Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/djFhla4MWW9UnKS5DInUiltefD4.roa
File: djFhla4MWW9UnKS5DInUiltefD4.roa (raw, json)
Hash identifier: Sc+M7cslOJJhBlkRWcw8NFHW0xg8Q1EBy7lXg6dtAzg=
Subject key identifier: 76:31:61:95:AE:0C:59:6F:54:9C:A4:B9:0C:89:D4:8A:5B:5E:7C:3E
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 019C4C34C6410C1F70C6F443D431B60A628B
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/djFhla4MWW9UnKS5DInUiltefD4.roa
Signing time: Wed 11 Feb 2026 10:17:32 +0000
ROA not before: Wed 11 Feb 2026 10:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.61.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.108.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.113.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.125.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.202.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
212.98.31.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.231.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.236.0/24 maxlen: 24
213.143.237.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:34:c6:41:0c:1f:70:c6:f4:43:d4:31:b6:0a:62:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Feb 11 10:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76316195ae0c596f549ca4b90c89d48a5b5e7c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:50:6c:e4:81:b6:ac:76:29:ac:28:cd:89:
2e:ef:95:06:77:59:0f:93:b0:a5:cf:79:29:b3:a3:
f1:38:bb:95:b6:6d:62:64:14:60:13:45:cc:bf:f4:
9a:35:20:cb:f0:2b:fc:56:dc:8e:09:64:1c:98:ae:
e9:dc:79:26:51:44:eb:06:b4:4b:cb:f7:1d:a3:6c:
0c:4e:79:a8:d3:df:dd:e4:83:f6:d2:0d:1c:6c:a7:
63:26:5d:7b:ea:d6:3f:3c:aa:d0:5f:28:36:7d:70:
f4:34:89:c2:b0:2c:d4:54:50:70:c9:2b:e1:b6:20:
b4:93:87:5f:cc:5a:ec:bb:2c:56:c3:26:4d:64:2e:
eb:4a:2a:8e:a2:9f:55:8f:2b:4e:c1:e0:b8:26:b8:
ea:19:c0:ff:77:65:23:fe:47:4a:7e:98:e9:3d:15:
39:43:9f:3a:cc:59:04:6f:4b:4b:78:45:99:93:a7:
b1:13:1c:0b:95:b0:cd:e9:3e:02:d8:f6:bb:93:ed:
15:3c:9a:bb:6e:a2:56:11:fc:99:53:26:8a:af:a3:
bf:e9:3b:22:74:47:4f:72:af:dd:e3:0e:54:42:5a:
24:9b:c8:6a:51:2d:4b:e1:60:5e:ef:cf:26:b7:b0:
8d:00:f5:1d:75:95:34:8f:89:9c:32:ff:12:94:c8:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:61:95:AE:0C:59:6F:54:9C:A4:B9:0C:89:D4:8A:5B:5E:7C:3E
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/djFhla4MWW9UnKS5DInUiltefD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
9a:8f:d9:72:a8:22:97:13:79:1a:46:a9:8b:09:50:eb:b1:f3:
c2:c4:b8:8f:b8:52:61:b9:6d:5a:3e:79:e6:d5:68:6d:41:2c:
30:9e:b8:e0:73:d5:e1:5b:d0:77:01:07:e5:9f:7a:91:c0:b9:
1e:06:a3:a8:4b:2a:cc:af:57:f5:71:53:33:3b:16:9e:33:0f:
17:b5:b4:cd:5a:89:f0:e5:7b:6c:c6:5c:09:a9:e2:2c:b6:5a:
24:b5:53:24:da:8c:71:7d:d9:50:f0:60:25:10:32:8d:a2:c9:
d2:8c:76:dd:62:09:1b:32:af:e6:99:c1:92:f6:07:51:c6:4a:
5a:2c:45:1a:97:8a:86:ce:b4:7d:ef:fb:59:c3:21:f6:22:71:
41:00:9c:f6:06:8d:a7:ea:af:ed:9e:b6:51:bc:51:b4:74:08:
02:67:9a:e6:89:a7:a7:10:35:57:8d:09:33:7d:bd:d3:ce:0e:
df:44:4a:d2:57:49:10:a8:71:ce:eb:0f:db:c9:4c:d6:48:e8:
85:31:4a:86:d4:bd:26:b9:30:e3:68:13:a0:fa:11:13:f9:28:
81:d7:b1:9d:e7:c7:17:a4:cc:96:1d:19:bc:b7:f5:71:85:56:
f4:74:ee:49:23:5a:2c:f1:91:06:78:0a:5e:8c:cb:98:43:ee:
ef:66:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:52 2026 by rpki-client