Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa
File: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (raw, json)
Hash identifier: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=
Subject key identifier: 1B:4E:0C:42:55:23:34:9D:3E:B0:42:0F:3A:EE:5F:82:C8:FD:9B:F3
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019E1E2193495113A0C563E3AD0B0B62F230
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa
Signing time: Tue 12 May 2026 21:39:37 +0000
ROA not before: Tue 12 May 2026 21:39:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 77.90.158.0/24 maxlen: 24
77.90.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:21:93:49:51:13:a0:c5:63:e3:ad:0b:0b:62:f2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 12 21:39:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b4e0c425523349d3eb0420f3aee5f82c8fd9bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:b6:2b:e9:55:84:f5:96:df:73:61:3a:8f:
40:31:bb:03:53:99:fa:11:17:ea:76:cf:b5:d3:1d:
7c:ab:35:94:71:9e:42:6c:61:33:96:0b:27:41:0a:
f3:13:0c:4e:76:51:7f:ae:4f:07:b4:29:62:6d:9b:
e2:4a:10:da:af:b9:3e:fb:59:ab:77:8f:21:67:a4:
f7:4b:f6:b6:b2:28:15:a0:7b:9d:1b:d9:2a:a1:bd:
c5:95:da:2f:f7:01:c0:07:31:02:44:38:0e:c6:15:
52:c7:e1:e3:34:e2:4a:2b:2d:c6:48:97:35:de:75:
5d:41:ae:6f:45:b2:e9:b4:8c:46:80:68:96:55:86:
d7:e1:f1:40:b6:f6:bf:da:ec:59:35:a6:4c:82:11:
b4:74:83:5f:ec:4f:e8:53:19:f5:38:10:2f:54:7b:
31:22:f1:c9:80:34:e5:aa:17:7c:d0:63:0b:5b:56:
13:16:38:bd:74:2b:b2:77:f0:6c:3a:70:42:84:3f:
ee:1c:fe:68:86:c6:58:a3:98:40:0f:0c:dd:9a:2f:
83:0e:c1:9b:0b:f2:f1:03:3c:0b:e4:4b:f1:e2:61:
c9:2d:71:2e:4e:17:c4:d8:68:da:18:df:89:3e:83:
cc:d4:8d:a2:be:8f:d1:69:00:11:01:bc:7e:31:ee:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:0C:42:55:23:34:9D:3E:B0:42:0F:3A:EE:5F:82:C8:FD:9B:F3
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.158.0/24
77.90.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2b:5f:17:b4:10:79:15:19:20:8a:2a:be:64:79:87:ec:88:
60:02:f5:00:bf:33:0d:18:7d:e5:5e:09:3c:12:56:c2:25:6b:
61:58:25:67:7e:00:db:3e:9a:44:02:2a:c3:5d:07:30:17:79:
30:fd:85:66:33:1c:68:75:10:c6:dc:f0:98:51:9f:fd:cf:cb:
2d:e5:38:f8:c1:9c:20:d9:b2:18:e2:f2:dd:47:2b:0f:ff:5a:
a2:d0:0b:5f:a1:64:2b:c2:fe:a4:4d:ac:d2:b8:a0:12:12:ac:
c0:8b:9f:f7:c4:87:5f:7f:27:72:89:78:2e:a7:fc:ec:38:b8:
29:dc:bb:fd:90:a1:b6:16:5a:27:94:66:65:ac:93:a0:27:c7:
5b:2c:8d:52:2d:94:bf:55:b3:28:05:c6:66:ed:43:05:35:02:
e1:09:13:be:6b:ff:62:66:4f:a0:93:99:d6:2a:e0:bd:37:6e:
b4:b6:c5:35:2b:77:3d:ec:d1:a0:4b:2a:b6:6b:5b:8c:e5:6c:
0d:03:19:41:19:87:b7:c2:3a:28:f9:32:1c:ea:ee:e8:db:19:
72:3e:31:06:cd:7b:19:49:15:40:69:c9:20:86:77:2c:be:6c:
ed:aa:ab:11:1b:e7:6c:4f:ea:47:66:91:ae:ba:8c:45:1c:26:
cf:a6:ff:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4eIZNJUROgxWPjrQsLYvIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNTEyMjEzOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjRlMGM0MjU1MjMzNDlkM2ViMDQyMGYzYWVlNWY4MmM4ZmQ5YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuK2K+lVhPWW33NhOo9AMbsDU5n6
ERfqds+10x18qzWUcZ5CbGEzlgsnQQrzEwxOdlF/rk8HtClibZviShDar7k++1mr
d48hZ6T3S/a2sigVoHudG9kqob3Fldov9wHABzECRDgOxhVSx+HjNOJKKy3GSJc1
3nVdQa5vRbLptIxGgGiWVYbX4fFAtva/2uxZNaZMghG0dINf7E/oUxn1OBAvVHsx
IvHJgDTlqhd80GMLW1YTFji9dCuyd/BsOnBChD/uHP5ohsZYo5hADwzdmi+DDsGb
C/LxAzwL5Evx4mHJLXEuThfE2GjaGN+JPoPM1I2ivo/RaQARAbx+Me5zCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBtODEJVIzSdPrBCDzruX4LI/ZvzMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvRzA0TVFsVWpOSjAtc0VJUE91NWZnc2o5bV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqeAwQA
TVq3MA0GCSqGSIb3DQEBCwUAA4IBAQC2K18XtBB5FRkgiiq+ZHmH7IhgAvUAvzMN
GH3lXgk8ElbCJWthWCVnfgDbPppEAirDXQcwF3kw/YVmMxxodRDG3PCYUZ/9z8st
5Tj4wZwg2bIY4vLdRysP/1qi0AtfoWQrwv6kTazSuKASEqzAi5/3xIdffydyiXgu
p/zsOLgp3Lv9kKG2FlonlGZlrJOgJ8dbLI1SLZS/VbMoBcZm7UMFNQLhCRO+a/9i
Zk+gk5nWKuC9N260tsU1K3c97NGgSyq2a1uM5WwNAxlBGYe3wjoo+TIc6u7o2xly
PjEGzXsZSRVAackghncsvmztqqsRG+dsT+pHZpGuuoxFHCbPpv8a
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:26 2026 by rpki-client