Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-lIcBfv_8b5PsmKjsS4PTSJogg.roa
File: 1-lIcBfv_8b5PsmKjsS4PTSJogg.roa (raw, json)
Hash identifier: ixW1JfJ/a44GkRC5qW81BQqCI3ejBAb1k+++8D0qd0I=
Subject key identifier: D7:E9:48:70:17:EF:FF:C6:F9:3E:C9:8A:8E:C4:B8:3D:34:89:A2:08
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019E1E227D4ED366E1A470BEC195E3241A73
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-lIcBfv_8b5PsmKjsS4PTSJogg.roa
Signing time: Tue 12 May 2026 21:40:37 +0000
ROA not before: Tue 12 May 2026 21:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.141.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.159.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
77.90.175.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
77.90.190.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:22:7d:4e:d3:66:e1:a4:70:be:c1:95:e3:24:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 12 21:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7e9487017efffc6f93ec98a8ec4b83d3489a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:00:ba:64:a3:f6:f6:e8:79:99:15:c0:43:
ff:06:d3:a1:64:b0:41:7e:92:43:65:0e:74:62:09:
9c:b6:d8:80:a6:90:f4:57:c1:87:cc:e7:38:1d:76:
7a:20:69:e7:a2:66:e0:1b:9f:5f:4f:6a:7b:64:33:
80:0e:f9:fd:23:61:32:0f:c0:61:f2:55:a8:b0:1c:
77:e9:28:d8:02:a5:90:5a:c2:94:9e:7b:e0:cf:bb:
6e:29:85:3a:89:2d:83:c4:74:59:1d:2f:9b:79:32:
20:0f:41:a3:79:55:b1:dc:87:79:68:20:d1:a3:21:
79:c9:29:cd:7f:f0:f5:09:84:d7:0f:8e:dd:85:21:
e3:dd:3f:c7:a0:fa:af:96:8a:8b:19:cb:eb:f9:8b:
4d:0e:94:f6:c1:53:c2:71:28:85:ad:b2:dd:0a:04:
d0:8d:89:d7:8a:97:f8:d0:0a:6e:25:8c:77:8e:7c:
83:66:85:5a:49:ee:ca:9f:39:73:ba:42:0e:00:0a:
5a:6a:d1:28:e1:ed:3a:bb:ae:74:2a:ea:09:27:57:
20:25:2b:9d:4b:92:5d:2e:b1:41:f3:2c:65:94:18:
ac:c2:42:5d:ea:46:29:e5:17:af:47:83:a8:c1:3a:
f5:b7:c9:39:9a:06:69:50:97:33:97:8e:b6:5b:03:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:48:70:17:EF:FF:C6:F9:3E:C9:8A:8E:C4:B8:3D:34:89:A2:08
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-lIcBfv_8b5PsmKjsS4PTSJogg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.144.255
77.90.146.0/23
77.90.157.0/24
77.90.159.0-77.90.163.255
77.90.165.0-77.90.166.255
77.90.169.0-77.90.173.255
77.90.175.0/24
77.90.177.0/24
77.90.182.0/24
77.90.186.0/24
77.90.190.0/23
213.209.131.0/24
213.209.138.0/23
213.209.141.0/24
213.209.144.0/24
213.209.147.0/24
213.209.152.0/24
213.209.155.0/24
213.209.158.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
b4:72:d4:29:64:0e:fd:e3:21:32:27:55:2a:7a:22:50:f2:14:
94:96:0a:9a:08:c5:bd:51:7c:89:68:4d:a9:b7:76:fb:3e:96:
4b:50:22:a5:bb:6e:e7:71:3b:06:75:20:24:5c:bb:0b:6e:f9:
eb:cc:2b:34:74:c1:b2:77:e6:fe:29:fc:70:c9:02:c8:af:41:
fd:3f:a2:45:2c:82:5c:05:4a:54:44:0e:8c:c8:98:e6:f4:ba:
78:30:03:2c:50:25:8c:47:97:97:c0:db:03:c0:1c:c4:cd:29:
1b:fb:84:dc:50:7f:3e:40:2e:fb:3a:bb:0f:e3:4e:5b:ea:39:
c0:b6:f8:5f:01:79:5e:a9:7d:fb:f2:f5:58:3e:78:6a:2c:c3:
0a:68:a1:e4:3a:cd:a3:a9:0c:1d:63:5a:67:b1:00:03:9e:df:
83:19:9f:73:87:7c:b9:af:e2:2c:4c:2e:79:ea:47:c9:06:10:
5e:0a:94:d8:5c:e6:2b:02:94:4f:40:7e:8e:d9:8a:cc:48:e2:
5c:6c:da:d0:a3:22:91:92:d2:a4:f7:bd:6b:6c:1e:7d:da:9a:
9f:0c:7f:11:ac:d7:28:95:8c:83:5e:29:22:19:be:17:ad:d0:
9c:e6:6c:88:b1:d6:03:7c:b8:95:0f:90:40:42:a9:86:37:73:
1f:56:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:22 2026 by rpki-client