Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/NyFyTToHrV_iLH9GIOJWP_TIsh4.roa
File: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (raw, json)
Hash identifier: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=
Subject key identifier: 37:21:72:4D:3A:07:AD:5F:E2:2C:7F:46:20:E2:56:3F:F4:C8:B2:1E
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A04258C912857B4EE251D6932B77C1F951
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/NyFyTToHrV_iLH9GIOJWP_TIsh4.roa
Signing time: Thu 27 Aug 2026 08:31:49 +0000
ROA not before: Thu 27 Aug 2026 08:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 185.90.4.0/24 maxlen: 24
185.90.5.0/24 maxlen: 24
185.90.6.0/24 maxlen: 24
185.90.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:58:c9:12:85:7b:4e:e2:51:d6:93:2b:77:c1:f9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Aug 27 08:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3721724d3a07ad5fe22c7f4620e2563ff4c8b21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:cd:f6:c8:c0:b3:55:d3:3c:f2:40:94:ef:
74:0f:c2:7b:7c:eb:79:b8:cf:2f:9e:bd:d4:d8:60:
65:aa:1a:4d:0c:33:bc:51:a6:2f:9a:4a:81:bf:0f:
3c:ff:37:c1:b2:f4:cf:54:ee:98:14:3e:7e:73:86:
36:f4:3e:45:48:2c:da:10:7c:ec:3c:08:f2:82:3b:
6f:db:57:5a:1c:a9:ad:6b:53:10:20:84:2b:22:5d:
35:f0:4e:29:5d:9d:dc:da:83:f6:ce:96:c2:80:74:
8b:b4:2f:dc:f0:b1:e7:d4:2e:7c:36:f3:e8:4d:2d:
d5:f3:80:95:e6:b8:70:08:58:a5:5f:36:75:77:c4:
6c:4e:86:e7:71:ab:8a:1a:ec:03:7e:a6:f2:6f:de:
90:10:55:b9:b3:85:a9:30:30:88:46:d0:12:85:27:
69:ce:d3:c1:da:e8:08:ee:c6:8b:4c:22:2c:00:db:
11:0f:fb:0c:8c:17:09:f8:2e:0c:75:42:ec:1a:89:
ba:dd:11:5b:99:3e:32:09:d6:67:67:cf:f6:92:bb:
8f:9b:ff:6d:0b:79:b5:2a:44:bb:22:8b:81:09:4d:
ec:10:3e:86:96:0b:cf:23:9e:38:c2:dc:3d:e9:e8:
55:03:b7:89:22:a8:e4:b3:5b:63:bd:15:9d:02:ea:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:72:4D:3A:07:AD:5F:E2:2C:7F:46:20:E2:56:3F:F4:C8:B2:1E
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/NyFyTToHrV_iLH9GIOJWP_TIsh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:19:d8:54:05:a5:48:86:56:b1:03:cf:28:52:39:bb:23:22:
92:08:6c:43:e9:3f:cb:eb:75:ab:b5:ee:25:0b:68:e4:b1:22:
3a:1e:c8:af:45:62:ac:67:aa:b1:e8:e6:78:53:63:be:66:90:
c5:41:46:b2:a9:28:fc:aa:06:5e:e9:ca:ca:be:4e:17:40:08:
ed:c0:0d:2c:a5:3c:de:4a:43:9f:c8:e0:ba:67:f3:01:94:f7:
f6:03:bd:68:1f:f7:1f:0f:84:e2:4f:80:95:81:88:96:34:8a:
d2:42:ee:ef:dc:97:3b:82:25:f3:04:80:4e:49:0e:93:e3:d6:
8b:40:72:bc:3a:11:d2:cc:d1:83:6b:84:3f:81:67:cf:94:58:
9f:24:48:b4:89:00:27:4b:4e:16:31:7d:85:a8:36:d3:d3:c1:
3f:d5:4a:ab:ec:e3:47:b6:5a:32:f1:3e:b1:e3:4b:3a:4a:83:
e4:2b:68:ad:45:23:13:f8:89:75:49:ff:af:f2:60:90:1e:df:
63:0d:fd:67:cc:1b:9b:61:ca:43:99:10:83:b3:82:c8:1a:df:
bb:0b:96:25:f7:c9:83:99:2b:5c:d9:9a:e3:b2:69:01:25:26:
03:84:5a:58:16:36:d7:46:c5:18:55:d7:b4:ee:f1:ac:ab:1f:
af:15:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:48:23 2026 by rpki-client