Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QwF0BlO4tk_h2m7pI4nhweiHhKA.roa
File: QwF0BlO4tk_h2m7pI4nhweiHhKA.roa (raw, json)
Hash identifier: /hRSobrtsj4yZ3x+jWbxAu/sV+yBO6+8QUxw1Z3nc/Q=
Subject key identifier: 43:01:74:06:53:B8:B6:4F:E1:DA:6E:E9:23:89:E1:C1:E8:87:84:A0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A06C75E36B6412C6B8BDEF43B184BEC8B8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QwF0BlO4tk_h2m7pI4nhweiHhKA.roa
Signing time: Fri 04 Sep 2026 12:47:40 +0000
ROA not before: Fri 04 Sep 2026 12:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 77.90.139.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
77.90.190.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:75:e3:6b:64:12:c6:b8:bd:ef:43:b1:84:be:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 4 12:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4301740653b8b64fe1da6ee92389e1c1e88784a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:03:b1:bd:ca:4e:14:bd:cb:b0:ad:8d:aa:
44:7f:3d:b0:59:55:43:38:f0:36:ae:2e:ed:37:13:
3e:f7:23:40:e0:78:4b:3a:6d:f1:3d:27:8b:b7:0f:
b3:92:9c:75:2f:2a:44:25:eb:22:d7:c4:de:e1:38:
5d:7a:53:30:ab:14:0d:55:47:b0:35:9c:69:9c:3a:
aa:8b:86:bb:fd:61:6c:2e:eb:37:7a:d4:ef:34:fd:
ec:b1:4e:04:f4:81:46:26:4b:72:19:9b:9c:e2:9b:
88:20:42:2b:19:d8:c5:3c:c7:a5:65:d1:d4:e3:aa:
db:ff:41:39:e2:dd:52:e7:43:d6:b5:80:7f:d9:7f:
04:a3:26:85:ca:5a:e4:74:55:e4:d3:c7:8e:2a:26:
ec:f1:87:a0:14:ea:a3:b9:df:e4:15:4d:d2:02:95:
d2:c6:8e:aa:ba:49:5c:b5:c1:ab:4a:f6:25:7d:f0:
5d:e2:7a:43:98:37:8c:63:cf:54:38:5b:1f:a2:95:
a7:99:4a:42:dd:24:98:c7:43:40:9b:15:c8:9d:18:
d5:08:67:d3:76:ff:14:f3:ae:48:e0:12:de:42:68:
96:5b:44:34:ca:91:80:a9:e4:07:69:41:e4:71:ce:
7c:f9:2b:4f:4c:95:87:53:cb:60:e9:f6:01:f9:53:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:74:06:53:B8:B6:4F:E1:DA:6E:E9:23:89:E1:C1:E8:87:84:A0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QwF0BlO4tk_h2m7pI4nhweiHhKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.139.0/24
77.90.173.0/24
77.90.190.0/23
213.209.139.0/24
213.209.141.0/24
213.209.143.0/24
213.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b7:f5:7c:67:37:36:9e:7b:22:05:d4:f4:e8:d5:83:55:94:
e4:ac:84:ad:20:f0:2e:7d:93:f1:be:37:10:7a:08:35:b4:21:
35:8d:f2:6b:26:c6:8f:a3:f9:38:9e:21:c2:5d:88:ec:10:4a:
c5:6a:1f:a6:ea:cb:50:8b:1e:1f:cb:3e:36:1d:61:ee:b9:a8:
ac:72:b7:4b:cd:f6:af:03:ab:3a:a0:8f:88:82:26:b4:4b:92:
62:c6:12:a6:e2:e9:a3:f8:33:6b:78:1d:0c:c2:8e:25:50:2d:
2d:78:20:e9:16:2f:f6:d2:58:be:c2:6b:76:23:7c:44:7b:0b:
ac:f7:ed:0c:5b:bd:79:80:a0:59:f1:bf:69:5b:fd:53:06:a2:
d6:ee:09:28:41:fe:39:b0:01:c8:d9:1f:0b:80:a6:f6:d3:09:
ae:91:99:55:52:c7:5e:99:7c:6f:2e:d3:e6:f9:85:95:61:fb:
c4:0d:6c:09:d6:3b:41:02:5a:0d:0e:d9:1a:b1:57:52:cc:68:
6d:52:6b:0b:d5:8e:f2:61:d4:2b:d9:d1:fa:cb:22:f7:37:c0:
30:b9:af:f4:3d:48:07:c0:5a:ac:5d:a2:02:07:57:82:a8:27:
9e:92:3e:c7:26:66:60:a4:65:b8:7e:db:ea:62:f5:a8:6c:0d:
16:c2:7a:a6
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaBsdeNrZBLGuL3vQ7GEvsi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwOTA0MTI0NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzAxNzQwNjUzYjhiNjRmZTFkYTZlZTkyMzg5ZTFjMWU4ODc4NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fEDsb3KThS9y7CtjapEfz2wWVVD
OPA2ri7tNxM+9yNA4HhLOm3xPSeLtw+zkpx1LypEJesi18Te4ThdelMwqxQNVUew
NZxpnDqqi4a7/WFsLus3etTvNP3ssU4E9IFGJktyGZuc4puIIEIrGdjFPMelZdHU
46rb/0E54t1S50PWtYB/2X8EoyaFylrkdFXk08eOKibs8YegFOqjud/kFU3SApXS
xo6quklctcGrSvYlffBd4npDmDeMY89UOFsfopWnmUpC3SSYx0NAmxXInRjVCGfT
dv8U865I4BLeQmiWW0Q0ypGAqeQHaUHkcc58+StPTJWHU8tg6fYB+VMTEQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEMBdAZTuLZP4dpu6SOJ4cHoh4SgMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvUXdGMEJsTzR0a19oMm03cEk0bmh3ZWlIaEtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATVqLAwQA
TVqtAwQBTVq+AwQA1dGLAwQA1dGNAwQA1dGPAwQA1dGTMA0GCSqGSIb3DQEBCwUA
A4IBAQC0t/V8Zzc2nnsiBdT06NWDVZTkrIStIPAufZPxvjcQegg1tCE1jfJrJsaP
o/k4niHCXYjsEErFah+m6stQix4fyz42HWHuuaiscrdLzfavA6s6oI+Igia0S5Ji
xhKm4umj+DNreB0Mwo4lUC0teCDpFi/20li+wmt2I3xEewus9+0MW715gKBZ8b9p
W/1TBqLW7gkoQf45sAHI2R8LgKb20wmukZlVUsdemXxvLtPm+YWVYfvEDWwJ1jtB
AloNDtkasVdSzGhtUmsL1Y7yYdQr2dH6yyL3N8Awua/0PUgHwFqsXaICB1eCqCee
kj7HJmZgpGW4ftvqYvWobA0Wwnqm
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:34 2026 by rpki-client