Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HWbYB_DmGeXYNXnb_W2jLtWLINI.roa
File: HWbYB_DmGeXYNXnb_W2jLtWLINI.roa (raw, json)
Hash identifier: AP3CLrLM8qm1AIBNge70pBO7qQX28XeGqFK58Es6e0E=
Subject key identifier: 1D:66:D8:07:F0:E6:19:E5:D8:35:79:DB:FD:6D:A3:2E:D5:8B:20:D2
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A134293C25544FFB9522DD488DB9BE1A18
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HWbYB_DmGeXYNXnb_W2jLtWLINI.roa
Signing time: Tue 13 Oct 2026 07:27:59 +0000
ROA not before: Tue 13 Oct 2026 07:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:29:3c:25:54:4f:fb:95:22:dd:48:8d:b9:be:1a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 13 07:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d66d807f0e619e5d83579dbfd6da32ed58b20d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:6e:7c:1d:ef:c9:92:d6:b0:f3:3a:29:ea:
ea:d0:13:80:ca:f8:28:8d:e5:56:2d:d1:16:04:35:
4c:1a:30:86:32:05:92:3c:03:a3:54:a6:1d:ba:f7:
cb:35:0a:46:f8:4b:65:29:09:b8:c9:32:0f:50:29:
95:aa:e8:50:d1:4d:44:93:85:3b:44:59:dc:94:27:
4a:85:2c:a6:75:03:0d:01:2c:36:73:f1:9f:86:54:
77:0e:ff:7a:e2:cf:ae:b2:07:51:ef:b8:be:9c:09:
2e:97:38:c4:c2:55:a2:14:41:f6:b5:b8:a6:b5:bd:
29:27:9a:c0:71:cc:42:ee:35:cb:9a:82:4d:f9:1f:
ad:e1:31:56:6a:bb:85:38:39:f6:28:2e:1e:0f:11:
1e:83:e1:79:03:b8:1d:f6:0d:b7:85:e4:ec:27:6e:
a7:a5:b0:9c:bf:fe:db:9c:29:2e:73:c9:b8:a4:0e:
dd:eb:d0:6d:84:23:c6:4b:bd:d0:85:c5:ca:ec:8c:
b1:ec:e9:98:e4:6f:27:5b:c9:47:2f:7f:10:65:35:
bd:24:6f:18:56:e2:3c:a6:56:66:cb:7e:1d:b8:6c:
f5:bb:8e:93:10:a3:8b:8b:39:a1:e6:89:a5:2c:8f:
22:df:b9:42:4c:9e:41:6f:d7:a4:63:28:71:58:09:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:D8:07:F0:E6:19:E5:D8:35:79:DB:FD:6D:A3:2E:D5:8B:20:D2
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HWbYB_DmGeXYNXnb_W2jLtWLINI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.138.0/24
77.90.151.0/24
77.90.164.0/24
185.230.13.0/24
185.230.15.0/24
213.209.146.0/24
213.209.149.0-213.209.150.255
Signature Algorithm: sha256WithRSAEncryption
b4:2a:b4:71:af:ea:0f:f0:d4:77:af:d7:fd:70:6a:26:5d:26:
d2:7a:69:c2:18:38:22:81:38:89:9a:57:d3:47:75:37:bc:04:
9e:00:61:90:a4:49:15:63:e1:2d:b5:7e:bd:3f:e3:1d:ea:2b:
0c:15:b6:7e:89:a2:eb:a4:7d:1c:3d:c1:0e:1b:11:bd:fe:12:
fd:18:28:05:84:3b:ea:42:b2:26:f9:a8:ab:01:db:d0:26:76:
e6:c6:c2:df:3a:ed:f6:78:84:ba:6b:ba:4f:9d:a0:f3:c8:96:
df:d8:e0:e5:43:ab:b5:c9:c7:c8:3a:a7:b1:d6:59:c3:31:ea:
e5:02:3b:a0:5b:cc:96:35:d3:f7:4c:7d:59:7f:e8:fa:35:48:
77:f5:14:1b:ed:59:a4:8e:e1:17:cb:a1:97:2d:74:28:fe:fe:
2d:d2:1c:9c:35:d2:e5:b6:bd:7c:ae:bd:a9:25:84:47:86:ff:
04:1c:4b:4c:46:c1:37:ff:16:e7:ba:a8:58:47:a8:47:e6:33:
3e:fc:a7:1e:83:fa:6b:4d:07:f7:50:eb:45:22:e7:33:f4:6d:
47:b3:f6:6d:d9:3b:aa:6d:21:c7:85:e2:72:07:b0:cc:fb:5b:
32:48:4d:4b:c1:10:0a:dd:9e:f8:9c:be:e8:03:c6:87:ad:08:
dd:7e:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:24:17 2026 by rpki-client