Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/hqKvBeK3XKVKA5-Y0aUcuIMRMY4.roa
File: hqKvBeK3XKVKA5-Y0aUcuIMRMY4.roa (raw, json)
Hash identifier: O3T0OOd6bHrZQ6RgmID8QWHDSs65cWOaJr5blLDT9OM=
Subject key identifier: 86:A2:AF:05:E2:B7:5C:A5:4A:03:9F:98:D1:A5:1C:B8:83:11:31:8E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019F864DD0B0CFD55A1398DA78A6F34C45E3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/hqKvBeK3XKVKA5-Y0aUcuIMRMY4.roa
Signing time: Tue 21 Jul 2026 20:11:14 +0000
ROA not before: Tue 21 Jul 2026 20:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 77.90.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:4d:d0:b0:cf:d5:5a:13:98:da:78:a6:f3:4c:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 21 20:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86a2af05e2b75ca54a039f98d1a51cb88311318e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:0d:02:96:68:bf:e4:c8:d1:20:c0:39:30:
29:64:e9:a5:65:11:5e:60:35:bc:9c:57:fa:b9:67:
71:65:bd:6a:86:5b:85:0c:e1:aa:ed:a7:0b:9c:66:
4b:3e:ff:e5:b0:f2:64:4b:a0:22:48:62:7c:17:9a:
5f:d0:7f:d5:60:a2:ba:8b:6f:3c:34:a7:70:72:64:
5a:af:cb:69:69:78:dd:a7:bf:87:20:99:3b:a8:c2:
70:b5:28:df:46:d8:6a:d6:6f:da:cc:ea:70:51:b5:
0f:4d:57:a6:16:18:40:37:1b:d5:a4:7f:f7:f6:06:
47:98:be:56:53:ec:0f:4a:52:8a:b1:d7:3f:ac:ed:
fe:61:38:95:24:61:e9:b9:d8:6a:b5:7a:70:7c:33:
6f:79:a4:c7:1e:e2:2c:79:0b:cf:1d:6f:2c:b7:65:
1a:c2:76:ce:0d:9a:57:e1:53:4c:62:64:1e:3a:76:
6f:66:a3:f5:1b:ad:dc:c6:ed:0e:1d:49:90:e2:16:
8e:43:1c:5d:98:fd:60:70:6e:b8:b4:db:f1:2b:f5:
5d:e8:75:6a:c8:04:32:f5:69:11:8c:74:f6:45:4e:
21:72:6f:dc:dd:7a:05:10:0b:ac:60:f5:0b:db:4c:
29:0c:5d:06:ef:9e:71:95:b6:db:d4:ff:d0:94:b1:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A2:AF:05:E2:B7:5C:A5:4A:03:9F:98:D1:A5:1C:B8:83:11:31:8E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/hqKvBeK3XKVKA5-Y0aUcuIMRMY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ba:94:7b:15:c0:52:86:79:22:5f:78:9a:05:d4:41:ae:ce:
8c:05:56:94:92:ac:01:4f:4a:73:fe:cb:88:7f:45:25:53:91:
bc:03:3a:68:20:bb:23:67:64:f4:4b:81:14:98:a0:ae:89:43:
e0:8c:37:a3:d5:29:de:6b:99:e1:ad:93:0b:0c:4b:1a:c9:3e:
6d:47:ac:92:36:ad:8a:b7:6e:81:85:93:eb:d4:1a:b0:20:ee:
68:6e:c5:d7:14:dd:cd:1e:c0:ac:3f:8c:ac:64:6f:b7:3b:b0:
c5:c8:29:52:9a:11:a8:90:97:47:df:2d:b0:c6:63:4a:48:63:
d3:eb:95:2e:ac:75:89:7e:14:f0:b1:73:08:b2:03:1f:5f:22:
bb:d3:c1:87:c0:2b:c7:6f:a9:c4:3c:61:df:9e:93:fd:9d:55:
db:6b:21:ac:1d:e6:f5:be:30:e3:16:eb:e2:e5:53:82:d1:b3:
15:ee:31:c5:c0:ac:c7:93:f0:95:a0:7b:20:e3:48:3a:6e:5d:
6b:37:b2:26:71:ff:02:d8:c3:1f:4b:78:fe:97:48:b3:e2:11:
c5:3f:42:36:28:2a:95:27:c5:b6:d7:56:4b:98:e9:45:2a:87:
47:9e:36:59:76:75:46:67:b5:13:3e:a5:09:73:08:42:8d:2c:
89:08:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:40 2026 by rpki-client