Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HrxcodrvVIM_GMxKhZQudNRip6c.roa
File: HrxcodrvVIM_GMxKhZQudNRip6c.roa (raw, json)
Hash identifier: MTdn9qnsxs92sBTi2UkM6k+YAlFOUGhoYZbEqur9JIg=
Subject key identifier: 1E:BC:5C:A1:DA:EF:54:83:3F:18:CC:4A:85:94:2E:74:D4:62:A7:A7
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0D287E6BAA73019B16944AEF2D7DF3C68
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HrxcodrvVIM_GMxKhZQudNRip6c.roa
Signing time: Thu 24 Sep 2026 08:28:36 +0000
ROA not before: Thu 24 Sep 2026 08:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 77.90.175.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:87:e6:ba:a7:30:19:b1:69:44:ae:f2:d7:df:3c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 24 08:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ebc5ca1daef54833f18cc4a85942e74d462a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:cc:c2:84:b3:67:ae:4f:d8:85:ed:35:e7:
04:53:d6:ba:f6:77:60:58:5b:d1:7f:93:77:3c:87:
0e:53:0a:79:85:69:33:26:c7:e1:92:9a:ed:17:cd:
09:3c:58:38:53:09:14:93:2b:83:80:67:61:de:e2:
3c:1d:41:a4:f0:57:61:e6:66:f3:ff:8e:79:ee:3b:
df:76:45:5b:52:d3:21:82:d6:f8:63:2e:d8:45:69:
f0:3e:b3:7e:bf:3c:28:ac:5e:70:8d:78:96:59:fe:
f2:77:fe:d9:30:71:9f:56:ce:5c:2c:40:35:1d:24:
4b:8d:17:88:d2:64:ac:32:22:82:f3:a7:08:b7:b2:
ce:20:14:f8:34:c0:bf:4b:20:9f:49:2a:9a:a7:53:
63:8b:ad:86:a2:2e:ec:9d:44:c8:83:57:63:e4:87:
36:1e:90:78:07:68:29:c3:4e:24:df:af:c1:c8:bf:
5f:8d:3b:19:a7:e7:78:f2:5d:5d:0a:36:3e:e7:15:
fb:ec:c8:2b:2b:04:5c:dc:7b:a2:b3:6d:78:be:7d:
d4:2d:11:91:8a:91:14:f3:0b:6a:f4:b7:1a:58:b2:
64:de:d5:f8:64:3a:a9:ff:27:ff:58:83:dd:10:e0:
0e:0b:82:17:6d:f1:47:42:67:59:0b:3e:ef:5e:85:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:5C:A1:DA:EF:54:83:3F:18:CC:4A:85:94:2E:74:D4:62:A7:A7
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HrxcodrvVIM_GMxKhZQudNRip6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.175.0/24
77.90.182.0/24
77.90.186.0/24
213.209.129.0/24
213.209.131.0/24
213.209.152.0/24
213.209.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:23:a4:f3:9c:fe:63:2c:fc:30:ff:e5:1f:90:45:72:30:ec:
be:f0:c3:52:8e:db:9f:74:d9:9e:98:49:a1:89:5b:a4:6d:49:
47:12:20:12:fb:1f:05:2a:4a:18:47:09:01:1d:ec:40:be:4b:
4e:36:ff:09:bf:23:91:cf:e3:10:60:ca:00:dd:26:af:86:66:
e9:0b:4e:23:44:91:58:68:4c:3e:55:b8:ae:b3:1a:08:91:97:
59:3f:b7:25:e9:8e:72:c0:fb:5c:3d:45:d8:96:d0:7b:44:c2:
2a:5b:54:c1:94:f3:b4:fe:82:79:57:7f:38:29:98:85:df:d0:
83:88:8a:9f:db:83:e6:10:8b:47:74:11:e7:0d:63:fe:18:1c:
85:98:ed:a3:50:a5:9a:9a:40:85:fb:6a:a7:13:04:b2:58:76:
d4:18:12:bf:7f:ae:0d:3a:a8:03:34:1e:fd:18:4b:cd:cb:5f:
45:66:f7:01:eb:58:56:38:06:c4:2e:96:83:f4:2d:26:bb:e5:
bb:29:b4:78:08:66:4a:90:1d:c5:13:e3:52:66:0a:7a:7f:a1:
ed:f0:c6:97:2f:0d:d6:54:d9:39:d9:72:34:76:62:b6:8f:e9:
32:75:8c:3a:3c:06:54:12:bc:40:0a:99:d1:9e:c2:12:27:18:
c1:7c:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:05:50 2026 by rpki-client