Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/uTIU2_KvYO-tKnwpco0cinKSFwY.roa
File: uTIU2_KvYO-tKnwpco0cinKSFwY.roa (raw, json)
Hash identifier: uuFCbk/LILXi8ySr2DhHYpylPUgn3apdlnG7AhOMN8k=
Subject key identifier: B9:32:14:DB:F2:AF:60:EF:AD:2A:7C:29:72:8D:1C:8A:72:92:17:06
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019F3B28487818AC3B6C4CD52DA3410CE649
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/uTIU2_KvYO-tKnwpco0cinKSFwY.roa
Signing time: Tue 07 Jul 2026 05:58:43 +0000
ROA not before: Tue 07 Jul 2026 05:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34120
IP address blocks: 77.90.64.0/21 maxlen: 24
77.90.71.0/24 maxlen: 24
77.90.72.0/22 maxlen: 24
77.90.73.0/24 maxlen: 24
77.90.76.0/22 maxlen: 24
77.90.80.0/22 maxlen: 24
77.90.94.0/23 maxlen: 24
77.90.96.0/23 maxlen: 24
77.90.98.0/24 maxlen: 24
77.90.100.0/23 maxlen: 24
77.90.104.0/21 maxlen: 24
77.90.112.0/20 maxlen: 24
2a0b:5600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:28:48:78:18:ac:3b:6c:4c:d5:2d:a3:41:0c:e6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Jul 7 05:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93214dbf2af60efad2a7c29728d1c8a72921706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:59:1d:ac:5f:33:95:5e:b4:65:0b:76:59:
6a:2f:37:77:79:d3:59:22:15:d3:d7:1b:96:c4:a5:
17:0e:1e:e2:36:36:5e:32:f1:4d:49:51:41:00:fa:
14:c5:39:fa:14:51:d8:51:2c:ef:34:49:f7:b4:46:
1d:8f:97:d4:d8:8e:0d:09:c7:b6:83:0e:71:28:8b:
77:ec:33:7f:2f:84:a8:3e:f4:64:cf:6c:2a:f8:72:
1e:bf:5e:6b:b4:be:cd:c0:94:16:3c:0d:8f:eb:9a:
f0:b9:87:c1:21:2b:3e:f1:a8:27:14:39:3e:6e:a6:
29:e3:0b:fe:05:5e:9d:9f:54:6c:9f:f5:74:63:a5:
30:20:66:5d:2e:51:8a:ac:78:bf:b5:79:05:fe:fd:
0e:dd:2c:d9:ea:d5:d3:50:17:5b:26:7f:e6:f3:34:
54:3d:55:54:6b:99:a3:03:a1:45:f7:aa:3f:9b:56:
08:bc:0e:cf:bf:e1:c6:27:8d:f4:52:98:ef:7f:19:
e0:54:26:0e:44:db:97:fe:72:7d:23:98:b5:ab:d8:
74:62:b7:ef:11:af:fe:e8:44:f7:0a:6c:71:ed:67:
72:17:dd:fa:43:b4:2d:8a:f2:30:5f:67:a0:3d:8f:
02:46:a3:fd:31:87:88:69:e0:11:ea:04:51:7f:ff:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:14:DB:F2:AF:60:EF:AD:2A:7C:29:72:8D:1C:8A:72:92:17:06
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/uTIU2_KvYO-tKnwpco0cinKSFwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.64.0-77.90.83.255
77.90.94.0-77.90.98.255
77.90.100.0/23
77.90.104.0-77.90.127.255
IPv6:
2a0b:5600::/32
Signature Algorithm: sha256WithRSAEncryption
3f:7a:5c:9d:04:fb:4f:33:15:5c:ab:e0:85:5f:48:b4:98:47:
6a:86:3a:8d:34:13:c5:62:e5:de:11:34:00:b9:0f:4d:80:6c:
a3:9c:a5:34:22:fc:49:ec:ec:c2:3d:82:ca:de:92:24:18:af:
01:ff:d6:c2:27:38:87:0e:b3:73:67:46:71:83:00:7a:3d:98:
ad:9f:f2:cc:c4:b5:cd:3c:d0:07:1b:45:9d:d8:c1:c5:6c:68:
ac:0b:83:76:a1:72:a2:73:b0:b1:47:83:f3:ff:de:00:db:a9:
34:50:c1:7d:23:b6:73:5d:92:9d:fe:6c:1e:f7:4e:f4:5c:1c:
b2:85:26:5b:63:12:01:21:d6:bc:fc:7a:82:1c:b1:0c:6f:9c:
9e:ff:4f:9c:52:43:3d:76:02:26:a7:01:7e:3c:48:39:d6:0d:
f7:45:30:ec:ed:97:bd:2a:96:af:f8:b8:2f:8a:fb:72:a0:dd:
54:1e:15:e8:1b:29:5b:7d:94:de:7c:67:e6:9d:23:71:bc:2f:
50:ac:69:83:a0:81:ae:de:93:e2:a9:ab:de:d9:ac:48:c3:68:
1d:64:e2:00:b2:1f:49:b3:d5:7f:d3:c1:e9:46:b3:53:f9:a8:
a9:8d:3a:ac:55:a4:88:7f:59:15:ad:ce:92:c5:5d:94:32:2d:
71:ec:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:57 2026 by rpki-client