Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/70bI0BpF1ACsAKCFJ6N-iV0JxII.roa
File: 70bI0BpF1ACsAKCFJ6N-iV0JxII.roa (raw, json)
Hash identifier: eA2eEKDYDU9RId38K2W4q8Sfx9olgaplYK4PPc5MYTY=
Subject key identifier: EF:46:C8:D0:1A:45:D4:00:AC:00:A0:85:27:A3:7E:89:5D:09:C4:82
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019EF9C67C3EFDA707676E6172291974FB20
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/70bI0BpF1ACsAKCFJ6N-iV0JxII.roa
Signing time: Wed 24 Jun 2026 13:16:35 +0000
ROA not before: Wed 24 Jun 2026 13:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.159.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:c6:7c:3e:fd:a7:07:67:6e:61:72:29:19:74:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 24 13:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef46c8d01a45d400ac00a08527a37e895d09c482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:f3:e4:52:eb:92:09:25:a2:98:dc:8e:3e:
e3:fd:2c:cd:db:b8:f2:5b:14:31:44:08:ae:b9:9a:
04:a7:64:4d:36:88:ee:68:87:5e:8f:2c:68:cc:75:
e7:2a:88:ec:e8:1d:36:6d:de:cb:e9:8b:11:da:78:
ba:6e:d4:58:fd:fb:5a:64:8d:13:4a:3e:ad:aa:5a:
99:a3:b0:6f:9c:7d:82:39:a8:c9:e6:1b:e9:5d:b4:
4b:60:b2:78:91:b5:f3:b0:d2:5d:47:48:3e:cb:68:
7c:e9:e7:32:f8:72:cc:d0:55:50:2a:4b:52:a0:5c:
72:da:13:35:eb:36:63:eb:a4:e1:fa:1a:17:c7:33:
92:4e:5b:47:bb:45:50:13:1b:61:ef:8d:1f:3b:98:
04:b6:a5:55:2b:74:7a:8b:45:36:a5:02:7a:e3:7b:
5e:4e:1c:3f:41:ed:f8:3f:4b:b6:12:00:02:88:da:
c4:e9:75:6f:0f:f9:42:cd:e8:6f:dc:36:43:21:a0:
42:e1:25:5b:ed:e7:e1:f8:ab:5e:9e:49:e4:67:59:
0d:86:ea:73:d5:65:20:cb:6c:c4:32:5a:bc:88:ae:
05:16:24:2e:bc:f9:8d:22:57:6c:db:87:dc:38:05:
21:2b:0b:78:81:9a:91:e5:b9:2f:92:fe:6d:25:7f:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:C8:D0:1A:45:D4:00:AC:00:A0:85:27:A3:7E:89:5D:09:C4:82
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/70bI0BpF1ACsAKCFJ6N-iV0JxII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.148.0/24
77.90.156.0/23
77.90.159.0-77.90.163.255
77.90.165.0-77.90.166.255
77.90.169.0-77.90.172.255
Signature Algorithm: sha256WithRSAEncryption
02:4b:17:d0:27:ad:f5:ad:6c:c8:2f:1f:13:eb:52:ed:47:18:
9d:99:0c:d4:2c:2e:d8:d8:ea:64:e2:d1:7f:ec:87:7c:f2:2b:
0f:47:ea:e9:80:8b:ab:91:18:61:e0:e5:5d:45:22:3f:81:bc:
ea:69:f9:51:a0:7b:83:0a:55:50:a4:8e:a0:06:4e:f5:21:5d:
f4:8b:a5:8b:1f:0b:b1:42:57:5a:02:00:3b:75:3d:94:eb:51:
1c:81:a6:18:a6:48:94:1f:86:e7:34:8c:c3:92:16:a7:ee:32:
cd:44:37:e6:ce:8f:c9:a0:a3:df:94:b8:69:40:dc:4d:9b:43:
d2:22:43:87:2e:03:81:68:75:c5:52:1c:ab:63:58:c1:a5:e4:
02:07:bb:fb:57:cb:7a:5d:1a:64:e7:13:d0:da:80:e1:05:f4:
05:66:e0:dd:75:06:ae:58:41:35:d0:d9:03:df:43:67:18:98:
e1:2f:f2:ec:22:0a:44:39:d6:d1:39:88:4f:ad:61:41:b6:f8:
82:13:1a:7b:37:3d:05:5d:ec:95:35:a9:c3:ad:64:93:99:68:
f5:31:10:92:9d:4f:ae:b2:c8:74:50:e5:94:94:d8:29:f2:5a:
0d:04:7f:e5:da:7c:72:79:1f:42:6f:a0:0b:03:85:d0:bf:1b:
51:5f:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:18:14 2026 by rpki-client