Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kZPgcKuOk_uFd_AJyQKYqIvLzhw.roa
File: kZPgcKuOk_uFd_AJyQKYqIvLzhw.roa (raw, json)
Hash identifier: R3kqOqiTCai3+WI9I9vYsjDmnxdKJyNEoeredif9ISs=
Subject key identifier: 91:93:E0:70:AB:8E:93:FB:85:77:F0:09:C9:02:98:A8:8B:CB:CE:1C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019A2C4186A83C21BC842D132B63E91EE8D8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kZPgcKuOk_uFd_AJyQKYqIvLzhw.roa
Signing time: Tue 28 Oct 2025 19:18:03 +0000
ROA not before: Tue 28 Oct 2025 19:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:41:86:a8:3c:21:bc:84:2d:13:2b:63:e9:1e:e8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 28 19:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9193e070ab8e93fb8577f009c90298a88bcbce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:ed:ef:5e:c7:de:56:fb:ef:d8:17:70:f4:
7c:89:27:33:57:7f:af:38:d2:25:ef:a4:7e:e3:a6:
46:65:a7:cf:cf:02:cb:1b:00:96:01:b0:f5:f1:6e:
66:d3:55:5c:77:13:3c:5e:e4:1b:3c:7d:4b:6e:e6:
64:69:ab:af:3c:d3:f0:6a:c1:92:18:59:cd:aa:a0:
cf:1c:04:45:e7:ee:3e:3d:68:06:97:23:d8:a3:91:
f1:59:b4:52:7a:2b:5f:72:05:49:81:36:83:7e:93:
4a:44:83:e4:8b:ad:ba:ab:70:70:9d:23:77:a8:40:
2c:4d:94:2e:54:c5:57:e2:61:a4:36:0c:96:bb:52:
76:3a:22:71:09:c7:7f:38:b8:cc:7f:d8:ed:66:c3:
5d:8d:31:1b:59:20:30:29:ae:c2:05:ff:c0:d2:f5:
ae:5d:38:ea:55:55:26:9a:56:44:80:5f:52:b2:6d:
17:92:f7:2d:01:6f:c1:25:69:db:b4:99:55:49:fd:
e0:16:e5:b4:77:80:bc:d6:6a:b6:aa:f7:3a:80:25:
be:52:56:94:00:29:b4:2a:fa:9e:81:0d:fe:df:fd:
2e:95:83:a5:7a:ac:9e:33:41:87:70:75:c5:7c:b8:
5b:b4:7c:97:f5:e6:9a:ff:79:c0:0d:99:c5:46:2b:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:E0:70:AB:8E:93:FB:85:77:F0:09:C9:02:98:A8:8B:CB:CE:1C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kZPgcKuOk_uFd_AJyQKYqIvLzhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.143.0-77.90.144.255
77.90.146.0/23
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
0a:a2:8e:df:76:99:35:73:1e:39:27:6e:8f:78:37:30:8e:24:
d7:b2:8f:09:61:e1:d9:df:9d:75:d0:de:de:23:33:de:e8:48:
f1:85:35:93:c9:0d:19:ea:b4:4b:91:19:f2:a4:65:f3:32:9d:
37:a5:a7:d0:15:71:4f:4b:b4:4b:56:e3:af:a5:b8:c8:ad:37:
2d:c1:d9:11:cd:77:82:d2:cc:7e:da:1a:b4:c7:54:2c:af:dd:
62:e8:cf:ae:12:72:05:62:46:b2:9b:82:71:cd:a2:a1:9d:9b:
de:f3:13:fd:56:bc:7a:5b:a1:ca:9f:21:ae:67:80:e9:c8:a0:
71:6a:30:fe:f1:d3:5a:fb:9f:e1:f2:45:7f:fc:07:7f:b8:1b:
20:ce:e4:08:f4:14:45:63:c2:1c:8b:9b:ca:f7:33:4e:36:02:
3d:4b:5d:5c:3c:43:12:3f:f7:b1:95:fd:89:84:37:28:6b:79:
63:c2:3c:cf:27:5d:88:58:d8:ef:a5:05:7f:c7:39:95:ff:76:
f9:52:fc:bd:35:9f:16:7d:8d:92:c7:7d:9c:74:fa:a3:4a:3f:
ac:6f:31:8b:52:87:75:7d:66:c9:89:c6:6e:69:19:3c:99:d3:
14:79:eb:5e:f1:67:93:59:3b:2a:29:c0:47:75:89:2f:b5:aa:
f6:f5:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:31:02 2025 by rpki-client