Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aRdn5BZWfdwoWUA8vowIVMkP9FQ.roa
File: aRdn5BZWfdwoWUA8vowIVMkP9FQ.roa (raw, json)
Hash identifier: X/fX+ifSBYRhsTHBvZdQhrna5KPFQHlBeLI1OXv4yRk=
Subject key identifier: 69:17:67:E4:16:56:7D:DC:28:59:40:3C:BE:8C:08:54:C9:0F:F4:54
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019D0A597BB268863C4C8C60648D2103BE90
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aRdn5BZWfdwoWUA8vowIVMkP9FQ.roa
Signing time: Fri 20 Mar 2026 08:25:29 +0000
ROA not before: Fri 20 Mar 2026 08:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:59:7b:b2:68:86:3c:4c:8c:60:64:8d:21:03:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 20 08:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=691767e416567ddc2859403cbe8c0854c90ff454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:12:f9:62:aa:1d:db:3f:11:21:41:9b:ed:
9a:35:d3:a8:71:2d:79:46:4d:26:74:f9:f2:8b:82:
37:e0:c2:ce:67:62:7d:a3:4a:05:26:a0:5c:dd:95:
da:1e:5b:4a:75:11:0e:00:bf:3c:ea:1d:84:b6:a1:
ba:4e:e4:5e:53:37:10:49:54:cc:82:40:4a:c0:51:
c7:d6:41:08:4d:66:90:19:29:e7:45:d7:a5:e4:19:
9f:b1:ea:37:42:73:2d:07:df:a6:96:00:ef:47:ca:
4b:10:90:1e:35:47:31:c7:7b:37:b8:36:21:01:68:
78:d8:25:c3:a5:0d:40:64:13:15:e0:cc:0b:e9:a1:
62:f9:79:d2:93:5a:96:b5:8c:3e:b0:30:fa:4e:4f:
02:68:c9:44:68:5a:ac:13:41:89:98:cd:1e:d9:61:
45:b6:4f:aa:28:e9:1e:b2:cc:17:06:3c:2b:62:d0:
4f:0a:0c:ec:22:2a:e6:46:ea:88:e3:39:86:bd:5a:
ed:dc:41:c4:2a:07:f3:79:5f:36:41:9d:94:ba:83:
ec:48:d7:45:6b:c2:24:d8:f4:3a:45:27:72:45:70:
a3:47:be:0c:3c:6c:99:55:ec:4c:c1:5f:9c:77:ba:
2a:7e:e4:80:12:7b:57:84:18:06:f0:c3:8c:a7:f9:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:67:E4:16:56:7D:DC:28:59:40:3C:BE:8C:08:54:C9:0F:F4:54
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aRdn5BZWfdwoWUA8vowIVMkP9FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.143.0-77.90.144.255
77.90.146.0/23
77.90.188.0/24
213.209.138.0/24
213.209.145.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
06:83:43:ee:0f:f3:44:dd:e4:c8:7e:51:fe:9c:b0:69:1c:03:
f9:46:7b:fc:af:58:2f:87:7d:a7:4c:c9:a8:70:ed:7f:50:79:
57:07:8a:14:53:33:2a:f6:02:5e:fe:77:1c:10:a4:df:c0:ae:
42:1c:6e:6e:6c:8c:4e:c6:bb:fb:b7:26:ee:5c:db:2f:06:32:
cf:77:7a:96:88:1e:b4:40:f6:07:3a:ca:99:35:c7:fa:74:84:
4f:e0:f8:17:e0:9f:49:b5:8d:59:b8:a5:2c:15:60:31:d2:60:
70:0d:e0:b0:54:13:38:78:18:0b:a9:31:68:d1:87:67:c9:5c:
ca:4c:d7:75:56:a7:4f:43:a1:4d:40:be:81:b7:a5:48:a5:08:
03:67:d1:63:b8:ab:de:bd:86:8e:c4:0f:6c:a8:6b:50:48:7a:
f1:fb:cc:a8:cb:37:85:57:d0:d9:74:b8:6c:23:80:ed:45:67:
95:5d:14:4f:47:ec:bc:52:15:bd:e4:78:3b:a8:c9:81:ce:8d:
f8:e4:c6:c0:c8:60:e3:db:31:a6:4d:5b:7a:d6:23:86:00:e2:
a2:bc:20:25:ff:cd:ed:b8:e3:fd:03:cb:74:d0:a2:2b:48:3b:
df:1c:7f:28:a1:79:95:ad:c5:a7:11:e4:82:e1:f1:f6:7a:f1:
9d:50:a8:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:57 2026 by rpki-client