Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zXOH3-Q51MK3GZt5bHSoHSs_FJU.roa
File: zXOH3-Q51MK3GZt5bHSoHSs_FJU.roa (raw, json)
Hash identifier: Cpdi/ii384lxrtdXZ5wTqNmK2guSrt505zs7GToaCyg=
Subject key identifier: CD:73:87:DF:E4:39:D4:C2:B7:19:9B:79:6C:74:A8:1D:2B:3F:14:95
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019760A4BAA410792123F464A6ABEC2A1CDC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zXOH3-Q51MK3GZt5bHSoHSs_FJU.roa
Signing time: Wed 11 Jun 2025 20:18:17 +0000
ROA not before: Wed 11 Jun 2025 20:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.105.61.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
188.255.222.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:a4:ba:a4:10:79:21:23:f4:64:a6:ab:ec:2a:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 11 20:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd7387dfe439d4c2b7199b796c74a81d2b3f1495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:2b:12:34:ee:be:f6:1a:a1:46:e4:d3:a7:
95:d3:dd:c3:36:66:e8:3a:8c:66:15:9e:7a:a1:34:
fd:7c:7f:00:a2:69:ed:73:d6:5e:47:f8:29:e8:da:
c4:59:c7:15:56:f3:c0:f0:1d:16:74:61:82:66:a4:
5a:0f:6d:c2:fd:65:7d:09:e0:25:1b:59:2c:9c:f4:
3e:5c:c9:35:5e:a2:eb:ea:59:e9:a2:3a:df:be:2b:
76:d3:a2:cd:85:d2:58:88:7d:e1:27:64:08:7b:f2:
68:d3:63:4d:53:cd:e6:63:75:cf:23:6b:f2:b7:39:
db:f3:fb:37:d3:cc:6d:ef:90:54:a6:5d:a6:50:7a:
0c:7a:3a:51:f4:02:9f:42:8d:8a:05:9c:82:90:bb:
51:e9:e5:7b:30:26:17:32:b3:6a:70:4e:aa:22:f7:
95:6c:99:e1:eb:1a:ba:e6:63:a7:d3:02:61:b6:b2:
5b:6a:6a:12:27:57:37:11:e1:51:ec:66:a9:49:0a:
aa:a3:30:52:0e:28:87:26:6c:79:6c:c7:09:56:ab:
c1:83:64:c6:e6:b8:e1:fb:bd:d0:64:c9:50:26:99:
70:c2:6a:76:d0:cc:f2:7c:cf:d0:de:43:49:a7:f0:
ce:aa:a3:4d:2c:a6:e1:f5:ba:a4:f4:e8:78:af:37:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:87:DF:E4:39:D4:C2:B7:19:9B:79:6C:74:A8:1D:2B:3F:14:95
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zXOH3-Q51MK3GZt5bHSoHSs_FJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.61.0/24
81.18.48.0/24
188.255.222.0/24
188.255.236.0/24
Signature Algorithm: sha256WithRSAEncryption
66:53:ef:cd:bb:f1:2f:40:8e:f6:7c:a2:6e:3c:8b:f9:7b:2f:
42:54:77:3a:27:a3:90:9b:5e:a6:61:b7:4b:2b:45:cd:24:1b:
aa:2f:43:48:e5:49:7f:24:ab:f2:95:47:65:a8:c4:99:9a:c9:
85:86:f9:68:60:0c:ad:21:5b:a2:03:e6:f2:19:9e:e0:7c:bc:
ea:a1:79:53:16:16:64:fb:bb:f5:05:1b:42:4d:54:83:60:aa:
ce:1e:0d:09:69:3b:cd:aa:02:00:06:67:8a:b9:4c:ca:81:fa:
b3:72:97:5f:8a:80:ee:75:ea:f7:43:ce:fb:0d:45:97:f5:d2:
e2:cd:10:08:5e:8f:95:d5:37:34:8f:f2:eb:0a:b6:8f:65:3f:
2f:d8:92:94:d4:4f:18:fa:e0:68:9d:84:48:19:c6:32:a0:9b:
be:01:a0:a8:36:57:ce:49:47:e9:45:03:bd:83:ae:a9:18:7e:
e8:04:bc:f0:5e:aa:4b:52:a9:cb:31:1d:fa:42:1f:69:0b:65:
a8:e3:8b:df:36:f7:10:9d:83:7d:ea:31:80:d9:0f:a8:50:44:
2b:d7:a5:a5:7b:93:de:bc:b9:ac:d6:00:e8:84:0e:06:85:6f:
fa:73:ce:85:fc:07:f7:73:1f:66:41:1e:fa:37:68:11:e3:31:
79:58:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:03 2025 by rpki-client