Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa
File: B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa (raw, json)
Hash identifier: DzSLMEFuOBEqMQodLY/kdl1XgZrJLKWCvwvjcgrKpKU=
Subject key identifier: 07:70:D2:E0:72:46:1B:81:D6:3A:BE:E8:F4:84:FC:AA:94:23:55:92
Certificate issuer: /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial: 019F2368351D152FCE7170646EBEB66A3793
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 81.90.143.0/24 maxlen: 24
2a00:e20:143::/48 maxlen: 48
2a00:e20:150::/44 maxlen: 48
2a00:e27:143::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:1d:15:2f:ce:71:70:64:6e:be:b6:6a:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0770d2e072461b81d63abee8f484fcaa94235592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:00:73:57:e8:8b:8c:c8:61:d9:41:95:30:
dc:58:b6:44:38:04:0c:d9:d5:6b:24:79:11:c8:c6:
81:d1:9d:81:a9:ed:4c:5b:82:e7:0e:6f:60:25:94:
cb:60:99:2c:12:5d:ad:82:7b:ae:53:ea:bc:b8:c5:
2a:8d:5e:68:e8:02:4b:34:5f:09:41:15:f8:99:bd:
db:62:ec:22:a1:de:f8:bf:98:1a:40:e2:4d:30:a0:
22:d0:c4:47:ca:f8:ac:d2:a8:7c:45:d0:e2:72:1d:
83:06:cd:2b:96:91:9c:bb:d4:17:d8:64:76:54:6e:
73:7a:a6:c8:5d:d6:f1:42:4e:03:16:1a:5b:75:91:
ee:9f:17:b5:17:0b:78:03:ef:ea:f2:98:f2:da:62:
18:26:fc:02:35:7a:3d:31:ad:27:d6:b3:b7:03:39:
c1:82:56:8c:7a:cb:10:91:71:ef:ef:4e:40:83:62:
ae:b7:5a:b9:dc:3f:db:d7:f7:7b:c9:b8:6e:0a:d0:
64:0f:80:8e:73:4f:7f:77:ee:3b:4d:25:ad:c4:3e:
5b:23:d5:63:c2:14:65:67:fd:f9:6c:41:5d:b7:3f:
4c:1c:2b:aa:3e:ea:76:e4:e7:c7:ad:0e:ca:a0:94:
82:1e:b9:b6:5e:28:c0:b7:dd:91:a0:ac:f8:cc:cb:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:D2:E0:72:46:1B:81:D6:3A:BE:E8:F4:84:FC:AA:94:23:55:92
X509v3 Authority Key Identifier:
keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.143.0/24
IPv6:
2a00:e20:143::/48
2a00:e20:150::/44
2a00:e27:143::/48
Signature Algorithm: sha256WithRSAEncryption
1c:f6:d7:a5:49:1d:39:61:7f:cb:fe:52:0e:53:73:83:75:83:
a4:db:80:7c:69:a8:f0:7c:32:7a:c2:13:dc:f3:93:90:2f:ec:
10:91:10:2b:c3:58:17:c2:eb:06:ed:89:07:6e:d1:49:0d:a9:
4a:03:9b:74:71:1b:21:32:4c:37:fd:79:3d:19:b0:24:23:29:
36:17:d3:a0:68:05:f2:44:a2:60:3e:92:3b:e8:02:41:19:1f:
a4:2e:1b:2d:cb:2a:9d:75:34:51:ec:dc:be:7d:41:c6:ad:05:
81:74:05:09:94:4f:7a:7a:ad:7e:83:bb:79:91:1c:80:5e:55:
55:dc:92:57:1f:33:36:03:be:79:c0:95:a8:da:ea:ca:28:cd:
63:f9:04:8e:17:24:9a:f6:f8:48:60:f8:c8:8d:f0:fb:c1:3e:
66:8f:2a:c7:79:fd:67:41:f6:61:18:8d:c8:cd:73:0f:0b:5b:
25:04:21:e8:ac:41:f9:62:59:2e:4f:8d:91:9b:8b:e1:c8:b9:
71:14:eb:52:07:1c:0e:4c:12:29:9f:af:7a:b9:e9:7a:00:df:
f2:f8:a2:f6:16:3e:46:73:f6:6e:40:73:d2:2a:d6:22:fc:57:
55:5e:50:69:ef:1f:23:c8:4f:33:0d:00:1e:95:64:9f:78:2c:
21:05:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:52 2026 by rpki-client