Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa
File: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (raw, json)
Hash identifier: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=
Subject key identifier: 92:0E:85:C1:AE:97:B8:B3:C6:A2:1F:81:8F:47:BE:AA:7E:BA:B1:36
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019E933C1D0F9C869A02EDD06F72956CF07D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa
Signing time: Thu 04 Jun 2026 15:24:10 +0000
ROA not before: Thu 04 Jun 2026 15:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 77.90.141.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:3c:1d:0f:9c:86:9a:02:ed:d0:6f:72:95:6c:f0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 4 15:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=920e85c1ae97b8b3c6a21f818f47beaa7ebab136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:b0:83:8c:fb:8a:9c:4f:9c:98:9e:11:b9:
bf:70:e4:54:97:03:ba:05:cb:12:44:0b:c0:27:79:
00:18:ea:53:82:c6:05:36:b4:2e:43:98:1d:a4:b0:
58:9b:0f:f3:1f:f6:fb:41:86:c9:e7:44:3d:31:1c:
1d:e2:21:d9:5a:6c:03:bd:26:51:49:54:28:66:1b:
64:b7:26:7d:cb:5c:d2:8b:a9:be:91:94:a2:ea:85:
bd:d6:92:01:e6:49:d4:68:ec:fd:c3:d7:93:65:2c:
aa:02:ce:24:1a:c0:5b:36:b0:b1:58:7c:9f:54:6c:
f2:ea:fb:88:60:73:61:28:23:24:ff:9e:3e:e7:42:
6b:5c:e1:fc:a1:a4:d6:12:d0:6c:d1:03:27:4c:65:
0d:98:98:f1:6d:76:96:08:64:1c:04:be:ce:75:55:
26:cf:7c:ab:3a:30:54:64:92:b3:49:19:6b:44:2f:
b6:d0:65:ce:f2:55:67:0c:f9:fb:08:10:d6:c5:61:
9a:b6:c3:2d:05:a8:8c:10:9d:64:a4:0e:5e:d2:e9:
b3:95:87:3f:53:7c:cc:0c:7c:7d:c7:21:f2:b5:fc:
26:40:36:75:44:f0:2c:63:51:0b:27:82:c4:de:77:
c9:2b:9a:68:18:3e:ef:7d:3a:1b:8d:aa:bc:5d:c0:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:85:C1:AE:97:B8:B3:C6:A2:1F:81:8F:47:BE:AA:7E:BA:B1:36
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.141.0-77.90.142.255
Signature Algorithm: sha256WithRSAEncryption
2a:90:b9:7d:7c:0f:8f:5b:88:f1:a6:10:6f:0b:ab:eb:72:5a:
80:10:4c:1f:39:83:7c:de:f1:6b:a6:28:7a:93:5f:c9:35:13:
af:cb:b2:4e:03:f4:3f:1d:97:0a:f0:57:aa:44:ce:3c:40:40:
3c:52:21:13:84:8c:9f:d8:cc:aa:26:7c:0d:47:2f:84:25:f1:
23:61:4e:15:92:c1:c1:f1:11:21:9c:c9:f0:29:06:50:a5:fc:
e0:67:d0:0f:83:01:66:4a:26:4e:b9:82:66:f0:72:e8:f7:94:
ee:fd:4f:5f:97:2d:8c:7b:ae:13:c5:b3:3f:1f:c5:ae:f3:44:
22:84:b5:4b:d4:7a:f2:04:8f:ac:9a:72:67:40:63:06:c4:18:
e9:33:f7:74:ac:1d:2a:84:e1:a3:d8:bc:0e:8c:5d:02:89:b5:
78:fa:e0:23:70:b4:fe:dc:9b:c8:84:58:ef:94:27:d5:f1:ab:
36:09:00:83:16:5d:01:35:d0:d5:c6:51:c6:7b:6e:9d:69:29:
88:d5:98:1b:37:6b:39:c8:5f:66:cf:13:f2:89:e6:40:03:2d:
3d:72:63:6b:b5:86:f0:92:ca:3e:50:3c:25:1e:4e:2d:6e:fe:
3b:cd:79:7c:57:15:16:02:0f:8d:db:6d:bb:05:69:ce:12:e9:
d2:e6:d7:39
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ6TPB0PnIaaAu3Qb3KVbPB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwNjA0MTUyNDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjBlODVjMWFlOTdiOGIzYzZhMjFmODE4ZjQ3YmVhYTdlYmFiMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYOwg4z7ipxPnJieEbm/cORUlwO6
BcsSRAvAJ3kAGOpTgsYFNrQuQ5gdpLBYmw/zH/b7QYbJ50Q9MRwd4iHZWmwDvSZR
SVQoZhtktyZ9y1zSi6m+kZSi6oW91pIB5knUaOz9w9eTZSyqAs4kGsBbNrCxWHyf
VGzy6vuIYHNhKCMk/54+50JrXOH8oaTWEtBs0QMnTGUNmJjxbXaWCGQcBL7OdVUm
z3yrOjBUZJKzSRlrRC+20GXO8lVnDPn7CBDWxWGatsMtBaiMEJ1kpA5e0umzlYc/
U3zMDHx9xyHytfwmQDZ1RPAsY1ELJ4LE3nfJK5poGD7vfTobjaq8XcDZQwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJIOhcGul7izxqIfgY9Hvqp+urE2MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEva2c2RndhNlh1TFBHb2gtQmowZS1xbjY2c1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNWo0D
BABNWo4wDQYJKoZIhvcNAQELBQADggEBACqQuX18D49biPGmEG8Lq+tyWoAQTB85
g3ze8WumKHqTX8k1E6/Lsk4D9D8dlwrwV6pEzjxAQDxSIROEjJ/YzKomfA1HL4Ql
8SNhThWSwcHxESGcyfApBlCl/OBn0A+DAWZKJk65gmbwcuj3lO79T1+XLYx7rhPF
sz8fxa7zRCKEtUvUevIEj6yacmdAYwbEGOkz93SsHSqE4aPYvA6MXQKJtXj64CNw
tP7cm8iEWO+UJ9XxqzYJAIMWXQE10NXGUcZ7bp1pKYjVmBs3aznIX2bPE/KJ5kAD
LT1yY2u1hvCSyj5QPCUeTi1u/jvNeXxXFRYCD43bbbsFac4S6dLm1zk=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:00 2026 by rpki-client