Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/br6ophJ_seKpgle-GRBelvZMVCQ.roa
File: br6ophJ_seKpgle-GRBelvZMVCQ.roa (raw, json)
Hash identifier: xvaIA/IEe05JlJTHof0J+fBcnGDDmy2RurdQ52mdItM=
Subject key identifier: 6E:BE:A8:A6:12:7F:B1:E2:A9:82:57:BE:19:10:5E:96:F6:4C:54:24
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019C439521B4E3DF197CE799C6838E1908F1
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/br6ophJ_seKpgle-GRBelvZMVCQ.roa
Signing time: Mon 09 Feb 2026 18:06:12 +0000
ROA not before: Mon 09 Feb 2026 18:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 77.90.166.0/24 maxlen: 24
77.90.168.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.135.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:95:21:b4:e3:df:19:7c:e7:99:c6:83:8e:19:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 9 18:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ebea8a6127fb1e2a98257be19105e96f64c5424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:b0:c8:0a:93:20:ca:e1:d1:4f:43:d5:51:
1f:73:be:73:61:82:8c:db:77:ad:63:07:43:ee:da:
f1:60:8c:30:73:04:49:9a:6c:8f:67:04:73:ea:ed:
19:62:27:3c:f1:c1:ed:e6:49:87:83:dd:34:59:e7:
77:f2:c7:5e:38:24:2f:89:e0:15:b0:b8:30:b1:38:
8a:e6:bd:1a:c7:7b:d9:31:f4:5a:00:d2:f9:a1:22:
8f:fd:34:75:5a:54:5c:61:8e:e7:ec:6d:c6:ac:68:
89:05:20:2e:9d:ee:b7:d5:bb:c1:21:c1:54:f1:ca:
2a:4a:59:ef:2d:d3:c2:1d:c1:91:8e:26:54:40:8a:
43:ba:09:2c:49:42:a1:07:87:61:32:0d:7f:34:e0:
61:90:1f:33:9b:3f:bc:83:ef:08:fa:9b:f3:20:4f:
96:69:79:ca:88:72:da:5d:61:ba:98:a5:90:b6:c9:
87:82:77:33:02:09:57:15:f9:f2:e3:d1:ef:87:6c:
66:80:17:27:81:f3:c3:80:be:b0:93:a8:7b:57:e7:
9a:f2:7f:46:5e:87:62:82:ba:1c:05:76:a8:4c:6c:
6b:ab:a4:36:93:fe:0c:bc:aa:f7:24:ea:d8:fc:e4:
1a:6d:7a:7d:97:69:67:e1:f9:d1:43:50:5a:b9:02:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:A8:A6:12:7F:B1:E2:A9:82:57:BE:19:10:5E:96:F6:4C:54:24
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/br6ophJ_seKpgle-GRBelvZMVCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.166.0/24
77.90.168.0/24
77.90.173.0/24
77.90.181.0/24
185.230.12.0/24
213.209.131.0/24
213.209.133.0-213.209.135.255
213.209.137.0/24
213.209.139.0/24
213.209.141.0/24
213.209.144.0/24
213.209.147.0/24
213.209.152.0-213.209.154.255
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9b:0a:fa:09:60:ea:c0:57:03:74:9c:ca:e0:88:c1:c7:e8:
06:49:eb:df:66:d6:77:0f:be:1c:7b:6d:68:d3:04:e3:47:01:
82:08:40:6a:99:18:2b:4b:ce:7e:d8:44:12:1a:ed:7f:74:d1:
85:7e:44:c6:04:60:eb:f8:75:29:e6:13:27:71:c3:5e:b5:a4:
8c:3b:dd:b6:3e:ef:87:1d:64:f4:0c:0a:f7:d7:20:5c:92:9e:
cd:3d:91:50:0a:a0:d0:87:51:25:72:c7:be:ae:13:c5:33:b6:
1a:68:59:b6:22:46:a6:0f:67:38:8c:f6:f0:3a:ee:16:2c:c1:
99:24:ba:2b:c5:c2:9d:ea:d1:dc:eb:c5:91:d9:d4:d1:2c:11:
ff:cf:82:f3:79:59:18:7f:cd:5b:6a:85:43:6a:b4:77:ce:6a:
bd:fa:8a:83:88:33:68:55:da:54:80:bc:a5:9e:2a:13:ab:7f:
c3:f0:74:9d:9c:fe:0e:64:8a:92:96:0a:2e:4f:d2:5f:b6:53:
34:c0:97:4c:1b:ce:11:4c:9c:d0:56:e5:e3:ac:76:6a:c1:2a:
f7:df:b5:a0:64:e2:af:34:93:99:21:1e:a7:bf:4c:b6:21:9d:
ea:e5:9e:33:82:71:8c:6f:ee:34:c8:f8:db:46:49:5d:d4:ba:
7a:6e:6e:f1
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZxDlSG0498ZfOeZxoOOGQjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwMjA5MTgwNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWJlYThhNjEyN2ZiMWUyYTk4MjU3YmUxOTEwNWU5NmY2NGM1NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi42wyAqTIMrh0U9D1VEfc75zYYKM
23etYwdD7trxYIwwcwRJmmyPZwRz6u0ZYic88cHt5kmHg900Wed38sdeOCQvieAV
sLgwsTiK5r0ax3vZMfRaANL5oSKP/TR1WlRcYY7n7G3GrGiJBSAune631bvBIcFU
8coqSlnvLdPCHcGRjiZUQIpDugksSUKhB4dhMg1/NOBhkB8zmz+8g+8I+pvzIE+W
aXnKiHLaXWG6mKWQtsmHgnczAglXFfny49Hvh2xmgBcngfPDgL6wk6h7V+ea8n9G
XodigrocBXaoTGxrq6Q2k/4MvKr3JOrY/OQabXp9l2ln4fnRQ1BauQLUywIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFG6+qKYSf7HiqYJXvhkQXpb2TFQkMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvYnI2b3BoSl9zZUtwZ2xlLUdSQmVsdlpNVkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQATVqmAwQA
TVqoAwQATVqtAwQATVq1AwQAueYMAwQA1dGDMAwDBADV0YUDBAPV0YADBADV0YkD
BADV0YsDBADV0Y0DBADV0ZADBADV0ZMwDAMEA9XRmAMEANXRmgMEANXRnjANBgkq
hkiG9w0BAQsFAAOCAQEAppsK+glg6sBXA3ScyuCIwcfoBknr32bWdw++HHttaNME
40cBgghAapkYK0vOfthEEhrtf3TRhX5ExgRg6/h1KeYTJ3HDXrWkjDvdtj7vhx1k
9AwK99cgXJKezT2RUAqg0IdRJXLHvq4TxTO2GmhZtiJGpg9nOIz28DruFizBmSS6
K8XCnerR3OvFkdnU0SwR/8+C83lZGH/NW2qFQ2q0d85qvfqKg4gzaFXaVIC8pZ4q
E6t/w/B0nZz+DmSKkpYKLk/SX7ZTNMCXTBvOEUyc0Fbl46x2asEq99+1oGTirzST
mSEep79MtiGd6uWeM4JxjG/uNMj420ZJXdS6em5u8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:26 2026 by rpki-client