Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa
File: uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa (raw, json)
Hash identifier: cZuNjtIzgSPmn/E68ilOlNr7prIJYzZ8c4gKBp8qr+g=
Subject key identifier: BA:20:58:C8:0C:59:67:E2:16:5F:CF:DB:F0:1B:B3:C0:4D:10:71:5A
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019762D0743FBB465299279B6217741128B5
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa
Signing time: Thu 12 Jun 2025 06:25:17 +0000
ROA not before: Thu 12 Jun 2025 06:25:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201684
IP address blocks: 77.83.60.0/24 maxlen: 24
87.121.168.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
87.121.171.0/24 maxlen: 24
87.121.172.0/24 maxlen: 24
87.121.173.0/24 maxlen: 24
87.121.174.0/24 maxlen: 24
87.121.175.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
193.203.254.0/24 maxlen: 24
2a03:11a0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:d0:74:3f:bb:46:52:99:27:9b:62:17:74:11:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jun 12 06:25:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2058c80c5967e2165fcfdbf01bb3c04d10715a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:fb:c4:6d:5b:aa:1d:42:f5:66:47:cc:35:
38:f6:11:37:51:86:00:82:cb:a8:45:4e:d7:98:12:
57:20:ec:55:c4:7d:12:27:b9:e1:39:94:64:fd:90:
2d:67:ae:18:b0:1b:56:31:50:30:26:0b:8c:99:49:
b8:8d:63:13:22:5c:29:8f:b8:95:93:08:87:28:48:
c7:11:ef:55:32:f7:fd:94:1c:81:2e:18:6a:61:b5:
37:0c:8a:ed:77:97:59:c9:57:45:d5:4e:ea:4d:8c:
4f:79:d5:43:21:5a:2e:58:83:eb:c7:c6:6f:4f:32:
d1:b4:5d:8f:b9:03:20:83:a9:35:11:d8:02:61:46:
48:89:e2:5e:bd:1b:5f:84:00:45:d3:48:23:10:f8:
8a:66:7f:90:49:cd:e2:6b:ad:e0:85:8d:d1:d4:93:
21:84:0a:2b:7f:b8:8f:29:1c:4a:80:66:a3:28:63:
69:47:3b:15:4c:64:8c:01:06:e5:98:c5:10:e3:51:
0f:f9:fb:cf:d4:66:2e:b0:c5:67:cf:17:49:f8:b4:
c9:d6:a0:8e:19:74:1a:c4:39:a0:58:6b:54:ca:a9:
df:40:cd:c2:6c:89:09:92:d7:f0:53:38:63:77:67:
60:00:8d:bd:f8:ae:1c:5e:0c:a9:64:1c:71:38:ba:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:58:C8:0C:59:67:E2:16:5F:CF:DB:F0:1B:B3:C0:4D:10:71:5A
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.60.0/24
87.121.168.0/21
185.64.24.0/22
193.203.254.0/24
IPv6:
2a03:11a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
70:08:f9:ee:70:eb:bc:ea:97:18:de:cf:bf:e0:40:d3:d0:92:
7e:1e:aa:9e:31:26:d3:5f:aa:7d:5f:98:c9:57:d8:37:a6:10:
f7:80:5f:90:3a:36:cd:53:8b:5c:e1:6f:ee:7e:85:23:12:cd:
4c:67:f0:49:16:20:a2:29:03:05:7f:fa:65:f9:f0:84:20:8b:
48:71:23:7c:7d:1f:b4:8e:02:d1:9d:0c:82:1a:dd:c3:9e:10:
87:87:f1:65:ae:66:2b:5a:82:49:e5:bd:2c:d1:26:50:b0:a4:
0d:68:18:31:22:a7:04:b0:b9:2d:2a:9c:97:58:3f:b3:f3:68:
ab:05:b5:bf:8e:fe:fa:a2:b7:1f:11:2f:7b:86:cc:34:10:a5:
34:53:44:bf:71:b6:81:b4:c8:95:77:de:8b:16:4f:b8:e1:49:
25:bb:2e:a6:fe:33:a1:10:c7:93:57:20:0c:c4:82:0b:06:de:
24:13:8e:c3:3a:a3:49:ba:50:01:50:17:34:de:72:1c:b9:2c:
c8:c1:6d:51:f6:8e:fc:3a:89:40:b0:e3:20:b7:83:27:36:ec:
f3:b4:48:e2:66:14:3a:08:f8:8e:33:49:03:cf:2c:47:9d:e0:
ac:d7:58:0e:7e:be:3b:98:76:29:21:b4:82:a8:68:32:ed:80:
ce:48:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:38:17 2025 by rpki-client