Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PrMKAjfyE4gDVPM_30yhUEgUaK8.roa
File: PrMKAjfyE4gDVPM_30yhUEgUaK8.roa (raw, json)
Hash identifier: d5Ri8zlN+7mgIl6066b62P5+COYbCz5V4oEMD6BJQvc=
Subject key identifier: 3E:B3:0A:02:37:F2:13:88:03:54:F3:3F:DF:4C:A1:50:48:14:68:AF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0AFD99478F3EBE4449C158DA1FDC43ABC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PrMKAjfyE4gDVPM_30yhUEgUaK8.roa
Signing time: Thu 17 Sep 2026 14:51:07 +0000
ROA not before: Thu 17 Sep 2026 14:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.168.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d9:94:78:f3:eb:e4:44:9c:15:8d:a1:fd:c4:3a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 17 14:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eb30a0237f213880354f33fdf4ca150481468af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:92:ca:b0:39:7e:09:54:2e:25:2a:37:4a:
5e:78:22:79:90:50:85:67:91:b0:20:f5:8a:f3:53:
e6:1d:af:f7:94:b4:f0:6c:c8:73:b4:4b:f9:b1:c5:
86:1b:9e:9f:43:cf:a5:bf:4c:7a:11:b4:e4:50:79:
57:02:a7:e3:85:d1:9b:bc:d2:fe:a0:e1:68:7f:6c:
61:f0:f4:0e:b0:f5:bf:03:ba:26:3b:d9:c0:13:e9:
fa:fa:ba:13:5c:cd:37:38:4e:79:ba:80:96:b8:58:
30:f7:f4:e2:bb:cd:75:82:ec:ce:90:26:c9:e9:df:
25:dc:9a:8c:e8:f3:20:f4:5b:04:24:60:fe:28:f0:
b7:1b:8d:23:d8:cb:47:7f:96:79:b0:e5:d3:fb:6d:
51:92:33:5c:fa:49:af:b9:e9:e9:51:dc:aa:52:e3:
5b:91:7e:87:fd:50:31:e1:7c:2c:a6:46:7d:f4:d7:
3e:21:b9:76:e3:c6:d2:54:49:29:ea:94:9a:59:f3:
bd:b7:d0:4a:00:b3:a7:4e:a2:a5:bc:c3:79:94:3c:
95:76:fa:31:77:14:1f:47:7b:a0:2b:b3:b8:14:1d:
ae:ca:0c:39:4b:1f:f1:f1:67:d1:b2:65:68:d8:11:
14:8f:e5:84:93:d3:6f:7a:e9:12:62:7f:21:ac:24:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:0A:02:37:F2:13:88:03:54:F3:3F:DF:4C:A1:50:48:14:68:AF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PrMKAjfyE4gDVPM_30yhUEgUaK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.143.0-77.90.144.255
77.90.146.0/23
77.90.168.0/24
77.90.177.0/24
185.230.12.0/24
213.209.134.0/24
213.209.136.0/24
213.209.138.0/24
213.209.144.0/23
213.209.156.0/23
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
2a:71:14:de:bb:9a:49:68:52:bb:0d:81:b9:60:82:b6:65:f4:
5c:6d:67:83:00:70:c6:d0:27:8b:55:6c:db:26:c1:cf:8c:58:
fb:74:74:98:ef:91:8c:12:09:c2:5c:c9:1b:44:b8:e6:17:a9:
16:bc:ed:e7:0b:27:63:b9:16:0d:6f:03:ca:61:47:2b:89:f6:
30:42:42:77:7e:b9:c3:c7:f9:db:13:e2:52:72:9e:1c:da:94:
d3:0a:d6:88:af:46:3e:df:0f:1b:30:72:5a:f9:9d:30:2a:d8:
42:14:ed:73:35:7b:25:74:70:99:bd:d3:28:a2:6c:8c:7e:75:
7e:2d:9b:b2:12:a6:b4:bb:bd:77:64:78:81:65:e5:14:a2:a9:
c2:14:7f:86:99:25:2e:eb:fd:07:26:85:22:84:63:c5:79:19:
42:f3:41:30:bb:a4:a8:67:64:b5:96:ee:29:d2:5d:c0:31:8c:
65:db:3a:8f:31:92:8c:a6:96:e7:88:62:63:de:93:53:5e:74:
09:b4:23:bb:fc:23:a6:ae:1e:0a:1e:62:cc:99:ee:a8:da:de:
c3:02:4f:60:29:f5:0c:c1:bf:67:79:df:fa:61:a1:2d:2e:9d:
66:c9:ac:6e:f6:f6:03:78:c8:01:be:91:f5:3b:41:3a:41:9d:
58:c0:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:14 2026 by rpki-client