Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/f2jgN13vsLBBFFDE9L3XqIO-zZI.roa
File: f2jgN13vsLBBFFDE9L3XqIO-zZI.roa (raw, json)
Hash identifier: 6jwpW+Gz/4278/TgiUlJbdacPgd1+h1QmRHWgV41/1A=
Subject key identifier: 7F:68:E0:37:5D:EF:B0:B0:41:14:50:C4:F4:BD:D7:A8:83:BE:CD:92
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0AFD1593FB98B4CEB19D0070D243C5CD3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/f2jgN13vsLBBFFDE9L3XqIO-zZI.roa
Signing time: Thu 17 Sep 2026 14:42:07 +0000
ROA not before: Thu 17 Sep 2026 14:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 77.90.149.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
77.90.174.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d1:59:3f:b9:8b:4c:eb:19:d0:07:0d:24:3c:5c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 17 14:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f68e0375defb0b0411450c4f4bdd7a883becd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:1d:91:58:8b:d3:e8:08:4e:7b:3a:29:f2:
a0:ef:52:fa:c0:2a:7a:a0:07:fb:c9:33:b9:29:9c:
c3:2c:9e:3a:64:21:59:9b:d0:b7:e7:bf:c3:e9:d3:
38:ed:b8:7e:d0:49:3f:b1:50:40:2a:b2:cd:85:74:
3b:6e:03:75:73:e2:a8:0b:ef:60:73:7e:b4:38:2b:
a4:6e:ab:2c:84:c5:17:2b:d4:a2:f5:60:4a:00:d3:
5b:93:12:e7:f9:70:fd:d8:93:7a:ce:b1:16:60:26:
69:d5:23:50:b5:62:00:f0:6d:aa:31:34:da:b7:98:
4c:a4:82:bd:e2:db:89:45:83:ac:eb:f5:d0:23:26:
58:af:dc:02:8c:dd:2f:7a:37:78:4f:eb:e2:4e:62:
5d:6f:fd:7d:77:0e:8c:b6:00:41:44:7e:50:51:b4:
63:d1:80:58:c2:8e:57:50:d2:cf:75:0f:14:48:4f:
21:0d:a5:f8:b8:51:b3:3f:b3:27:4a:a8:a0:5e:69:
33:61:68:26:5f:f2:a1:df:a9:f0:6c:35:6f:36:8d:
0e:4d:3e:15:d9:39:ab:64:6e:68:a8:f8:bc:87:8b:
6d:83:d9:52:7c:a1:bf:8b:56:65:11:a9:02:0a:78:
1d:be:f2:29:87:d9:56:67:7f:06:e9:9c:8c:09:84:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:E0:37:5D:EF:B0:B0:41:14:50:C4:F4:BD:D7:A8:83:BE:CD:92
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/f2jgN13vsLBBFFDE9L3XqIO-zZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/24
77.90.155.0/24
77.90.167.0/24
77.90.174.0/24
77.90.179.0-77.90.181.255
213.209.133.0/24
213.209.137.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
82:91:05:41:d7:4e:f0:9c:c3:5d:b8:e1:f5:7b:3a:97:e0:94:
e4:ae:8f:51:0a:df:50:26:30:26:5a:6d:81:f0:a8:a6:ed:71:
f9:cc:cb:06:43:76:59:9d:65:c2:af:79:4b:22:e5:98:f5:5a:
18:b5:95:a6:79:b6:5e:11:b2:cd:d9:b8:8d:fe:f5:4d:69:ad:
6d:28:93:68:8e:76:06:e6:1b:1a:61:d8:9b:31:c0:35:31:11:
2d:91:a5:22:36:8c:92:6e:f7:58:e2:3a:04:8b:99:dd:15:53:
99:4a:3e:04:85:cf:43:80:e6:a2:31:b4:2f:98:f3:c0:ea:4d:
62:7a:b4:bd:fc:6d:59:b8:70:cf:c1:11:25:ee:e4:8e:e1:4e:
cc:63:70:13:1e:23:6e:d2:d2:37:2c:3e:f6:fe:de:70:d1:94:
2b:b2:ed:08:87:c6:dd:40:11:3d:fe:90:73:dd:0d:53:25:a8:
1d:5a:99:37:1a:6b:6c:04:77:ac:90:79:4c:4b:12:d0:6d:68:
98:53:18:4c:41:da:f1:b3:34:a5:a5:d1:c1:56:c0:19:de:ed:
1c:6f:4e:6a:82:72:bf:e2:26:10:aa:fa:a1:e9:df:cd:65:6e:
d2:f7:6a:95:c3:81:9f:d0:01:2d:e7:97:34:1c:e0:cf:de:de:
e2:bb:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:46 2026 by rpki-client