Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/442VNKvpcunKVPnt4J7fMImKSJI.roa
File: 442VNKvpcunKVPnt4J7fMImKSJI.roa (raw, json)
Hash identifier: hAgVi/D80l9kyC+tR3RkdJ8V7/Xxnres0r1GBh0GLqk=
Subject key identifier: E3:8D:95:34:AB:E9:72:E9:CA:54:F9:ED:E0:9E:DF:30:89:8A:48:92
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01985EE393272A958B79C931A40A980DCF2F
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/442VNKvpcunKVPnt4J7fMImKSJI.roa
Signing time: Thu 31 Jul 2025 05:10:29 +0000
ROA not before: Thu 31 Jul 2025 05:10:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.140.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5e:e3:93:27:2a:95:8b:79:c9:31:a4:0a:98:0d:cf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 31 05:10:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e38d9534abe972e9ca54f9ede09edf30898a4892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:a8:5b:8f:bb:59:b3:6b:ff:e3:3f:1d:db:
fe:19:a7:e4:71:7c:28:2e:40:4b:19:ee:d6:ca:6e:
69:8a:0a:ab:42:40:36:02:7e:2a:ab:86:01:29:f7:
38:32:7e:38:df:97:8f:5d:64:a4:94:0e:6e:db:67:
c4:ee:01:4f:d1:57:da:ef:92:39:38:db:5c:dd:d0:
b3:2f:c2:65:dc:34:58:7e:0e:10:ab:5d:e8:0c:4b:
80:08:72:84:b4:df:77:87:03:99:56:af:c0:b9:2d:
10:53:be:80:b4:42:d4:20:38:82:0e:a9:fa:2f:47:
0a:09:51:23:e5:18:59:30:35:a2:58:c8:d0:6a:62:
50:69:7a:32:20:9f:da:4a:8e:7c:34:f2:da:03:78:
59:c7:c7:85:93:29:2e:68:df:76:1e:8e:6e:bd:00:
bd:ff:91:ec:32:14:57:fd:e4:63:b6:5d:5f:d9:d9:
a8:92:1e:6b:1d:2b:ec:41:8b:f2:41:7e:f4:ef:6e:
39:a1:35:15:7c:68:88:7c:88:a7:84:1d:eb:27:7b:
db:14:1d:81:70:a3:1e:c7:aa:e9:7e:f4:b7:aa:03:
02:2c:71:7a:06:0e:a5:74:33:bd:47:39:aa:4b:72:
cb:ba:b3:78:01:99:dc:92:f9:f4:76:be:a8:9e:47:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:95:34:AB:E9:72:E9:CA:54:F9:ED:E0:9E:DF:30:89:8A:48:92
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/442VNKvpcunKVPnt4J7fMImKSJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:fb:35:a5:59:85:41:84:21:3e:94:36:8e:f5:9b:29:22:9b:
1c:d6:b0:02:7c:3d:d0:e9:87:ce:59:d6:8b:31:a2:2a:e9:39:
92:61:67:cc:05:00:3e:62:66:ad:cb:22:0a:f0:65:e5:1c:f7:
4e:27:3e:a7:79:43:e7:e5:fd:7f:4b:5a:d3:20:fa:26:70:e9:
78:74:97:e6:b5:2d:5c:8d:5b:92:15:b1:bb:3a:8e:91:c5:b7:
c6:d3:3e:2c:46:ae:33:40:bb:3f:32:65:16:1e:76:eb:e2:eb:
7a:9d:21:b4:cc:9c:09:86:3a:0c:69:8f:73:1d:b7:7e:49:55:
fb:ca:6f:3c:2f:a4:da:85:8f:e9:f2:56:54:9b:60:a7:a7:83:
f1:47:70:4b:ff:0b:21:7b:18:f9:05:78:ee:6a:4f:c6:1f:46:
0b:f9:66:50:33:c2:f9:db:cc:b4:60:af:62:56:0e:f0:7d:ff:
31:f6:07:24:7e:38:30:61:c7:a6:0c:b5:f6:85:6b:42:a9:2d:
1c:e6:85:29:3e:69:7d:ab:ba:6c:7b:22:09:49:03:02:4f:3e:
60:11:65:6f:e8:32:43:38:1c:1a:86:ff:c5:9c:ed:12:3a:03:
c4:fc:8f:96:01:f4:23:d5:8c:b8:77:33:6e:90:74:1e:29:ad:
11:0f:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:48 2025 by rpki-client