Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QbZ1rTEJfzxB66FDqcoxpkam6ns.roa
File: QbZ1rTEJfzxB66FDqcoxpkam6ns.roa (raw, json)
Hash identifier: cM5csjF25iV+29L4asFE5a4kr7pLri+DT2uTV/sOvz8=
Subject key identifier: 41:B6:75:AD:31:09:7F:3C:41:EB:A1:43:A9:CA:31:A6:46:A6:EA:7B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019F8E7E5F18D4DD1BD77A719E952A4049E3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QbZ1rTEJfzxB66FDqcoxpkam6ns.roa
Signing time: Thu 23 Jul 2026 10:21:14 +0000
ROA not before: Thu 23 Jul 2026 10:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.175.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:7e:5f:18:d4:dd:1b:d7:7a:71:9e:95:2a:40:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 23 10:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b675ad31097f3c41eba143a9ca31a646a6ea7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:6c:6e:29:d7:af:d7:62:ed:19:da:12:a0:
2b:59:df:69:0b:7c:54:1e:84:46:52:c5:09:89:ad:
5a:ed:2d:c7:92:61:93:95:86:69:13:db:13:e8:1b:
d2:ec:8c:80:31:e3:54:d0:54:96:03:b0:d3:50:86:
a0:59:82:08:79:4d:6c:b9:49:6e:9b:9a:1c:dd:0f:
ae:14:7c:a0:a7:be:10:98:68:54:e9:cc:49:4c:a8:
e6:d8:c1:a8:66:cb:b6:51:c9:1b:b0:f8:13:5e:56:
4d:06:e2:d9:1b:d5:c9:51:31:d4:81:16:1c:10:60:
ce:11:a8:e4:fb:e1:88:62:39:cc:4c:f2:c5:09:e7:
20:bf:e8:8d:40:31:66:03:0d:2e:75:5e:77:b6:1d:
eb:f4:9f:41:db:24:ad:a5:b2:24:c3:88:d3:b0:ab:
b2:1f:15:86:15:ae:4a:38:a5:47:f1:73:cf:23:e2:
87:e4:2d:e0:0b:65:52:ad:dc:e9:da:bf:25:e9:3b:
48:42:dc:b9:a6:91:d6:b4:0e:be:38:9a:76:6b:78:
9f:bf:67:35:80:08:0f:e3:a9:91:db:0c:85:4c:a4:
a0:7a:c5:fc:43:d2:db:c7:86:b1:03:6e:4c:c0:7f:
23:00:80:77:ac:4c:24:44:7d:ae:f3:19:ad:7d:4e:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B6:75:AD:31:09:7F:3C:41:EB:A1:43:A9:CA:31:A6:46:A6:EA:7B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QbZ1rTEJfzxB66FDqcoxpkam6ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.175.0/24
77.90.177.0/24
77.90.182.0/24
77.90.186.0/24
213.209.129.0/24
213.209.131.0/24
213.209.145.0/24
213.209.152.0/24
213.209.155.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e1:45:3e:13:6b:9c:dd:15:7a:f7:bd:b5:38:15:1d:bb:30:
8a:69:45:19:cf:e1:2e:03:9a:df:18:f6:54:49:fc:7c:2b:a3:
fb:66:dc:db:b3:01:ea:8e:61:3d:bb:95:73:7a:6e:4d:4d:d0:
03:e0:36:2e:3d:1b:8b:78:4b:b9:71:2d:3a:2e:51:58:98:29:
78:40:ec:1c:2d:8d:dd:e1:4e:0c:31:bd:1e:69:59:e9:65:40:
5c:1f:1a:d3:c0:0e:f2:8e:67:36:b5:e7:39:b2:d5:fe:2b:a2:
2b:16:12:52:aa:fb:a7:71:5d:d0:02:df:67:2e:29:29:a9:ad:
2e:c3:8c:c8:1c:15:a1:10:36:58:82:92:31:7f:1e:07:6f:7b:
77:34:31:e3:42:c7:11:fc:5a:89:64:8b:f2:48:79:9e:aa:61:
a2:b6:cd:60:da:f8:0c:52:01:e7:eb:91:97:fa:19:ce:37:08:
e9:82:a1:b6:df:00:7d:d5:3b:0b:33:37:59:08:2e:78:10:da:
6f:86:0a:37:94:28:56:50:47:87:79:93:6a:52:f7:f4:ce:72:
6f:a5:05:f3:49:6a:2d:08:92:cc:90:62:dc:69:f0:dc:88:c5:
0b:22:9d:db:24:ff:a1:94:c1:73:f2:90:1e:0c:42:68:79:aa:
5f:19:fd:97
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZ+Ofl8Y1N0b13pxnpUqQEnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNzIzMTAyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWI2NzVhZDMxMDk3ZjNjNDFlYmExNDNhOWNhMzFhNjQ2YTZlYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4psbinXr9di7RnaEqArWd9pC3xU
HoRGUsUJia1a7S3HkmGTlYZpE9sT6BvS7IyAMeNU0FSWA7DTUIagWYIIeU1suUlu
m5oc3Q+uFHygp74QmGhU6cxJTKjm2MGoZsu2UckbsPgTXlZNBuLZG9XJUTHUgRYc
EGDOEajk++GIYjnMTPLFCecgv+iNQDFmAw0udV53th3r9J9B2yStpbIkw4jTsKuy
HxWGFa5KOKVH8XPPI+KH5C3gC2VSrdzp2r8l6TtIQty5ppHWtA6+OJp2a3ifv2c1
gAgP46mR2wyFTKSgesX8Q9Lbx4axA25MwH8jAIB3rEwkRH2u8xmtfU6DOwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFEG2da0xCX88QeuhQ6nKMaZGpup7MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvUWJaMXJURUpmenhCNjZGRHFjb3hwa2FtNm5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQATVqvAwQA
TVqxAwQATVq2AwQATVq6AwQA1dGBAwQA1dGDAwQA1dGRAwQA1dGYAwQA1dGbAwQA
1dGdMA0GCSqGSIb3DQEBCwUAA4IBAQBO4UU+E2uc3RV69721OBUduzCKaUUZz+Eu
A5rfGPZUSfx8K6P7ZtzbswHqjmE9u5Vzem5NTdAD4DYuPRuLeEu5cS06LlFYmCl4
QOwcLY3d4U4MMb0eaVnpZUBcHxrTwA7yjmc2tec5stX+K6IrFhJSqvuncV3QAt9n
Likpqa0uw4zIHBWhEDZYgpIxfx4Hb3t3NDHjQscR/FqJZIvySHmeqmGits1g2vgM
UgHn65GX+hnONwjpgqG23wB91TsLMzdZCC54ENpvhgo3lChWUEeHeZNqUvf0znJv
pQXzSWotCJLMkGLcafDciMULIp3bJP+hlMFz8pAeDEJoeapfGf2X
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:52 2026 by rpki-client