Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rV-d7VXcUbLnrbK3ohsI3QLRWIw.roa
File: rV-d7VXcUbLnrbK3ohsI3QLRWIw.roa (raw, json)
Hash identifier: Si6Gbj6iN9YCKSRyp8uzQUvQVAIZ5dMzfyTQ7eulP40=
Subject key identifier: AD:5F:9D:ED:55:DC:51:B2:E7:AD:B2:B7:A2:1B:08:DD:02:D1:58:8C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01976488203A8AD01643BD940AD677F93F2F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rV-d7VXcUbLnrbK3ohsI3QLRWIw.roa
Signing time: Thu 12 Jun 2025 14:25:31 +0000
ROA not before: Thu 12 Jun 2025 14:25:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:88:20:3a:8a:d0:16:43:bd:94:0a:d6:77:f9:3f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 12 14:25:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad5f9ded55dc51b2e7adb2b7a21b08dd02d1588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:13:43:81:74:cc:ab:78:6a:5f:d0:04:05:
c1:14:5a:a6:50:5e:1e:f9:58:fd:5b:ff:90:a3:9a:
35:bb:d8:7c:78:18:5c:92:33:cf:c6:9c:54:4a:d8:
69:a3:40:c8:7f:1a:89:b4:36:30:d5:2c:ad:6f:c3:
72:5d:e1:0c:94:9c:27:67:7b:f3:72:a1:f5:e9:0f:
88:b7:9b:98:7c:fb:46:fd:3f:23:6b:42:e8:03:de:
fd:80:16:28:a3:48:73:26:a3:1c:52:b9:de:ce:bd:
4f:e4:4c:8c:32:23:dd:ff:dd:d5:e5:0b:2a:f7:f4:
56:6f:9b:e3:e6:b6:8a:26:d0:da:18:c9:70:fd:31:
bb:d5:55:75:f4:83:bf:fa:60:1c:1d:61:68:fb:c4:
bb:29:d3:a5:ed:a1:e8:5d:05:44:c9:d1:58:dd:d0:
52:1e:60:15:53:0b:d7:4d:40:51:a1:50:d3:9e:89:
59:5d:18:c9:d7:77:10:b9:01:9c:92:b0:e6:ea:87:
bc:b4:9f:8d:26:18:d7:3c:20:78:85:01:4f:c6:5f:
36:18:1c:f2:18:4b:bf:95:d6:49:2d:2b:2d:9f:3e:
e2:cf:b6:19:3e:15:a3:aa:dd:fc:36:4d:bc:91:c2:
1b:d3:57:ab:6b:2a:e4:08:36:01:5b:17:dc:2e:d8:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:9D:ED:55:DC:51:B2:E7:AD:B2:B7:A2:1B:08:DD:02:D1:58:8C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rV-d7VXcUbLnrbK3ohsI3QLRWIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.142.0/24
77.90.145.0/24
77.90.148.0/24
77.90.164.0/24
77.90.188.0/24
185.230.13.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9a:d6:26:a7:3a:42:53:b3:fb:7c:14:44:d9:84:43:8d:67:
89:26:11:26:ac:6c:62:3e:3c:eb:d0:3c:b7:0f:22:a2:3e:7c:
08:85:b5:d0:2e:63:9a:d0:82:55:a7:2c:6d:51:43:59:14:07:
0f:de:9b:82:54:fa:51:32:59:29:e9:1d:77:c7:b3:9e:99:3e:
ae:9e:5f:5b:98:b1:7a:c4:7e:a4:03:5e:dc:58:04:6f:f2:bc:
37:02:b6:0a:2c:72:f6:b4:a1:6e:9c:80:9c:00:52:34:c2:2e:
7a:0d:43:26:24:dd:a7:e7:e1:17:b1:c1:17:5f:1a:0f:df:dd:
47:7f:5c:80:7d:80:09:25:2a:75:18:48:1b:9c:89:a4:cd:67:
d8:ca:00:57:e5:ff:83:65:a7:60:fa:99:4a:b1:31:92:64:d6:
9b:c0:7f:7a:59:56:ec:fe:94:7a:88:7b:ed:c8:49:24:92:05:
71:7d:6a:07:16:41:4d:ee:38:d4:58:20:30:ae:15:7a:2d:41:
df:de:42:ae:df:eb:68:7b:c7:06:28:c7:06:b6:e5:89:29:fd:
48:e6:9b:2e:83:0a:8d:c3:1a:e8:de:89:f2:2e:da:8f:77:6c:
48:7c:03:a3:18:aa:bc:43:fc:15:7a:10:3a:c1:a2:71:57:18:
16:0b:bc:3f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZdkiCA6itAWQ72UCtZ3+T8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwNjEyMTQyNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDVmOWRlZDU1ZGM1MWIyZTdhZGIyYjdhMjFiMDhkZDAyZDE1ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK0TQ4F0zKt4al/QBAXBFFqmUF4e
+Vj9W/+Qo5o1u9h8eBhckjPPxpxUSthpo0DIfxqJtDYw1Sytb8NyXeEMlJwnZ3vz
cqH16Q+It5uYfPtG/T8ja0LoA979gBYoo0hzJqMcUrnezr1P5EyMMiPd/93V5Qsq
9/RWb5vj5raKJtDaGMlw/TG71VV19IO/+mAcHWFo+8S7KdOl7aHoXQVEydFY3dBS
HmAVUwvXTUBRoVDTnolZXRjJ13cQuQGckrDm6oe8tJ+NJhjXPCB4hQFPxl82GBzy
GEu/ldZJLSstnz7iz7YZPhWjqt38Nk28kcIb01erayrkCDYBWxfcLtj7dwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFK1fne1V3FGy562yt6IbCN0C0ViMMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvclYtZDdWWGNVYkxucmJLM29oc0kzUUxSV0l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATVqOAwQA
TVqRAwQATVqUAwQATVqkAwQATVq8AwQAueYNAwQAueYPMA0GCSqGSIb3DQEBCwUA
A4IBAQCkmtYmpzpCU7P7fBRE2YRDjWeJJhEmrGxiPjzr0Dy3DyKiPnwIhbXQLmOa
0IJVpyxtUUNZFAcP3puCVPpRMlkp6R13x7OemT6unl9bmLF6xH6kA17cWARv8rw3
ArYKLHL2tKFunICcAFI0wi56DUMmJN2n5+EXscEXXxoP391Hf1yAfYAJJSp1GEgb
nImkzWfYygBX5f+DZadg+plKsTGSZNabwH96WVbs/pR6iHvtyEkkkgVxfWoHFkFN
7jjUWCAwrhV6LUHf3kKu3+toe8cGKMcGtuWJKf1I5psugwqNwxro3onyLtqPd2xI
fAOjGKq8Q/wVehA6waJxVxgWC7w/
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:36:00 2025 by rpki-client