Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1wSZWKXMyJfB32iIqMGEz_wEs-A.roa
File: 1wSZWKXMyJfB32iIqMGEz_wEs-A.roa (raw, json)
Hash identifier: 1+HEn3e7uSzvz+L70yYTjmA5ki0QSHgTSf9doGyxKcs=
Subject key identifier: D7:04:99:58:A5:CC:C8:97:C1:DF:68:88:A8:C1:84:CF:FC:04:B3:E0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A17990F4B7DAA9EFF8735F0B0525B0E6BA
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1wSZWKXMyJfB32iIqMGEz_wEs-A.roa
Signing time: Mon 26 Oct 2026 18:55:05 +0000
ROA not before: Mon 26 Oct 2026 18:55:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:90:f4:b7:da:a9:ef:f8:73:5f:0b:05:25:b0:e6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 26 18:55:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7049958a5ccc897c1df6888a8c184cffc04b3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:cb:98:3d:0b:cc:cf:49:2e:f3:19:d6:a1:
1a:3e:a6:ed:17:f8:b6:e1:27:38:f0:55:af:be:12:
f5:9a:cc:5c:2a:5e:00:0b:72:f0:9d:9f:7b:b8:5e:
c1:6d:4d:5c:a3:54:54:9e:ff:05:8d:32:36:54:f1:
61:96:9e:9a:f3:89:de:c4:6c:be:72:b3:f8:12:60:
9c:1a:65:05:e5:00:90:a1:96:57:83:2c:da:09:b4:
df:bf:16:1d:e8:4b:bc:03:0e:51:c9:5c:6a:aa:21:
7f:a8:a4:75:e5:16:d5:45:77:01:61:9e:18:db:f6:
4a:53:f2:af:6f:45:f6:1e:fd:7f:82:16:d4:bb:e8:
cd:1e:6f:71:2a:fd:fc:17:1c:a0:94:5f:72:e3:42:
46:68:f6:16:cc:6e:fd:b1:50:5c:06:c1:cf:2c:61:
2a:ab:9c:8b:d5:51:3a:3e:93:1d:37:ca:8e:ae:82:
67:29:65:ed:be:fd:eb:aa:5e:55:f7:22:ee:92:39:
79:20:f2:6b:48:b8:0b:c0:90:26:41:1b:07:61:bf:
38:13:41:27:0f:40:61:3a:dc:a6:71:ce:b2:3a:3c:
4d:55:e6:be:b2:1f:3f:64:ae:45:55:0f:9b:50:88:
36:66:5b:23:f4:48:a2:4b:5a:72:71:55:71:88:9a:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:99:58:A5:CC:C8:97:C1:DF:68:88:A8:C1:84:CF:FC:04:B3:E0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1wSZWKXMyJfB32iIqMGEz_wEs-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.184.0/24
185.230.14.0/24
213.209.134.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:33:34:f1:a2:c0:7b:04:76:a4:a6:a8:e8:c6:f0:69:4b:f2:
33:56:70:3b:f1:8e:db:76:71:7c:68:9f:c4:f4:1f:81:15:21:
6b:51:26:ca:bd:e3:19:86:ce:72:a5:d1:8f:d1:d8:59:2e:d8:
aa:dc:34:b8:ae:fc:e3:eb:c7:2a:90:1b:bf:b3:dc:ac:6a:29:
f9:9b:39:e0:ca:52:91:a6:7e:ce:f6:e9:25:de:31:06:93:de:
a1:d4:2b:30:48:e6:35:06:4c:93:3e:00:65:64:67:8d:1c:bb:
80:8f:16:22:b5:5b:d5:69:95:ec:b9:48:cb:e6:40:6a:39:48:
b9:70:87:2e:65:fe:72:ff:86:2a:ec:1c:34:bf:97:26:c4:2f:
db:46:79:ea:c3:f6:ad:86:87:a6:93:8c:9a:9f:68:60:e9:8d:
1a:9c:a9:32:96:64:ad:f6:d8:47:5f:fb:eb:2d:c1:5a:47:eb:
c7:c7:19:e4:9d:52:af:e9:fc:f7:66:d7:96:15:3c:e8:9d:10:
3b:da:06:04:9f:2b:7d:5f:fa:2f:a4:a8:3c:cc:e9:6c:3a:90:
24:a2:56:bc:d6:bd:96:df:57:8f:b1:88:50:3d:26:8a:56:67:
74:4b:28:12:b8:33:2c:d7:83:4b:7b:bc:e2:25:16:bf:ac:28:
70:44:be:88
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaF5kPS32qnv+HNfCwUlsOa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYxMDI2MTg1NTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzA0OTk1OGE1Y2NjODk3YzFkZjY4ODhhOGMxODRjZmZjMDRiM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua7LmD0LzM9JLvMZ1qEaPqbtF/i2
4Sc48FWvvhL1msxcKl4AC3LwnZ97uF7BbU1co1RUnv8FjTI2VPFhlp6a84nexGy+
crP4EmCcGmUF5QCQoZZXgyzaCbTfvxYd6Eu8Aw5RyVxqqiF/qKR15RbVRXcBYZ4Y
2/ZKU/Kvb0X2Hv1/ghbUu+jNHm9xKv38FxyglF9y40JGaPYWzG79sVBcBsHPLGEq
q5yL1VE6PpMdN8qOroJnKWXtvv3rql5V9yLukjl5IPJrSLgLwJAmQRsHYb84E0En
D0BhOtymcc6yOjxNVea+sh8/ZK5FVQ+bUIg2Zlsj9EiiS1pycVVxiJoZFQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNcEmVilzMiXwd9oiKjBhM/8BLPgMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMXdTWldLWE15SmZCMzJpSXFNR0V6X3dFcy1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATVqRAwQA
TVq4AwQAueYOAwQA1dGGAwQA1dGdMA0GCSqGSIb3DQEBCwUAA4IBAQAMMzTxosB7
BHakpqjoxvBpS/IzVnA78Y7bdnF8aJ/E9B+BFSFrUSbKveMZhs5ypdGP0dhZLtiq
3DS4rvzj68cqkBu/s9ysain5mzngylKRpn7O9ukl3jEGk96h1CswSOY1BkyTPgBl
ZGeNHLuAjxYitVvVaZXsuUjL5kBqOUi5cIcuZf5y/4Yq7Bw0v5cmxC/bRnnqw/at
hoemk4yan2hg6Y0anKkylmSt9thHX/vrLcFaR+vHxxnknVKv6fz3ZteWFTzonRA7
2gYEnyt9X/ovpKg8zOlsOpAkola81r2W31ePsYhQPSaKVmd0SygSuDMs14NLe7zi
JRa/rChwRL6I
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:31 2026 by rpki-client