Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Y1EwjaV7a9eVAgAhrsnxksIDpQ.roa
File: 1Y1EwjaV7a9eVAgAhrsnxksIDpQ.roa (raw, json)
Hash identifier: xa3gckHz1ChceSiF0rgEARg82tStCJlJUKlIhcFw/78=
Subject key identifier: D5:8D:44:C2:36:95:ED:AF:5E:54:08:00:86:BB:27:C6:4B:08:0E:94
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019EB6D077898634ED1D139030386CF8BF91
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Y1EwjaV7a9eVAgAhrsnxksIDpQ.roa
Signing time: Thu 11 Jun 2026 13:12:55 +0000
ROA not before: Thu 11 Jun 2026 13:12:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.165.0/24 maxlen: 24
77.90.175.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:d0:77:89:86:34:ed:1d:13:90:30:38:6c:f8:bf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 11 13:12:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d58d44c23695edaf5e54080086bb27c64b080e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:60:0b:65:80:22:de:d1:38:35:b1:45:09:
6e:23:8c:ac:e1:15:df:2e:44:fc:6a:fa:46:1f:c2:
dd:97:68:c4:59:20:48:57:a0:59:77:05:e1:cd:33:
9c:31:b9:62:db:71:c3:32:19:4a:e8:6a:53:05:22:
3a:65:27:a8:c8:f5:95:8d:00:c3:73:8b:d7:8e:84:
b9:c4:2c:f9:58:93:6a:58:cc:20:c3:66:b8:23:a9:
d5:71:de:c3:6f:69:5b:7a:52:d6:0b:73:84:11:e9:
06:74:2b:85:c3:24:ee:e5:94:06:3c:2e:5b:e8:3f:
94:45:ea:85:a8:c2:53:bb:44:8c:15:73:1f:7e:ad:
b9:43:85:61:c6:43:03:5e:81:29:81:e4:5d:e1:51:
18:45:71:fd:10:ad:85:7f:5d:22:d5:3e:4e:d6:27:
5b:af:88:22:90:cb:c2:68:33:44:a0:4a:a8:7a:a8:
f3:d6:94:19:73:79:ef:8c:8a:98:69:9e:2b:c1:be:
4e:f2:4a:cd:48:ce:a2:20:75:5a:31:9d:9b:ab:4d:
03:7a:00:6b:b2:c9:30:13:cc:6a:b4:2e:b1:e0:6b:
2b:7d:2e:77:2a:03:1f:08:39:d3:cb:47:b0:75:b8:
36:43:94:a3:f8:bf:b2:0d:0a:10:00:ce:cd:1f:57:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8D:44:C2:36:95:ED:AF:5E:54:08:00:86:BB:27:C6:4B:08:0E:94
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Y1EwjaV7a9eVAgAhrsnxksIDpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.165.0/24
77.90.175.0/24
77.90.177.0/24
77.90.182.0/24
77.90.186.0/24
213.209.129.0/24
213.209.131.0/24
213.209.141.0/24
213.209.143.0/24
213.209.145.0/24
213.209.152.0/24
213.209.155.0-213.209.157.255
Signature Algorithm: sha256WithRSAEncryption
1d:17:08:91:97:96:04:7e:b9:7f:10:ec:1a:12:21:45:32:80:
53:2c:44:8d:fb:0b:5d:24:52:98:40:bf:76:98:a0:67:be:39:
84:25:18:9c:98:43:17:b7:fb:ae:fe:b1:68:30:f1:68:2b:e9:
5a:f4:9c:dc:3b:13:b6:29:f0:47:81:c5:ab:3e:7a:c2:1c:e7:
47:ad:6c:ec:fa:cb:d7:72:f8:96:31:95:48:49:e9:bd:15:91:
a0:25:41:da:8f:80:ca:cd:ba:2d:a1:75:cf:61:27:4e:41:21:
fb:3e:a2:33:49:db:1c:2b:57:82:d0:0f:ad:50:4e:4d:ba:6a:
1b:fb:dc:5c:46:0e:76:80:fd:45:32:44:6e:ea:be:a1:a3:47:
da:4a:a2:2c:a2:5e:a4:be:ea:5a:64:7f:10:40:cb:f5:05:d6:
87:c7:64:fa:7e:b2:bc:24:ca:9c:7c:ee:72:93:d4:75:94:c8:
ff:d5:9b:48:0d:50:28:07:c5:21:b0:18:96:b3:fa:ec:9f:f3:
b3:84:9d:39:68:2a:18:6d:fe:11:f1:ee:a1:7e:ad:0a:ee:8f:
ea:11:a9:74:46:cc:18:4b:ee:ca:0d:31:11:fb:bb:8b:9f:1f:
b0:d6:ec:6c:c0:c7:2c:ac:21:2a:11:bf:7f:07:39:59:08:e3:
8b:e5:37:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZ620HeJhjTtHROQMDhs+L+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNjExMTMxMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNThkNDRjMjM2OTVlZGFmNWU1NDA4MDA4NmJiMjdjNjRiMDgwZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylVgC2WAIt7RODWxRQluI4ys4RXf
LkT8avpGH8Ldl2jEWSBIV6BZdwXhzTOcMbli23HDMhlK6GpTBSI6ZSeoyPWVjQDD
c4vXjoS5xCz5WJNqWMwgw2a4I6nVcd7Db2lbelLWC3OEEekGdCuFwyTu5ZQGPC5b
6D+UReqFqMJTu0SMFXMffq25Q4VhxkMDXoEpgeRd4VEYRXH9EK2Ff10i1T5O1idb
r4gikMvCaDNEoEqoeqjz1pQZc3nvjIqYaZ4rwb5O8krNSM6iIHVaMZ2bq00DegBr
sskwE8xqtC6x4GsrfS53KgMfCDnTy0ewdbg2Q5Sj+L+yDQoQAM7NH1dK/wIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFNWNRMI2le2vXlQIAIa7J8ZLCA6UMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMVkxRXdqYVY3YTllVkFnQWhyc254a3NJRHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQATVqlAwQA
TVqvAwQATVqxAwQATVq2AwQATVq6AwQA1dGBAwQA1dGDAwQA1dGNAwQA1dGPAwQA
1dGRAwQA1dGYMAwDBADV0ZsDBAHV0ZwwDQYJKoZIhvcNAQELBQADggEBAB0XCJGX
lgR+uX8Q7BoSIUUygFMsRI37C10kUphAv3aYoGe+OYQlGJyYQxe3+67+sWgw8Wgr
6Vr0nNw7E7Yp8EeBxas+esIc50etbOz6y9dy+JYxlUhJ6b0VkaAlQdqPgMrNui2h
dc9hJ05BIfs+ojNJ2xwrV4LQD61QTk26ahv73FxGDnaA/UUyRG7qvqGjR9pKoiyi
XqS+6lpkfxBAy/UF1ofHZPp+srwkypx87nKT1HWUyP/Vm0gNUCgHxSGwGJaz+uyf
87OEnTloKhht/hHx7qF+rQruj+oRqXRGzBhL7soNMRH7u4ufH7DW7GzAxyysISoR
v38HOVkI44vlN10=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:21:28 2026 by rpki-client