Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R7SMaEEZx64vd3vB6NQCPuyOzxw.roa
File: R7SMaEEZx64vd3vB6NQCPuyOzxw.roa (raw, json)
Hash identifier: 41LYQglzjtpGQ9ID2LG6EuaGtt307M70zKYhurf/Lkw=
Subject key identifier: 47:B4:8C:68:41:19:C7:AE:2F:77:7B:C1:E8:D4:02:3E:EC:8E:CF:1C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A03A167E03B12B2F96E20666FBAC222DFE
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R7SMaEEZx64vd3vB6NQCPuyOzxw.roa
Signing time: Tue 25 Aug 2026 18:02:27 +0000
ROA not before: Tue 25 Aug 2026 18:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.168.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.135.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7:1880:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:16:7e:03:b1:2b:2f:96:e2:06:66:fb:ac:22:2d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 25 18:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b48c684119c7ae2f777bc1e8d4023eec8ecf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:33:6d:9b:ff:bc:3e:72:c5:c4:79:1f:fa:
06:81:3b:dd:be:e0:8f:93:be:53:a0:52:e5:37:8d:
cd:d8:a3:f4:d6:8f:f6:f2:f3:af:88:ed:ad:7d:27:
c2:e6:7a:c3:3d:c7:cc:61:28:5c:15:26:6b:78:63:
01:08:90:ae:04:28:89:27:2c:a0:7f:0e:4d:20:ae:
ba:1f:ad:38:e1:95:92:f9:fb:2b:97:c7:b9:a8:1d:
33:3d:0c:13:c6:ab:fd:e7:ac:60:cd:85:a7:b0:51:
71:71:ed:5b:c8:64:ce:cd:4a:95:97:e5:d8:4e:f2:
b4:42:a1:c9:95:b7:7c:0c:04:e0:21:d9:2f:b7:12:
96:f9:d9:73:c6:f3:db:ea:91:62:b8:50:8e:5b:17:
1f:0f:77:6d:e6:be:98:ca:6e:d2:58:ad:c7:e9:90:
f6:ec:da:14:f3:d6:07:5c:27:cd:dc:75:c7:cd:0c:
24:48:8a:a6:bb:01:74:13:d9:aa:5b:d5:de:18:be:
cc:02:75:83:05:13:9d:2e:2a:50:e8:72:8d:d7:83:
74:5d:89:fc:36:d5:1a:5c:44:67:e9:9f:32:44:00:
e8:cd:70:e6:63:47:cf:f4:38:6f:2a:fa:e7:74:5e:
e8:34:e8:0b:02:fe:79:2e:00:6a:5f:dd:73:93:8a:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:8C:68:41:19:C7:AE:2F:77:7B:C1:E8:D4:02:3E:EC:8E:CF:1C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R7SMaEEZx64vd3vB6NQCPuyOzxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.143.0-77.90.144.255
77.90.146.0/23
77.90.168.0/24
77.90.177.0/24
77.90.186.0/24
213.209.135.0/24
213.209.138.0/24
213.209.145.0/24
213.209.156.0/23
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
05:06:14:61:0c:36:aa:eb:e2:64:66:cb:49:5e:e7:77:8c:1f:
b4:05:da:cf:27:47:56:b8:4a:c7:56:9d:b7:c9:fc:bf:4d:e0:
0e:9e:69:ea:35:50:7f:b1:2a:d7:68:dd:18:d2:12:bd:6a:b8:
0c:d7:9d:c8:6d:90:cb:84:82:ea:41:85:0d:f1:58:44:b6:91:
1f:0e:62:78:c7:1e:e0:69:d4:06:a8:6b:b9:54:0f:f4:e3:92:
87:f7:5f:68:aa:75:85:d3:6c:a8:ab:4e:d5:46:16:d9:3b:7d:
42:ea:72:8e:de:1f:91:d6:37:95:2b:ca:ba:a6:e4:71:b0:2b:
0b:df:09:8f:3f:51:27:e3:f5:87:38:80:fe:b1:1a:8b:18:2c:
6c:7a:49:87:3a:3e:32:d5:76:11:66:8b:d8:80:6b:b5:78:af:
be:81:f9:08:82:2f:af:15:87:df:7e:e8:c1:ab:ed:b3:ff:dd:
fb:9e:24:6b:8a:47:54:40:83:3f:82:2b:45:13:fa:a5:8f:01:
22:01:35:e7:0e:8c:e5:a0:3f:3f:ca:40:c7:96:9e:c3:98:d2:
19:39:ff:33:96:7f:b6:9b:81:50:80:b7:c4:3a:33:d2:e8:bd:
06:9f:02:1d:92:6e:65:53:b6:bd:77:20:ad:d0:e2:cc:30:c2:
5d:0b:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:44 2026 by rpki-client