Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/N90w3kPyDChOm91Ds-QEoi6QI_M.roa
File: N90w3kPyDChOm91Ds-QEoi6QI_M.roa (raw, json)
Hash identifier: mfNvOCZmL0owJcxp861BO+lWyVu4sB66xy2QLj0cRcc=
Subject key identifier: 37:DD:30:DE:43:F2:0C:28:4E:9B:DD:43:B3:E4:04:A2:2E:90:23:F3
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 01A16D9EBC7467A91FA59610C295725C67A1
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/N90w3kPyDChOm91Ds-QEoi6QI_M.roa
Signing time: Sat 24 Oct 2026 11:14:41 +0000
ROA not before: Sat 24 Oct 2026 11:14:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 193.138.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:9e:bc:74:67:a9:1f:a5:96:10:c2:95:72:5c:67:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Oct 24 11:14:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37dd30de43f20c284e9bdd43b3e404a22e9023f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:3b:bf:72:b1:2c:2e:d1:6c:5d:1d:ed:bf:
7a:a8:9f:b3:0e:5c:f5:da:9f:84:06:50:f9:da:d5:
46:7a:84:b5:b6:72:77:04:ef:d1:39:1e:90:58:35:
32:17:0c:49:ac:50:cb:78:12:47:2d:d1:68:e8:7d:
f3:5a:c5:24:85:1a:72:e2:23:df:00:95:05:0b:2e:
0c:50:8f:d0:38:9a:97:52:6e:e9:aa:1f:b8:97:3e:
01:4c:76:94:87:d9:d0:4a:d4:78:ad:43:00:d0:70:
c7:7f:d5:8c:16:a0:aa:57:25:a6:cd:3d:4e:7d:bb:
43:39:f0:12:b3:ee:04:6e:a7:9d:96:92:5e:c4:f4:
4e:08:d6:48:cb:ab:db:e1:87:92:01:04:ab:ec:2f:
b3:8a:d9:1b:53:12:77:48:71:4f:c0:bc:62:c7:b7:
cd:17:6a:cc:c8:51:12:7d:c5:21:40:24:0b:8a:b6:
24:83:d7:1c:14:f4:cb:43:29:6b:7d:d2:6d:ad:d0:
67:bb:85:43:cd:df:53:c2:3e:97:80:2b:d5:cd:fe:
42:eb:05:28:f1:bd:64:37:d0:60:b8:70:ae:77:a9:
e0:53:af:bd:05:2d:92:e2:fa:f5:58:1a:a0:5d:c5:
43:01:4e:79:8f:bd:ee:b6:4d:3d:00:3e:44:d9:e2:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DD:30:DE:43:F2:0C:28:4E:9B:DD:43:B3:E4:04:A2:2E:90:23:F3
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/N90w3kPyDChOm91Ds-QEoi6QI_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4b:38:fe:97:87:30:5c:3c:f8:50:02:f0:b1:a3:4a:f2:15:
0e:88:24:ff:56:52:4b:2b:74:c9:4c:79:e7:a4:dc:c3:91:0b:
68:c2:87:16:b2:5d:a8:04:cd:47:bb:df:9a:3b:52:85:55:58:
33:77:29:b8:8d:9d:5b:7b:20:b4:8e:b1:09:d5:9b:78:f5:09:
96:83:84:29:c7:01:c0:92:ad:96:3a:cb:ef:59:cf:4e:d3:2c:
e5:e3:d7:71:ed:bd:68:49:02:f0:3a:cf:12:73:9a:4b:58:e2:
86:8f:f5:fb:46:5d:2c:10:72:83:9a:8a:2b:db:c9:d7:e1:ee:
fe:dd:b8:99:31:11:0c:71:e6:22:90:24:ca:43:d6:d9:30:e2:
d3:86:a9:4a:0e:db:1b:72:2c:66:7e:7c:45:78:f9:c2:bb:ee:
f4:3c:bb:8f:d8:27:78:f9:8c:ae:f9:67:00:2e:09:45:c8:53:
a8:a5:9a:00:4b:73:8b:0d:a3:b4:17:de:fc:dc:6c:9c:35:0c:
33:24:fd:4b:61:45:3d:6d:2e:b1:0b:cd:c9:60:88:58:39:71:
0e:40:c6:e6:74:bc:08:ac:1d:9f:2e:c9:9a:e5:01:4b:14:43:
b6:bb:d6:63:f7:8d:5a:af:2d:8f:71:bb:63:ae:5e:32:05:74:
25:c1:0f:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFtnrx0Z6kfpZYQwpVyXGehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDBmYmM0ZGU4MWVlMjcyN2FiYTNlOTEwYWZjZDJhNTNh
NjY0MGMwHhcNMjYxMDI0MTExNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2RkMzBkZTQzZjIwYzI4NGU5YmRkNDNiM2U0MDRhMjJlOTAyM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq47v3KxLC7RbF0d7b96qJ+zDlz1
2p+EBlD52tVGeoS1tnJ3BO/ROR6QWDUyFwxJrFDLeBJHLdFo6H3zWsUkhRpy4iPf
AJUFCy4MUI/QOJqXUm7pqh+4lz4BTHaUh9nQStR4rUMA0HDHf9WMFqCqVyWmzT1O
fbtDOfASs+4EbqedlpJexPROCNZIy6vb4YeSAQSr7C+zitkbUxJ3SHFPwLxix7fN
F2rMyFESfcUhQCQLirYkg9ccFPTLQylrfdJtrdBnu4VDzd9Twj6XgCvVzf5C6wUo
8b1kN9BguHCud6ngU6+9BS2S4vr1WBqgXcVDAU55j73utk09AD5E2eItYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfdMN5D8gwoTpvdQ7PkBKIukCPzMB8GA1UdIwQY
MBaAFN/Q+8Tege4nJ6uj6RCvzSpTpmQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAt
ZWRiMDQxOGNhYzRkLzEvTjkwdzNrUHlEQ2hPbTkxRHMtUUVvaTZRSV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAtZWRiMDQxOGNhYzRk
LzEvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpNMA0G
CSqGSIb3DQEBCwUAA4IBAQAWSzj+l4cwXDz4UALwsaNK8hUOiCT/VlJLK3TJTHnn
pNzDkQtowocWsl2oBM1Hu9+aO1KFVVgzdym4jZ1beyC0jrEJ1Zt49QmWg4QpxwHA
kq2WOsvvWc9O0yzl49dx7b1oSQLwOs8Sc5pLWOKGj/X7Rl0sEHKDmoor28nX4e7+
3biZMREMceYikCTKQ9bZMOLThqlKDtsbcixmfnxFePnCu+70PLuP2Cd4+Yyu+WcA
LglFyFOopZoAS3OLDaO0F9783GycNQwzJP1LYUU9bS6xC83JYIhYOXEOQMbmdLwI
rB2fLsma5QFLFEO2u9Zj941ary2Pcbtjrl4yBXQlwQ+x
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:54 2026 by rpki-client