Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/IStNe4e6LhEN0WqF0khMmbBnvEQ.roa
File: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (raw, json)
Hash identifier: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=
Subject key identifier: 21:2B:4D:7B:87:BA:2E:11:0D:D1:6A:85:D2:48:4C:99:B0:67:BC:44
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01985B93CAE9BEDFAE7BAE20439E6162671D
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/IStNe4e6LhEN0WqF0khMmbBnvEQ.roa
Signing time: Wed 30 Jul 2025 13:44:29 +0000
ROA not before: Wed 30 Jul 2025 13:44:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21502
IP address blocks: 77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
79.80.0.0/12 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
84.4.0.0/14 maxlen: 24
85.168.0.0/14 maxlen: 24
87.231.0.0/16 maxlen: 24
88.140.0.0/15 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.157.88.0/21 maxlen: 21
89.157.96.0/19 maxlen: 19
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
195.132.0.0/16 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:93:ca:e9:be:df:ae:7b:ae:20:43:9e:61:62:67:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 30 13:44:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=212b4d7b87ba2e110dd16a85d2484c99b067bc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:d5:45:d5:1e:d2:2e:b4:17:7e:3b:8a:b1:
bd:a4:c3:3b:46:ad:67:39:de:6f:03:3c:17:84:6e:
17:ae:d2:75:d6:8e:69:f0:f0:28:5a:24:24:2d:32:
2a:16:c6:e8:98:fd:d3:ff:76:96:da:86:0d:8e:12:
7a:eb:d6:6e:20:6e:fa:1a:bf:26:90:62:8a:c5:7d:
96:f2:06:1c:a2:a1:d8:c3:4f:70:45:6c:61:bc:25:
07:70:9a:6f:7b:5c:c8:80:8f:6c:21:bd:8f:d3:9f:
cf:fb:e1:78:5f:0e:70:41:f8:a3:6a:b9:25:ef:e0:
27:e9:43:8c:7e:69:cc:5f:7a:ca:4d:a9:09:55:2f:
32:a7:ed:35:99:38:07:ad:16:96:a3:cf:80:ee:00:
2a:a8:01:3e:68:bb:2a:f5:64:fa:7b:e4:ce:50:c5:
8c:bd:0e:1f:11:12:9d:0f:51:1a:df:bf:30:6e:c2:
f8:05:89:a7:4b:85:fc:23:3a:44:7c:5d:be:af:b7:
69:28:6f:44:35:c7:df:4c:54:5f:2d:44:84:2c:df:
93:6b:b7:1a:0d:e5:8a:a6:78:1a:c7:32:e6:2b:ee:
dd:07:fc:aa:16:2a:50:f8:3d:fe:59:bf:7a:44:06:
40:32:84:6c:dc:f2:c0:e0:f7:7f:03:00:b0:e5:20:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:4D:7B:87:BA:2E:11:0D:D1:6A:85:D2:48:4C:99:B0:67:BC:44
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/IStNe4e6LhEN0WqF0khMmbBnvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.128.0.0-77.136.255.255
77.140.0.0-77.142.255.255
77.144.0.0/12
77.192.0.0/12
78.112.0.0/12
79.80.0.0/12
81.64.0.0/14
81.185.0.0/16
84.4.0.0/14
85.168.0.0/14
87.231.0.0/16
88.140.0.0/15
89.2.0.0/15
89.156.0.0/14
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
195.132.0.0/16
213.223.0.0/16
213.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:c6:c6:b9:5a:fc:7d:b5:39:07:d2:01:20:97:59:9f:4d:c6:
d5:1e:55:35:c2:71:6e:a1:05:f6:b0:05:94:f5:cb:f2:76:c7:
ea:23:6d:c7:66:33:4f:da:c5:c9:fd:1b:e9:98:1d:53:f6:fd:
cd:e4:ed:f1:15:da:89:d5:49:f5:6c:ae:f0:c1:1d:1f:ee:a5:
6c:88:72:94:40:72:a0:d0:f5:73:b4:81:d1:21:bd:85:4a:33:
4d:b6:f6:0f:3b:1c:c6:12:3d:11:c3:e7:d7:41:c7:3b:4b:db:
94:31:86:ff:4d:48:30:79:91:3d:fe:4a:05:a9:91:45:dc:01:
97:b1:8f:52:e1:7a:f7:1a:6d:ef:31:7a:25:f9:19:63:34:c5:
59:20:5f:3b:05:ff:57:f3:53:01:83:73:00:f2:e9:0b:7c:8a:
10:e6:19:56:0f:04:d8:8f:f1:ee:49:b1:f5:94:bf:77:11:74:
60:af:9f:29:e0:4d:ec:98:0e:0b:8a:e6:23:aa:bc:fa:68:eb:
21:71:98:55:e1:b6:25:3d:02:eb:d9:a2:ee:4d:2c:38:ce:21:
b5:c2:81:fa:1b:1e:3e:5b:38:ba:a6:8c:ad:14:b9:68:0d:cf:
f1:e0:f3:00:5d:e4:f1:cb:14:6a:d6:4a:75:f8:55:57:4a:a2:
6d:5f:83:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:47 2025 by rpki-client