Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PWAh_2RuxDnoNmntOECVPDH6RBE.roa
File: PWAh_2RuxDnoNmntOECVPDH6RBE.roa (raw, json)
Hash identifier: pdhSdMiMMvaP56G3c7nm7TelYNCSzBk95cSLrOqWNUU=
Subject key identifier: 3D:60:21:FF:64:6E:C4:39:E8:36:69:ED:38:40:95:3C:31:FA:44:11
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019C9A2FC23E4651F2617A2C9A39A0E4B95B
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PWAh_2RuxDnoNmntOECVPDH6RBE.roa
Signing time: Thu 26 Feb 2026 13:42:26 +0000
ROA not before: Thu 26 Feb 2026 13:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:2f:c2:3e:46:51:f2:61:7a:2c:9a:39:a0:e4:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 26 13:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d6021ff646ec439e83669ed3840953c31fa4411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:56:6a:4d:60:8d:df:26:b5:f9:6a:e0:d8:
e6:07:88:52:75:5b:5c:ab:73:45:b1:01:24:27:cc:
87:0d:16:e2:32:b6:0d:71:e3:93:74:a8:b0:eb:7a:
de:07:4c:48:c7:f2:81:3d:fc:f3:a2:83:82:9f:f5:
fa:e5:f4:c1:dc:b7:d5:91:50:ba:05:03:d1:07:69:
6b:7e:5a:a3:8f:fd:a4:12:c8:c8:4b:d4:54:ac:91:
98:a4:33:3d:82:d7:77:52:d6:79:e8:5e:43:5f:06:
ad:b4:49:bf:5b:6d:d4:fa:4b:c5:0b:13:c9:9c:47:
f9:7a:0e:4b:24:75:49:47:b6:fe:9e:cb:27:e7:2f:
a5:28:67:fd:fc:7a:fd:a9:bd:65:ab:64:7d:a9:c6:
43:1d:7d:ca:d2:6e:15:b8:a8:d2:2a:88:f5:3d:2c:
21:0b:c7:df:c2:00:f7:a5:60:80:9d:6e:91:93:f9:
e1:42:15:8d:14:d5:1d:24:af:22:9e:be:21:1b:95:
6b:ab:36:07:0a:12:e6:8b:cf:f4:05:d6:22:9e:4f:
e0:a4:cb:97:7e:79:a6:8f:3d:7e:e1:94:d2:ec:93:
61:42:0d:e4:88:57:a1:d5:f5:1d:ec:48:53:5d:87:
8e:49:ef:40:6b:0f:50:c2:91:bc:9f:a8:56:93:2f:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:21:FF:64:6E:C4:39:E8:36:69:ED:38:40:95:3C:31:FA:44:11
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PWAh_2RuxDnoNmntOECVPDH6RBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.143.0-77.90.144.255
77.90.146.0/23
77.90.188.0/24
213.209.138.0/24
213.209.143.0/24
213.209.145.0/24
213.209.156.0/23
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
5d:bc:a0:db:11:6c:2a:25:14:91:d8:1f:7e:9c:b7:a9:c7:7c:
3c:6e:b8:98:d9:14:fa:cf:e9:93:49:07:a9:27:39:14:d3:f2:
36:8e:b0:f5:3f:ab:75:07:66:33:e8:e9:aa:30:5b:13:42:a2:
c0:d5:a1:a2:5f:da:6d:4e:fa:34:e5:93:be:74:42:b4:76:d7:
d6:6e:29:46:a0:ec:e4:11:1d:d0:28:92:1c:20:d1:7e:c3:e2:
6c:e9:b5:40:b1:ea:9b:ee:04:65:e8:df:b6:41:a5:c3:55:7f:
ef:cf:ca:81:5b:9a:de:55:3a:00:49:78:f1:d3:de:90:bd:f5:
4e:bd:10:81:5d:4d:3c:ed:4a:95:7f:95:cb:fa:46:14:85:69:
79:cb:39:99:8b:15:70:6d:71:cf:67:ed:f5:cc:f3:bc:7f:b3:
ac:36:e8:86:7a:29:e7:3f:47:b6:1a:52:af:b2:02:c6:d7:c0:
db:bb:51:51:b8:cf:fa:43:5f:d3:76:f1:61:25:3d:a3:5b:d3:
49:cd:05:74:46:a0:82:cb:25:8d:e9:19:0e:1f:73:7c:46:87:
7e:09:1b:e8:16:f5:4b:da:c7:a2:db:41:a4:ca:ab:01:dd:85:
8c:e6:bf:9c:0e:50:17:8c:20:ea:56:cd:a3:72:e2:51:81:65:
fb:3c:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:03:57 2026 by rpki-client