Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v_n2xkNu9bblXovWClW1tHeZUQo.roa
File: v_n2xkNu9bblXovWClW1tHeZUQo.roa (raw, json)
Hash identifier: LIYRgLN5pBDwXs11ejFLX0pO6jhGwkacrIZHfbs3JsQ=
Subject key identifier: BF:F9:F6:C6:43:6E:F5:B6:E5:5E:8B:D6:0A:55:B5:B4:77:99:51:0A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A03E80426B1C99D8D45DD31611B224EB82
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v_n2xkNu9bblXovWClW1tHeZUQo.roa
Signing time: Wed 26 Aug 2026 14:36:27 +0000
ROA not before: Wed 26 Aug 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 77.90.149.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
77.90.174.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:80:42:6b:1c:99:d8:d4:5d:d3:16:11:b2:24:eb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 26 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bff9f6c6436ef5b6e55e8bd60a55b5b47799510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:29:9b:89:5c:ae:4f:0f:0c:49:ef:6d:b0:
ab:38:f7:f7:1e:61:98:05:4e:0f:d3:8a:7b:5f:14:
df:0a:73:6c:26:63:5f:e0:d8:50:85:5a:ac:a7:85:
0c:ae:30:ad:62:db:f1:1f:b6:ed:69:80:3a:12:22:
63:a7:bb:41:13:b2:bb:90:7b:40:30:7a:01:6d:8c:
4c:0e:1c:8a:91:04:4c:90:1e:77:8c:68:46:5e:dd:
4f:c4:f2:5b:21:bf:39:51:10:81:b0:af:1f:10:8c:
65:93:82:b4:14:00:4d:7f:6e:33:24:12:80:e8:6c:
ee:af:c7:d8:2d:53:f2:f3:30:9b:72:05:1a:7b:f9:
6f:cb:cd:a6:14:88:e2:7a:0e:f2:20:20:94:93:a9:
0d:c9:36:27:f5:fa:d8:c8:7c:9c:f0:17:f1:ac:f9:
2b:bf:9a:e7:19:ab:fa:ec:f0:b6:3e:31:ea:4c:85:
4c:0a:0b:32:f3:e0:e2:98:a4:51:ce:2e:f3:90:05:
c7:cf:06:8b:53:d6:be:66:0f:cc:15:b3:1e:69:ca:
88:fa:b3:dd:c1:17:1e:cc:e9:2a:20:cb:d3:33:ab:
c7:d9:85:65:f6:0f:e6:2f:20:2f:9f:0c:c3:2b:87:
e2:22:ca:b8:75:b0:4a:64:ae:52:9f:98:1b:d7:18:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:F6:C6:43:6E:F5:B6:E5:5E:8B:D6:0A:55:B5:B4:77:99:51:0A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v_n2xkNu9bblXovWClW1tHeZUQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/24
77.90.155.0/24
77.90.167.0/24
77.90.174.0/24
77.90.179.0-77.90.181.255
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.137.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
19:7e:76:e1:87:6e:70:9c:24:4c:b4:1a:ee:af:05:f4:3d:f7:
98:a4:da:5b:79:dd:c3:4c:01:19:ac:27:60:8b:65:67:cf:11:
2b:a8:f9:1c:eb:8a:a9:48:3f:1c:b2:78:15:58:b7:fe:01:6a:
87:74:a5:93:24:f7:71:b5:0e:2b:a6:78:43:84:b4:93:08:d4:
31:a9:6f:58:39:db:6a:9d:f3:4b:da:66:c0:bc:09:66:bd:fc:
53:66:ac:ca:38:a8:70:c9:62:83:ef:59:f4:6e:52:03:23:fb:
1a:49:c9:50:e9:47:9d:6d:13:ab:fd:ff:09:13:2e:d5:ed:0e:
85:ea:6f:d6:88:07:05:c9:1e:d7:a0:5c:16:62:01:48:13:55:
c7:68:51:11:00:e8:5d:e0:2a:78:7f:c8:62:54:cd:48:63:36:
e3:2e:fa:d2:12:38:9b:64:00:09:6b:fe:c1:71:cc:40:2c:7e:
55:32:92:b5:40:50:b1:14:c6:76:99:c5:62:08:3e:af:65:82:
10:0c:92:07:19:e9:00:5b:c4:ba:98:40:b0:f2:00:ea:ee:f3:
32:02:cb:3b:59:99:4f:1b:d5:98:0d:19:81:9c:20:8b:89:53:
f9:be:f0:d5:90:d9:d3:ed:00:dc:6f:06:f9:de:a4:37:a1:59:
40:9c:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:41 2026 by rpki-client