Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/skwAlOpJAcdHksUYGz4EwjUIsXM.roa
File: skwAlOpJAcdHksUYGz4EwjUIsXM.roa (raw, json)
Hash identifier: KLTUqEUZLvS5HlRAC1b4oFl4mIh8SOSk823xWU684vc=
Subject key identifier: B2:4C:00:94:EA:49:01:C7:47:92:C5:18:1B:3E:04:C2:35:08:B1:73
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019DF1F909BA58E29DCF5F3F0A3596265A02
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/skwAlOpJAcdHksUYGz4EwjUIsXM.roa
Signing time: Mon 04 May 2026 07:52:03 +0000
ROA not before: Mon 04 May 2026 07:52:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 77.90.168.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.135.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:f9:09:ba:58:e2:9d:cf:5f:3f:0a:35:96:26:5a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 4 07:52:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b24c0094ea4901c74792c5181b3e04c23508b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:6b:27:91:07:af:7d:60:dd:9c:a7:dd:d2:
ac:e7:70:4b:41:e9:b5:fc:d1:ff:e6:73:60:63:3c:
7a:92:13:c9:b8:9d:82:37:55:ec:f7:39:66:7a:80:
04:5b:ae:94:32:ce:48:c7:ac:bd:03:99:41:84:06:
15:e3:d6:ec:2e:cb:41:2c:f7:af:98:09:c3:d4:e3:
ac:35:52:5c:7c:06:57:02:77:50:40:fb:25:cf:e1:
52:f8:7d:2c:07:a7:2c:19:52:75:fa:83:fe:94:8a:
80:52:2d:a3:1e:f7:2c:0d:09:ed:c5:63:2e:5c:50:
65:68:af:5b:9f:ca:51:8f:9f:c9:05:5f:36:de:d7:
02:e8:24:18:97:c7:97:eb:ad:24:95:9e:f8:93:c0:
4c:c0:dd:80:a9:00:99:af:28:38:55:ce:e9:98:98:
32:57:a0:4d:5b:85:2c:9e:08:d9:d4:c9:ef:5d:8b:
a5:6f:c3:e1:77:90:ef:65:e2:61:e6:3d:88:ee:22:
15:23:6b:68:af:04:7b:36:6b:a6:e0:b1:45:90:63:
00:d5:8b:bc:e8:4b:66:c2:04:66:e8:fe:10:5f:9a:
c4:0b:bc:af:4c:e1:75:f2:33:10:bc:9a:9b:7b:15:
2d:72:51:7c:d3:4d:ee:78:97:a4:3c:79:ba:31:9d:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:00:94:EA:49:01:C7:47:92:C5:18:1B:3E:04:C2:35:08:B1:73
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/skwAlOpJAcdHksUYGz4EwjUIsXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.168.0/24
77.90.181.0/24
185.230.12.0/24
213.209.133.0-213.209.135.255
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
04:e8:89:3d:ab:b7:88:5e:a8:c5:d6:29:98:86:7e:23:56:a0:
24:6f:6b:a9:8f:70:8b:16:cf:5b:8d:55:09:b6:43:79:82:6d:
25:e3:c0:16:6d:44:9c:49:98:49:4c:18:79:a8:e4:9c:57:0e:
3a:79:5b:00:c5:78:e6:e9:b0:8c:6a:21:42:e7:ee:e8:ff:f4:
9c:55:05:50:6b:60:d4:32:00:02:27:bb:c9:43:de:d1:d4:23:
62:f8:31:b2:40:3f:d8:6e:ae:b6:87:cd:8b:88:1a:b8:53:2e:
c6:bf:22:f7:b4:4f:f2:56:40:de:33:4a:c0:09:bf:e8:a7:b6:
d6:ad:7a:a9:2a:7b:2c:59:6f:53:09:00:00:7e:06:43:11:81:
b4:ab:22:58:10:0d:ed:9f:40:d0:bc:37:cf:3a:fb:a6:0d:f7:
84:8d:b9:c9:f3:eb:1f:0f:76:3a:9d:06:30:c8:f5:64:13:55:
03:2b:70:82:76:e5:82:fd:96:f5:27:e5:98:bd:5d:44:c2:f5:
fb:2c:fd:33:64:88:c2:e8:8b:d4:4e:f1:61:d7:26:4e:c4:ad:
3b:fc:e3:39:8b:dc:13:5f:da:4f:e1:e3:37:12:b8:6c:4a:2e:
6e:af:ae:91:f6:0d:b8:a7:5d:00:d3:08:8f:0d:78:a3:95:e0:
a1:cd:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:43 2026 by rpki-client