Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/pnHxiuSPObCg3GJJHIb0nmQxT6w.roa
File: pnHxiuSPObCg3GJJHIb0nmQxT6w.roa (raw, json)
Hash identifier: 8UsS7TipjrlCjjP90mKbnimagxlN22XPBZvkz8In7H4=
Subject key identifier: A6:71:F1:8A:E4:8F:39:B0:A0:DC:62:49:1C:86:F4:9E:64:31:4F:AC
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A0B12FFCD779F466FA4ED5974B8D057206
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/pnHxiuSPObCg3GJJHIb0nmQxT6w.roa
Signing time: Thu 17 Sep 2026 21:05:07 +0000
ROA not before: Thu 17 Sep 2026 21:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50867
IP address blocks: 77.91.91.0/24 maxlen: 24
77.91.92.0/24 maxlen: 24
77.91.93.0/24 maxlen: 24
77.91.94.0/24 maxlen: 24
77.91.95.0/24 maxlen: 24
185.149.144.0/24 maxlen: 24
185.149.145.0/24 maxlen: 24
185.149.146.0/24 maxlen: 24
185.149.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:2f:fc:d7:79:f4:66:fa:4e:d5:97:4b:8d:05:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Sep 17 21:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a671f18ae48f39b0a0dc62491c86f49e64314fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:14:03:5b:10:64:b8:1a:99:47:90:57:94:
b3:2f:cd:80:3e:8b:dd:81:5c:ea:17:37:f5:c9:11:
f6:45:82:2a:c8:c6:77:3a:83:34:46:f7:8c:ee:dc:
ca:b3:2a:6e:82:b0:82:76:64:4a:f6:cc:00:5b:33:
c1:fb:8c:71:c8:03:cb:6c:73:f6:4a:6f:56:41:a8:
dc:a0:8e:fa:1e:60:a7:50:fa:4b:76:17:b0:84:bc:
dc:ea:93:6a:6c:92:49:71:e1:a1:de:e1:dd:b5:ca:
cb:3d:d7:19:de:fd:4a:c7:be:93:0c:8f:1b:17:d1:
23:df:02:58:27:83:af:23:38:fe:3d:e8:1d:85:bc:
af:7e:54:d2:19:6c:98:b1:f4:d2:53:99:e7:31:e2:
1d:e3:40:25:1d:6c:44:ee:71:85:70:00:01:d2:c8:
55:29:7f:e2:8b:01:98:85:f0:65:29:3b:fb:41:ba:
1a:93:51:fa:34:7e:5c:94:c1:d7:41:3e:ff:a7:dd:
1d:10:a7:5f:4f:0a:99:02:e2:34:1a:43:a6:41:1b:
3b:9f:a8:29:0f:6d:be:02:3d:39:c1:d4:de:6c:5f:
aa:b9:2e:0c:54:5d:9f:76:66:63:3d:a2:a8:92:a9:
cd:fa:c7:92:a6:36:d5:8a:92:46:b3:74:eb:13:73:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:F1:8A:E4:8F:39:B0:A0:DC:62:49:1C:86:F4:9E:64:31:4F:AC
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/pnHxiuSPObCg3GJJHIb0nmQxT6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.91.0-77.91.95.255
185.149.144.0/22
Signature Algorithm: sha256WithRSAEncryption
37:e0:dc:b4:31:25:a9:82:f0:42:62:ca:fb:e4:43:b1:7f:23:
9b:cd:e7:93:8d:ae:b4:d5:a6:1b:03:24:99:66:f3:22:67:d4:
54:c4:f7:a4:a5:d0:26:96:b6:c0:d9:68:63:fd:47:59:a8:e7:
32:dd:e5:41:c7:f9:52:52:41:c4:a5:92:fe:d4:a4:54:40:e3:
d2:ca:ed:c5:95:46:1c:a4:70:39:6c:45:ec:ad:98:ee:7d:f0:
5d:66:83:3a:3c:dd:25:3e:e5:87:18:ee:81:0c:9b:2b:d5:c3:
91:fb:b7:4a:a5:e2:80:1e:7b:06:22:d2:7a:41:a9:f8:b2:66:
80:dd:f7:6f:95:87:08:e8:dc:76:42:68:ae:b3:0d:7e:16:2e:
ac:35:be:48:72:15:dc:ae:e5:b6:e1:6a:99:9e:8e:fa:25:ff:
ca:83:ec:10:e3:68:80:cc:8f:34:a2:fd:62:0c:31:f7:79:f0:
69:59:e5:45:93:dd:3c:de:4c:ea:ca:23:56:d4:c0:c7:6b:59:
8d:0b:1a:f4:e9:55:8a:30:46:ef:c7:79:2e:d2:d6:00:f8:bd:
5e:57:59:2e:4e:25:00:7c:ff:59:a6:62:b6:2e:a7:62:77:b3:
ff:f7:72:8f:5d:ef:f1:f6:c5:87:f2:3d:b3:02:07:2c:80:68:
36:9f:f1:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:20 2026 by rpki-client