Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa
File: 1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa (raw, json)
Hash identifier: 7whK1SRZtYZ93wf2pg24GN/SH22buAO3qk0+HbEyWJg=
Subject key identifier: D5:9F:20:D1:76:43:80:2D:A1:E9:96:62:64:6C:D1:FA:99:81:41:71
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019985CD373DA8BEACD43D0018DA50488F0C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa
Signing time: Fri 26 Sep 2025 11:34:02 +0000
ROA not before: Fri 26 Sep 2025 11:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:cd:37:3d:a8:be:ac:d4:3d:00:18:da:50:48:8f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 26 11:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59f20d17643802da1e99662646cd1fa99814171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:f9:0f:c3:a5:ce:82:c2:3f:96:c5:af:32:
c8:84:90:21:e6:9c:3d:25:cf:5e:22:a4:f0:70:22:
03:8a:e7:4b:ad:f8:77:25:a4:03:c0:88:7c:de:19:
51:b7:67:50:9a:14:65:91:08:29:7a:c1:b0:8a:c9:
34:00:f5:a0:c0:6b:f1:57:2c:9a:08:ef:3b:39:35:
ae:e7:a2:e5:0b:de:a0:fb:cf:51:cd:df:13:c3:d1:
40:77:0c:cb:22:8a:cc:78:08:a4:5a:c1:fb:57:28:
d0:4b:65:74:a6:c9:7f:9b:9d:8b:8f:0d:9a:5a:f2:
eb:b6:c9:44:cd:46:57:31:bf:67:36:f5:fc:6f:68:
65:90:ef:ce:f2:50:87:80:93:5f:6f:13:34:50:1e:
87:8d:e1:ef:12:f8:02:96:9c:f5:3d:55:52:ae:c2:
37:4c:5a:c8:43:60:37:1e:33:55:29:1f:bf:12:2d:
75:58:28:72:29:f3:c4:98:bf:36:be:41:13:4f:67:
89:7b:d2:44:ad:b4:61:97:7d:40:b1:f8:84:2d:b7:
3b:e9:c1:bf:fc:5d:a9:1c:4f:7e:15:6a:23:66:1f:
b1:cc:19:7b:d7:21:b0:d7:58:0e:a3:0d:15:c0:3f:
50:36:82:96:38:eb:a2:17:57:4d:f5:ec:2d:8d:4d:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:20:D1:76:43:80:2D:A1:E9:96:62:64:6C:D1:FA:99:81:41:71
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.148.0/24
77.90.156.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4c:05:07:0e:0c:c9:1b:9b:e5:ac:7b:c7:97:39:45:86:2c:
55:d3:4a:82:b2:3d:cb:80:ac:54:05:ee:66:90:9c:90:90:0b:
16:47:1b:f3:76:09:f7:61:4f:84:d4:54:e4:43:78:49:db:05:
6a:bb:6c:b2:16:42:a1:9e:bb:1f:69:3c:ad:b0:f3:f1:cf:c2:
d0:54:01:a9:6e:2f:21:17:1e:aa:b5:d5:87:a8:f8:3f:8b:80:
dd:3c:8d:c3:be:d2:d7:44:89:c6:89:19:a4:2b:00:62:41:c3:
55:59:a6:b2:7c:3e:f9:dd:78:e5:ed:6d:95:de:b3:b7:4c:6f:
d4:15:06:fa:7f:1a:2c:05:db:36:aa:75:00:59:b0:81:cc:bf:
13:6f:1e:28:79:5a:81:43:f9:98:1d:b9:8f:ff:08:e6:44:d8:
c3:4c:9d:8b:33:33:64:27:d5:87:4c:4c:39:b0:62:a9:74:9e:
be:f6:8a:36:1e:4f:40:ad:96:98:71:d7:c3:40:db:c4:85:d7:
be:f5:f7:2a:51:66:75:bd:ee:52:1d:d6:c1:77:a2:6e:03:a3:
8c:e9:0b:73:db:83:09:72:c3:a3:84:68:89:ca:b7:8c:b8:43:
fe:41:0d:8d:74:9d:19:ef:33:76:95:45:1b:b3:f8:be:ff:57:
d0:ed:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:55 2025 by rpki-client