Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lsbtAzP5S5qeH_4o8hGUz10ykxo.roa
File: lsbtAzP5S5qeH_4o8hGUz10ykxo.roa (raw, json)
Hash identifier: wE2/fg4H981VgFpKNNFOHGD8hAjJ86kt98S5FkV88xo=
Subject key identifier: 96:C6:ED:03:33:F9:4B:9A:9E:1F:FE:28:F2:11:94:CF:5D:32:93:1A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A0115AA4B12DE820BB268DD4B27DBB0FC7
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lsbtAzP5S5qeH_4o8hGUz10ykxo.roa
Signing time: Mon 17 Aug 2026 20:12:28 +0000
ROA not before: Mon 17 Aug 2026 20:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.90.175.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:5a:a4:b1:2d:e8:20:bb:26:8d:d4:b2:7d:bb:0f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 17 20:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c6ed0333f94b9a9e1ffe28f21194cf5d32931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:c4:6b:72:6c:67:2a:f6:9e:66:ce:45:da:
e7:c8:9c:64:43:68:85:e5:0d:c7:08:a3:66:31:ce:
e2:51:4c:66:e9:d0:c9:0a:a1:78:98:50:35:7d:1d:
9f:24:eb:63:d1:5b:b5:96:7e:cd:bc:d4:6d:b4:94:
01:7d:96:3f:24:e0:fa:0a:74:69:c1:cc:0e:29:b3:
e2:d1:d5:ff:8c:9a:db:c6:24:41:24:ca:62:f8:b1:
2a:5e:be:f8:13:68:10:9b:ad:d7:09:65:41:bf:50:
48:75:c7:9f:e2:41:5c:d6:f6:99:b1:8d:c1:c1:44:
6b:5e:ab:8b:2d:e8:1f:12:22:21:0e:84:f1:5a:7d:
89:d7:d7:c4:57:19:45:8b:4b:7c:d8:33:ab:1c:73:
0d:c1:6f:7f:3c:db:21:e0:4c:69:a8:d5:0a:19:fb:
5e:97:aa:87:fe:34:76:1a:0f:86:30:f0:e0:f4:07:
36:09:ab:f3:4a:9e:00:fb:ee:e1:72:83:15:40:e1:
cf:74:10:ca:3d:e6:41:05:3d:1b:dc:7e:3d:73:f2:
ed:99:86:1d:23:9b:01:28:1e:8e:29:07:ec:d9:12:
a7:fc:6b:f4:9e:c0:20:48:2b:0b:4c:74:86:55:f1:
23:81:86:d8:7a:9c:66:64:3b:2d:73:96:e8:32:4a:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:ED:03:33:F9:4B:9A:9E:1F:FE:28:F2:11:94:CF:5D:32:93:1A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lsbtAzP5S5qeH_4o8hGUz10ykxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.175.0/24
77.90.182.0/24
213.209.129.0/24
213.209.131.0/24
213.209.144.0/24
213.209.152.0/24
213.209.155.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a0:b2:44:e4:11:fa:66:c6:8c:e4:0c:70:18:8e:08:25:df:
e2:09:59:f1:f5:cc:c0:60:d9:25:7d:49:a1:33:1a:fd:99:95:
a7:c3:f3:85:e3:ae:1b:a3:fc:25:9f:fb:e1:d0:18:05:09:f0:
1e:8d:4c:86:0d:08:f6:f1:d0:31:8b:01:cb:da:37:cc:26:11:
8e:c2:f8:a5:3d:4e:8a:7a:40:ff:9a:08:b8:fe:0d:f1:27:21:
4c:1c:1d:74:05:f6:36:6e:16:6c:a8:75:90:6e:4f:7d:6c:43:
1c:5d:8d:9a:74:10:df:33:c6:3d:14:52:f0:b0:59:5a:62:77:
26:72:f7:e3:66:36:75:e8:a9:74:be:91:1f:8c:1d:e9:7a:bd:
16:08:ac:58:aa:55:c7:7e:9c:50:33:84:63:9e:78:b2:2a:5f:
db:cd:c8:20:bc:07:a6:f9:70:1f:13:df:58:2d:fb:dc:98:64:
f7:0b:70:a3:0a:4f:5e:91:08:a4:46:b0:43:61:b2:2d:a8:b6:
8e:09:6b:6b:f2:6b:d2:14:d9:bc:bd:74:04:e7:69:3d:5b:75:
36:0b:47:c5:22:51:a8:26:77:8b:ae:a5:fe:47:ea:1f:b5:2b:
c0:d8:ce:f0:af:b7:4f:23:37:23:5d:b6:ee:c5:9a:3c:83:ba:
a2:d0:bf:55
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaARWqSxLegguyaN1LJ9uw/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwODE3MjAxMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmM2ZWQwMzMzZjk0YjlhOWUxZmZlMjhmMjExOTRjZjVkMzI5MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wXEa3JsZyr2nmbORdrnyJxkQ2iF
5Q3HCKNmMc7iUUxm6dDJCqF4mFA1fR2fJOtj0Vu1ln7NvNRttJQBfZY/JOD6CnRp
wcwOKbPi0dX/jJrbxiRBJMpi+LEqXr74E2gQm63XCWVBv1BIdcef4kFc1vaZsY3B
wURrXquLLegfEiIhDoTxWn2J19fEVxlFi0t82DOrHHMNwW9/PNsh4ExpqNUKGfte
l6qH/jR2Gg+GMPDg9Ac2CavzSp4A++7hcoMVQOHPdBDKPeZBBT0b3H49c/LtmYYd
I5sBKB6OKQfs2RKn/Gv0nsAgSCsLTHSGVfEjgYbYepxmZDstc5boMkrXbQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJbG7QMz+Uuanh/+KPIRlM9dMpMaMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvbHNidEF6UDVTNXFlSF80bzhoR1V6MTB5a3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATVqvAwQA
TVq2AwQA1dGBAwQA1dGDAwQA1dGQAwQA1dGYAwQA1dGbMA0GCSqGSIb3DQEBCwUA
A4IBAQCJoLJE5BH6ZsaM5AxwGI4IJd/iCVnx9czAYNklfUmhMxr9mZWnw/OF464b
o/wln/vh0BgFCfAejUyGDQj28dAxiwHL2jfMJhGOwvilPU6KekD/mgi4/g3xJyFM
HB10BfY2bhZsqHWQbk99bEMcXY2adBDfM8Y9FFLwsFlaYncmcvfjZjZ16Kl0vpEf
jB3per0WCKxYqlXHfpxQM4RjnniyKl/bzcggvAem+XAfE99YLfvcmGT3C3CjCk9e
kQikRrBDYbItqLaOCWtr8mvSFNm8vXQE52k9W3U2C0fFIlGoJneLrqX+R+oftSvA
2M7wr7dPIzcjXbbuxZo8g7qi0L9V
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:38 2026 by rpki-client