Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RPb3blTbum-IvbKUTHCguWIM20k.roa
File: RPb3blTbum-IvbKUTHCguWIM20k.roa (raw, json)
Hash identifier: TcJMynUFWb2eZGEhOeAthCttETttw+UshWl8Uk+VftM=
Subject key identifier: 44:F6:F7:6E:54:DB:BA:6F:88:BD:B2:94:4C:70:A0:B9:62:0C:DB:49
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019DF1F90ADE875B3CE86F1107996FE89986
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RPb3blTbum-IvbKUTHCguWIM20k.roa
Signing time: Mon 04 May 2026 07:52:03 +0000
ROA not before: Mon 04 May 2026 07:52:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 77.90.149.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
77.90.168.0/24 maxlen: 24
77.90.174.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.135.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:f9:0a:de:87:5b:3c:e8:6f:11:07:99:6f:e8:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 4 07:52:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44f6f76e54dbba6f88bdb2944c70a0b9620cdb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:56:91:8e:24:68:0a:a2:75:a2:42:3a:99:
9a:34:12:9c:4c:61:e3:05:9e:5f:f2:da:ec:d4:de:
f2:3b:1c:00:c4:22:22:6c:26:da:80:81:d6:07:92:
e4:61:67:b6:49:63:93:4c:3d:26:41:b6:11:ba:66:
7c:a5:1e:72:c8:63:33:8a:cc:ae:16:7e:c7:74:94:
fa:55:cc:f7:3b:42:61:0b:5f:eb:43:b4:df:8a:8a:
44:52:f4:53:f6:97:ad:9a:f8:42:c5:b0:ab:ec:c1:
d6:b3:a4:24:17:10:51:84:6b:99:1d:2f:2b:db:5b:
87:29:06:da:33:0d:98:35:87:cf:17:51:3a:7d:bf:
dd:af:38:7b:e8:0f:6d:55:91:77:09:52:4c:96:76:
a5:00:46:db:b1:10:cf:6f:1e:6d:8f:b7:78:e4:c9:
f2:2a:e8:1e:3d:1b:2f:17:23:0e:f8:e0:7f:41:9a:
30:6c:83:cc:c0:ec:e8:25:2b:78:b9:38:fc:78:f4:
4c:77:dd:b3:fa:b6:22:5e:88:ee:96:95:6f:3a:38:
01:6d:00:d4:d3:b7:78:64:86:29:ed:a6:fa:3e:8f:
40:b8:49:f6:4d:fa:bf:22:3c:18:f4:a7:ca:c2:ec:
64:fa:99:20:55:56:33:e6:1f:de:21:a4:e9:ca:9f:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F6:F7:6E:54:DB:BA:6F:88:BD:B2:94:4C:70:A0:B9:62:0C:DB:49
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RPb3blTbum-IvbKUTHCguWIM20k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/24
77.90.155.0/24
77.90.167.0-77.90.168.255
77.90.174.0/24
77.90.179.0-77.90.181.255
185.230.12.0/24
213.209.133.0-213.209.135.255
213.209.137.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
91:a9:c6:dd:79:cb:76:22:ff:71:65:d2:1e:67:a6:a9:e0:e7:
27:38:53:87:4d:ea:d9:12:ec:79:73:23:a0:fa:c5:98:d1:99:
2f:29:8a:b0:ba:13:87:0e:96:49:fd:0d:13:2c:09:c1:4b:4c:
3e:97:6b:a4:f8:d8:19:c5:b2:36:ab:56:4f:24:81:54:36:c9:
33:9a:70:0e:4c:23:59:cb:aa:ae:45:92:13:c0:3f:4d:90:8e:
b9:6a:2d:5b:be:a7:88:a5:ac:e0:47:9b:c6:16:ee:bd:70:4b:
b8:fb:a6:b9:54:65:8c:60:ee:69:2b:bd:68:45:77:9f:10:fe:
06:a5:68:86:42:94:83:9f:7f:b3:7d:35:41:60:7e:e3:ca:21:
49:c8:7b:a5:40:f4:59:e1:a3:e1:c2:40:93:ec:eb:b2:5f:5c:
4a:c9:a3:5b:2d:21:92:d2:c2:5b:24:86:7d:c5:30:b8:fc:79:
bd:f1:00:d8:b3:da:23:2a:a1:75:5c:de:4e:cd:d6:6e:a9:e3:
34:b2:9b:97:79:c7:73:94:2f:57:00:29:1d:26:5f:12:eb:9c:
92:8e:be:33:ec:40:ba:d3:e4:a5:ad:8e:f6:f0:f6:ef:ea:16:
0e:6e:03:42:3a:dc:93:74:6f:55:74:7d:24:34:3c:59:9a:89:
77:c8:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:59 2026 by rpki-client