Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2JrbWk_k4DF5W13hIw9ToH2VTxg.roa
File: 2JrbWk_k4DF5W13hIw9ToH2VTxg.roa (raw, json)
Hash identifier: KhIjgv7s5Ysim4ARWwH2eEflvp5Tz7zxZe847X2Xnzs=
Subject key identifier: D8:9A:DB:5A:4F:E4:E0:31:79:5B:5D:E1:23:0F:53:A0:7D:95:4F:18
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A197BBBDEA071D7687BF358CE0AF745BCC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2JrbWk_k4DF5W13hIw9ToH2VTxg.roa
Signing time: Sun 01 Nov 2026 15:30:25 +0000
ROA not before: Sun 01 Nov 2026 15:30:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210387
IP address blocks: 77.90.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:bb:bd:ea:07:1d:76:87:bf:35:8c:e0:af:74:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 1 15:30:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d89adb5a4fe4e031795b5de1230f53a07d954f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:5f:04:8a:8e:2d:3c:5e:fb:14:ff:91:f1:
7a:bd:a3:3b:57:67:8a:c1:61:17:93:a5:0c:8e:23:
94:eb:6d:68:fc:27:23:dd:55:aa:62:7c:44:6f:bd:
83:08:6c:e6:2a:82:71:dc:8e:d7:f0:ec:dc:2f:28:
b4:4a:cb:8d:dd:c8:f2:b8:70:7e:28:5d:af:9e:80:
47:c2:a0:15:8f:88:22:ca:3d:79:0e:82:6a:76:96:
09:cf:be:95:dd:ec:88:c7:08:90:e6:82:c0:92:36:
6f:43:3d:c6:89:58:91:0b:5e:09:c3:0d:88:87:5c:
3d:1c:f5:31:d9:8f:bf:c0:f2:e6:bf:7e:33:1e:84:
57:9d:1f:44:2a:3b:ec:1f:c3:5c:f3:34:b5:2b:dc:
bd:f6:95:1f:d7:98:ec:15:05:48:a4:c4:67:ec:1a:
6a:b0:95:01:0f:27:6b:2f:84:0d:fa:a3:9a:77:37:
76:a5:01:3d:d1:22:17:75:54:1b:fd:c9:ae:fb:bd:
de:9f:0d:42:40:26:9c:84:60:27:5f:79:8c:14:e5:
7e:01:15:32:1f:cd:a1:02:d5:b4:8f:24:14:bd:05:
fe:37:b0:ef:76:99:ea:5c:8d:ba:85:cb:94:45:f8:
be:25:54:e9:d9:23:85:3e:43:c6:5d:d9:61:96:93:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:DB:5A:4F:E4:E0:31:79:5B:5D:E1:23:0F:53:A0:7D:95:4F:18
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2JrbWk_k4DF5W13hIw9ToH2VTxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.160.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0b:04:02:1e:da:aa:9a:f1:a1:94:c9:fd:51:29:75:7b:a5:
27:ed:24:e0:72:15:a5:05:f8:b5:b3:0c:2f:e5:9e:6b:01:59:
86:e5:6e:ac:d9:53:05:1f:0b:73:93:97:5c:60:47:a2:b9:f4:
ce:ea:40:dd:d3:62:5f:57:fc:3d:53:db:88:8a:12:20:a2:76:
91:53:28:6e:5c:8e:07:99:c4:dd:b8:a1:c7:65:5f:bc:00:57:
6f:c7:12:b9:d5:85:b1:11:ed:c0:2d:94:de:0e:ab:cc:8d:8b:
eb:39:ce:6f:1c:32:a1:b3:77:5f:47:8a:45:ba:9f:b7:d7:40:
4b:43:4a:d5:63:eb:d4:79:d5:59:87:b9:3c:98:b4:74:89:04:
dd:21:0e:55:b9:e1:c7:71:00:72:9f:78:a6:56:5f:22:25:c6:
e7:77:dd:0f:d4:25:43:43:2b:88:b3:10:03:0d:0b:13:eb:e3:
d8:f6:ad:15:cd:3f:b8:27:c3:a4:a8:d1:7d:75:f9:ae:e7:41:
97:00:4f:1c:19:bc:a0:b2:aa:a9:dc:b4:2c:8b:4d:7f:68:6a:
dc:02:3f:29:d8:3e:db:4b:8d:73:52:4a:8d:b9:bb:04:e5:e8:
72:d1:04:9b:8f:5d:4c:ed:32:dc:6f:3f:ab:de:70:b9:45:e3:
ce:68:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:57:28 2026 by rpki-client