Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qW2Abdn_vKg1qMi5dPH9Mlkq-5k.roa
File: qW2Abdn_vKg1qMi5dPH9Mlkq-5k.roa (raw, json)
Hash identifier: A2I1BFykGtvUPJzt8UEmOO8VliU3UUk2FL56Hs19AWE=
Subject key identifier: A9:6D:80:6D:D9:FF:BC:A8:35:A8:C8:B9:74:F1:FD:32:59:2A:FB:99
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019F8E7F49C02EE163FADA5151B682DA8124
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qW2Abdn_vKg1qMi5dPH9Mlkq-5k.roa
Signing time: Thu 23 Jul 2026 10:22:14 +0000
ROA not before: Thu 23 Jul 2026 10:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:7f:49:c0:2e:e1:63:fa:da:51:51:b6:82:da:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 23 10:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96d806dd9ffbca835a8c8b974f1fd32592afb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:0c:ac:62:74:fd:a7:a1:3f:b3:5c:e6:3f:
3f:ed:d1:21:2f:4d:80:41:a2:1e:78:e8:b1:f9:93:
0d:1c:fb:8e:3a:e5:a6:79:a8:a2:62:03:1f:61:77:
c5:29:97:d6:48:ab:e9:32:c6:2b:e2:95:20:b0:12:
c8:5d:ca:17:c8:b1:e0:f3:55:5f:35:14:69:c5:8c:
57:93:03:3a:52:84:fc:6b:6f:2f:2a:20:a7:f1:fb:
92:8f:59:2e:d9:8c:5a:da:6e:8e:52:9b:14:fc:93:
21:16:1a:f8:ca:a0:cf:7a:e7:68:c4:f7:20:8e:33:
e9:7f:63:97:4f:5a:df:fa:67:96:f8:c5:cc:3a:d7:
18:ee:f3:26:be:1b:ac:2d:7b:f6:b4:4b:fe:c9:8a:
2b:55:a0:fb:b7:3d:24:d0:ac:f0:01:a7:05:2a:e6:
13:0d:48:15:03:4b:24:5f:a9:03:30:d6:b7:b2:de:
56:14:8f:d1:0e:ec:16:9f:5a:9c:3f:d4:e6:84:bb:
0f:1b:26:b8:6b:8d:8c:b5:0e:3f:97:c3:00:84:10:
ea:98:58:9b:28:98:2a:e6:6a:19:14:ba:4f:37:97:
3f:5e:b8:27:93:42:c0:26:8e:b8:7f:58:75:82:8f:
5b:ab:2f:f9:49:c7:78:3c:f5:19:b3:65:c5:aa:6a:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:80:6D:D9:FF:BC:A8:35:A8:C8:B9:74:F1:FD:32:59:2A:FB:99
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qW2Abdn_vKg1qMi5dPH9Mlkq-5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.143.0-77.90.144.255
77.90.146.0/23
213.209.138.0/24
213.209.141.0/24
213.209.144.0/24
213.209.156.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
71:89:6d:17:37:f6:be:44:5f:4f:f2:12:66:73:07:4e:84:8a:
49:0e:64:fa:01:1f:aa:d5:61:c0:3d:bd:25:71:de:81:1a:e6:
9b:fc:86:ff:fd:b9:33:55:72:f1:82:98:65:b0:ac:ce:15:1e:
49:9b:34:7c:42:7f:3e:37:54:c1:26:b4:0b:08:2a:4b:64:6c:
95:f8:7a:d6:fc:1e:3c:16:a0:f6:11:6f:c4:55:0b:95:99:19:
5e:29:99:34:7a:91:92:e7:1a:b1:19:57:21:b1:e6:3d:9f:4f:
62:3f:c6:70:8f:98:a5:92:34:62:6d:1f:61:a8:09:ca:92:5a:
64:84:27:8f:55:ef:87:3d:ee:0e:31:cb:8f:db:85:ee:1d:41:
b2:05:cb:ba:57:26:8c:fc:87:fe:21:1f:91:93:33:2e:c4:e5:
e7:64:73:64:f2:78:58:be:47:47:65:e5:8a:d8:88:4e:23:08:
10:65:0d:e5:9d:8f:b0:a3:1a:64:86:77:53:2b:dc:84:b7:16:
15:11:e2:d0:90:e3:38:e4:d0:a2:e2:04:a9:9c:82:bd:34:4c:
3d:84:34:d1:be:4d:ba:f4:d8:70:98:df:0a:d9:73:1b:3a:78:
63:3c:14:33:de:d7:3c:a3:12:d5:28:39:6f:72:3d:93:ba:04:
84:05:56:d9
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZ+Of0nALuFj+tpRUbaC2oEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNzIzMTAyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTZkODA2ZGQ5ZmZiY2E4MzVhOGM4Yjk3NGYxZmQzMjU5MmFmYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLsMrGJ0/aehP7Nc5j8/7dEhL02A
QaIeeOix+ZMNHPuOOuWmeaiiYgMfYXfFKZfWSKvpMsYr4pUgsBLIXcoXyLHg81Vf
NRRpxYxXkwM6UoT8a28vKiCn8fuSj1ku2Yxa2m6OUpsU/JMhFhr4yqDPeudoxPcg
jjPpf2OXT1rf+meW+MXMOtcY7vMmvhusLXv2tEv+yYorVaD7tz0k0KzwAacFKuYT
DUgVA0skX6kDMNa3st5WFI/RDuwWn1qcP9TmhLsPGya4a42MtQ4/l8MAhBDqmFib
KJgq5moZFLpPN5c/Xrgnk0LAJo64f1h1go9bqy/5Scd4PPUZs2XFqmpoWQIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFKltgG3Z/7yoNajIuXTx/TJZKvuZMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvcVcyQWJkbl92S2cxcU1pNWRQSDlNbGtxLTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHowYgQCAAEwXDAMAwQHTVqA
AwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQATVqP
AwQATVqQAwQBTVqSAwQA1dGKAwQA1dGNAwQA1dGQAwQA1dGcMBQEAgACMA4DBQAq
BCnCAwUAKgQpxzANBgkqhkiG9w0BAQsFAAOCAQEAcYltFzf2vkRfT/ISZnMHToSK
SQ5k+gEfqtVhwD29JXHegRrmm/yG//25M1Vy8YKYZbCszhUeSZs0fEJ/PjdUwSa0
CwgqS2Rslfh61vwePBag9hFvxFULlZkZXimZNHqRkucasRlXIbHmPZ9PYj/GcI+Y
pZI0Ym0fYagJypJaZIQnj1Xvhz3uDjHLj9uF7h1BsgXLulcmjPyH/iEfkZMzLsTl
52RzZPJ4WL5HR2XlitiITiMIEGUN5Z2PsKMaZIZ3UyvchLcWFRHi0JDjOOTQouIE
qZyCvTRMPYQ00b5NuvTYcJjfCtlzGzp4YzwUM97XPKMS1Sg5b3I9k7oEhAVW2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:37 2026 by rpki-client