Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/44Iso-j2NQAGFeTcZ6p1-8DeSFQ.roa
File: 44Iso-j2NQAGFeTcZ6p1-8DeSFQ.roa (raw, json)
Hash identifier: sP9AM+BPoA0j3kdfgaDwC1UIxBZgtqrJuS1V2CbwYU0=
Subject key identifier: E3:82:2C:A3:E8:F6:35:00:06:15:E4:DC:67:AA:75:FB:C0:DE:48:54
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019F674BC5ADFA4A0DBEFDBA176851DA1A41
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/44Iso-j2NQAGFeTcZ6p1-8DeSFQ.roa
Signing time: Wed 15 Jul 2026 19:40:46 +0000
ROA not before: Wed 15 Jul 2026 19:40:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:4b:c5:ad:fa:4a:0d:be:fd:ba:17:68:51:da:1a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 15 19:40:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3822ca3e8f635000615e4dc67aa75fbc0de4854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:c4:f7:c4:2b:b9:37:5b:a1:6c:c1:97:21:
71:8f:b9:a3:23:40:1d:4c:8e:93:96:cc:d7:98:53:
64:c2:9f:2c:b6:4d:f3:03:51:c6:37:c9:07:ad:95:
a9:1b:4f:d4:8c:63:6d:62:ef:e9:7c:6f:a5:e6:1e:
a0:ce:0f:60:0d:f6:5e:6d:ba:7a:6a:6b:8b:f1:d0:
df:e3:e7:c1:dd:51:fe:65:ba:f3:e3:af:58:ad:99:
8b:ec:26:c2:85:b3:41:e7:20:d4:b7:63:5f:84:45:
f0:fc:0e:71:76:f9:fb:f3:a1:ac:22:00:35:db:d6:
b5:98:5b:89:46:9f:01:c0:53:ca:f3:6d:ee:6e:23:
f1:75:7c:b6:b5:e8:e7:b8:89:fa:8f:ab:0f:be:b1:
e8:17:0a:54:ed:4f:b3:01:94:83:4c:07:99:e6:7a:
80:a8:fe:19:35:13:6e:1f:fb:55:2f:ec:b4:65:25:
75:e4:03:0b:1e:3f:0c:7a:89:f9:31:86:ad:a5:1c:
c9:88:f0:ae:32:a1:c6:91:ea:67:13:ee:02:08:63:
eb:75:44:d6:62:21:23:aa:47:52:c1:dd:a1:c8:a6:
49:a1:7e:d0:14:dd:bb:bf:51:8b:0f:f2:89:51:8f:
86:71:06:3a:6c:86:1c:c5:e6:ca:aa:11:c3:75:16:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:2C:A3:E8:F6:35:00:06:15:E4:DC:67:AA:75:FB:C0:DE:48:54
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/44Iso-j2NQAGFeTcZ6p1-8DeSFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.143.0-77.90.144.255
77.90.146.0/23
213.209.138.0/24
213.209.141.0/24
213.209.144.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
90:2e:5f:4e:ae:8c:a6:88:b7:01:f4:c4:63:6b:24:26:99:bc:
c0:f8:9e:1b:5c:90:11:07:f9:13:9a:97:40:85:ac:21:b6:98:
e2:ad:2c:36:32:46:4e:17:74:5d:be:fd:86:be:1d:e7:03:72:
58:52:e3:17:30:ae:2c:7b:b7:ee:a0:96:e3:2c:31:d1:4f:83:
e9:b4:fc:4b:10:2c:77:3d:8c:9b:c2:3c:bd:f0:e2:9d:95:01:
82:9b:30:fc:76:a3:19:aa:14:cc:5d:c9:dc:69:ce:9d:73:0e:
d8:b9:ef:b3:f9:c6:f1:d7:98:b6:1f:58:3a:ee:a2:3f:ca:58:
21:af:65:ec:65:2f:a8:0a:a8:25:8a:bd:bb:02:1e:6a:40:22:
1e:a1:e5:55:a8:90:7a:f8:ec:e8:3f:24:62:c3:06:f5:1f:b4:
56:b0:e6:3b:a8:95:73:04:d6:76:af:eb:b1:5c:0b:fa:8a:f4:
40:98:12:8a:e3:78:60:fe:72:57:43:8a:42:5b:d2:19:04:55:
14:c6:da:bc:f7:16:36:69:dd:2d:67:3e:50:a6:35:28:a1:cf:
bd:e6:36:16:ea:3a:a6:83:40:3c:61:22:c1:f0:36:49:70:55:
7e:e3:d1:40:9b:88:79:ad:e3:5b:6b:52:e1:46:02:57:f7:c8:
eb:aa:12:36
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZ9nS8Wt+koNvv26F2hR2hpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNzE1MTk0MDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzgyMmNhM2U4ZjYzNTAwMDYxNWU0ZGM2N2FhNzVmYmMwZGU0ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/vE98QruTdboWzBlyFxj7mjI0Ad
TI6TlszXmFNkwp8stk3zA1HGN8kHrZWpG0/UjGNtYu/pfG+l5h6gzg9gDfZebbp6
amuL8dDf4+fB3VH+Zbrz469YrZmL7CbChbNB5yDUt2NfhEXw/A5xdvn786GsIgA1
29a1mFuJRp8BwFPK823ubiPxdXy2tejnuIn6j6sPvrHoFwpU7U+zAZSDTAeZ5nqA
qP4ZNRNuH/tVL+y0ZSV15AMLHj8Meon5MYatpRzJiPCuMqHGkepnE+4CCGPrdUTW
YiEjqkdSwd2hyKZJoX7QFN27v1GLD/KJUY+GcQY6bIYcxebKqhHDdRYdXwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFOOCLKPo9jUABhXk3GeqdfvA3khUMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvNDRJc28tajJOUUFHRmVUY1o2cDEtOERlU0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVjAMAwQHTVqA
AwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQATVqP
AwQATVqQAwQBTVqSAwQA1dGKAwQA1dGNAwQA1dGQMBQEAgACMA4DBQAqBCnCAwUA
KgQpxzANBgkqhkiG9w0BAQsFAAOCAQEAkC5fTq6Mpoi3AfTEY2skJpm8wPieG1yQ
EQf5E5qXQIWsIbaY4q0sNjJGThd0Xb79hr4d5wNyWFLjFzCuLHu37qCW4ywx0U+D
6bT8SxAsdz2Mm8I8vfDinZUBgpsw/HajGaoUzF3J3GnOnXMO2Lnvs/nG8deYth9Y
Ou6iP8pYIa9l7GUvqAqoJYq9uwIeakAiHqHlVaiQevjs6D8kYsMG9R+0VrDmO6iV
cwTWdq/rsVwL+or0QJgSiuN4YP5yV0OKQlvSGQRVFMbavPcWNmndLWc+UKY1KKHP
veY2Fuo6poNAPGEiwfA2SXBVfuPRQJuIea3jW2tS4UYCV/fI66oSNg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:18:13 2026 by rpki-client