e:b1:
22:54:40:4d:ae:9a:89:0a:ed:4e:6a:ec:d4:b5:9b:01:a0:d3:
02:0e:07:96:74:c5:1b:00:67:a3:01:06:34:31:6e:c2:95:fd:
59:69:06:94:c5:e5:54:c5:92:ed:5a:c5:3c:23:97:b1:c2:29:
6b:a3:3a:f4:33:31:18:56:35:73:5a:81:3a:9c:c6:a6:5d:23:
46:51:53:76:bd:ac:58:98:f0:1f:2d:4c:7f:ff:14:a5:2b:8b:
dd:c6:bd:25:95:c9:db:72:70:0d:0f:b3:c3:37:82:3b:51:3f:
53:53:38:34:3c:32:5f:a2:8c:62:57:bc:82:5c:37:b0:aa:6b:
3e:c4:df:fe:66:ec:5e:76:5a:12:ae:53:b4:46:f9:db:69:78:
10:b9:f7:b4:29:e2:e0:0e:2a:5a:4a:3e:73:e9:d5:34:ab:fd:
c1:9a:29:1b:69:4e:54:df:df:88:b7:02:b6:70:56:90:c0:d2:
6c:0c:4b:ab:70:3f:ea:d5:21:03:a0:fc:28:6c:9c:97:c6:e5:
3a:54:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:30:09 2026 by rpki-client