Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NzzGm9Vj3j1UrepChyTINXfqnXQ.roa
File: NzzGm9Vj3j1UrepChyTINXfqnXQ.roa (raw, json)
Hash identifier: YceJiNifefimgL4zVWFRkbOO+t34SAh3R2em4gagF38=
Subject key identifier: 37:3C:C6:9B:D5:63:DE:3D:54:AD:EA:42:87:24:C8:35:77:EA:9D:74
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A17A731636382CFBAF889BC2B70C092696
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NzzGm9Vj3j1UrepChyTINXfqnXQ.roa
Signing time: Mon 26 Oct 2026 23:02:05 +0000
ROA not before: Mon 26 Oct 2026 23:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.159.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.168.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:73:16:36:38:2c:fb:af:88:9b:c2:b7:0c:09:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 26 23:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=373cc69bd563de3d54adea428724c83577ea9d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:58:e2:b7:d9:99:74:8f:b2:76:77:1f:1a:
1e:29:43:15:76:c9:3a:2e:98:ac:fc:23:26:3d:44:
35:af:57:8a:95:f6:8d:1b:7d:ae:be:e4:b1:3e:13:
ef:c4:ae:27:c1:d4:31:00:ef:fd:f1:89:00:b8:6a:
07:c5:e4:d4:a1:ab:25:1d:6e:bc:c9:59:e4:dd:9c:
e8:01:bc:ca:7f:f3:ce:63:69:d3:bb:4e:8b:fb:06:
fe:17:2f:40:23:c5:03:1c:40:d3:f4:fc:03:5f:16:
7f:1b:54:f0:57:2e:4e:ed:3e:2b:29:4a:8d:39:65:
ae:51:14:cd:db:a9:40:1b:f0:b0:73:ee:6f:99:95:
2d:bf:43:df:95:e9:f2:b4:8b:5b:aa:a7:d6:04:a0:
3c:80:7a:e9:8c:94:3c:f6:1a:28:c2:b5:61:04:62:
f9:68:13:40:ea:c0:79:1e:40:4a:35:7e:28:5d:ea:
8e:0d:02:3d:23:37:42:54:58:1d:4a:25:69:4f:1a:
2b:00:81:b2:86:43:c6:b1:e6:a4:71:20:87:19:9b:
35:73:51:4c:d5:59:52:82:e7:23:8b:8c:44:17:49:
e0:67:53:42:a8:50:c0:74:81:5e:2f:72:12:68:d0:
f5:66:cc:fe:28:42:06:ad:ff:da:cd:fb:03:6b:53:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:C6:9B:D5:63:DE:3D:54:AD:EA:42:87:24:C8:35:77:EA:9D:74
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NzzGm9Vj3j1UrepChyTINXfqnXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.143.0-77.90.144.255
77.90.146.0/23
77.90.153.0/24
77.90.157.0/24
77.90.159.0-77.90.163.255
77.90.165.0-77.90.166.255
77.90.168.0/23
77.90.173.0/24
77.90.177.0/24
185.230.12.0/24
213.209.136.0/24
213.209.138.0/24
213.209.144.0/23
213.209.156.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
66:68:c8:7a:71:96:19:58:29:a1:30:8b:1d:0f:b1:86:94:d3:
9f:f4:cd:8e:15:96:d8:a3:c4:66:e3:11:c9:33:9e:f2:fd:b5:
b0:07:36:be:be:f9:dd:56:d7:d3:20:59:f2:a8:10:d2:e0:d2:
7b:88:39:82:33:49:18:34:6a:f1:cb:55:21:04:82:2c:5d:19:
dc:6c:b3:1f:e2:46:df:96:cb:2a:c6:c5:80:ca:71:fb:bd:77:
e9:0f:8d:3e:c2:21:2b:f9:cd:1b:a0:16:36:34:a4:db:de:4a:
14:36:cf:50:c4:b8:ef:8d:65:af:aa:df:12:50:72:ec:90:e4:
ea:37:07:fc:a6:01:7d:f9:42:ec:86:5b:a0:51:f2:8b:d2:2f:
5a:1a:4d:cf:ca:ee:b3:61:3d:1e:b1:01:57:b8:1e:b4:ed:86:
1c:f5:f2:f1:b3:f6:64:74:fa:73:d3:78:36:ef:17:e7:37:87:
32:06:7b:42:5c:89:7c:1e:f9:d9:76:4f:68:b0:03:f2:e1:6d:
6d:75:01:03:58:53:a1:97:5b:58:15:58:45:e5:fd:bf:d2:aa:
12:9d:98:94:d0:a8:f6:e0:9d:d1:79:0d:31:44:3f:15:2b:03:
95:b8:fb:a0:f2:6f:56:ed:b4:65:20:5f:e0:21:69:10:a9:41:
28:05:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:03:33 2026 by rpki-client