Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/YJI7jvGd5W_IPDB0udPMb_Bx1-o.roa
File: YJI7jvGd5W_IPDB0udPMb_Bx1-o.roa (raw, json)
Hash identifier: a8yvtsf79vhvIBF4QlHXQSnPxCFcBo/UpzM0mTEa+nk=
Subject key identifier: 60:92:3B:8E:F1:9D:E5:6F:C8:3C:30:74:B9:D3:CC:6F:F0:71:D7:EA
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019F5BCFF91B2119A69B0DB86CA97847826F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/YJI7jvGd5W_IPDB0udPMb_Bx1-o.roa
Signing time: Mon 13 Jul 2026 14:09:43 +0000
ROA not before: Mon 13 Jul 2026 14:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.175.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:cf:f9:1b:21:19:a6:9b:0d:b8:6c:a9:78:47:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 13 14:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60923b8ef19de56fc83c3074b9d3cc6ff071d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:e0:f5:4f:9e:bb:87:94:ba:78:18:c4:0f:
d6:e1:99:e0:20:76:eb:cd:bf:f6:24:db:62:59:64:
3b:68:72:40:63:04:ea:26:dd:af:bb:20:da:bc:53:
35:f1:1d:73:b7:e7:72:3e:e3:c4:de:8f:41:85:b6:
54:96:ac:69:5d:cd:87:53:01:59:07:67:bd:75:7a:
f8:49:68:91:a8:71:6f:40:f5:76:83:1f:d9:c5:04:
3c:fa:00:aa:b7:53:c7:ac:1a:38:36:24:ab:2b:58:
5e:e3:ce:e9:4f:fd:d9:f2:64:fc:db:dd:e8:c6:f4:
0b:a6:7e:c6:7b:ed:8e:15:7e:07:3e:45:f4:4f:34:
89:b1:2c:48:11:f5:f7:bf:ca:18:15:22:e9:7d:16:
a9:c1:9e:af:f9:bc:4a:1e:c3:c2:8b:1f:5d:26:2a:
60:6a:5e:09:94:46:9c:fb:72:c5:fe:7a:c3:79:f5:
dd:b2:63:e0:f0:b7:e1:c9:30:36:09:9e:32:73:59:
ee:ab:c1:6f:de:50:45:e3:ae:3f:be:72:67:e7:2f:
c7:e1:7c:63:fe:b1:4c:8a:cf:03:26:3d:20:a4:eb:
a1:fe:f1:02:f1:6b:c5:16:0e:7e:94:c6:c3:83:04:
ae:d1:25:80:35:72:88:ba:6c:83:d5:fd:d4:38:8a:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:3B:8E:F1:9D:E5:6F:C8:3C:30:74:B9:D3:CC:6F:F0:71:D7:EA
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/YJI7jvGd5W_IPDB0udPMb_Bx1-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.175.0/24
77.90.177.0/24
77.90.182.0/24
77.90.186.0/24
213.209.129.0/24
213.209.131.0/24
213.209.145.0/24
213.209.152.0/24
213.209.155.0-213.209.157.255
Signature Algorithm: sha256WithRSAEncryption
23:06:30:53:ae:8a:4e:91:b5:6b:56:f3:e7:2a:d2:8f:65:a9:
8e:fe:42:04:3c:46:ab:57:21:51:19:85:48:ca:0e:a8:63:5a:
7b:54:c9:6d:1a:b3:b1:3e:5a:a7:0d:8f:10:5d:42:e3:b5:a7:
bb:82:65:56:50:39:fe:0d:89:5d:f8:76:69:3f:32:4c:a1:c7:
33:15:43:fe:d6:15:d8:26:f3:4c:fc:6e:aa:ec:dc:c5:53:2d:
06:c1:2f:5f:ee:dc:5c:e4:ee:44:16:f2:b2:e2:f7:e6:0d:a4:
23:cb:39:57:bf:93:81:b0:34:71:2b:a9:1f:78:ab:9e:bb:f3:
00:5d:64:81:ab:9e:a7:47:fc:7c:85:3c:92:6e:2d:a3:73:19:
36:21:87:a2:91:24:f1:a4:d9:3a:b2:84:2e:a2:23:d1:0c:a3:
9f:f9:b4:5e:42:6f:dc:ee:e2:02:81:36:62:4e:57:b1:d7:49:
d3:c0:46:2e:ba:74:15:9c:d7:5a:1c:d5:58:a8:bc:ad:71:2d:
b1:d3:65:e1:1d:c6:a7:97:28:b2:4a:00:b3:85:01:92:22:8f:
32:1d:cb:c0:a4:53:f0:86:55:f7:c8:76:c7:13:05:c2:52:2f:
75:a7:b9:16:c8:c3:c9:fc:4e:a6:83:01:c0:fb:84:cd:f5:8a:
c5:9a:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:18:13 2026 by rpki-client