Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/_CEvtrrf4ywSW8WL1NKCdbrbTcQ.roa
File: _CEvtrrf4ywSW8WL1NKCdbrbTcQ.roa (raw, json)
Hash identifier: tJuQHmy5nj4ReIzlLBRLMzRIERXYngetZteIDUh3o+o=
Subject key identifier: FC:21:2F:B6:BA:DF:E3:2C:12:5B:C5:8B:D4:D2:82:75:BA:DB:4D:C4
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01975F251FE064B4C1D214BE2ECAC6675035
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/_CEvtrrf4ywSW8WL1NKCdbrbTcQ.roa
Signing time: Wed 11 Jun 2025 13:19:17 +0000
ROA not before: Wed 11 Jun 2025 13:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216300
IP address blocks: 77.105.129.0/24 maxlen: 24
77.105.132.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:25:1f:e0:64:b4:c1:d2:14:be:2e:ca:c6:67:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jun 11 13:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc212fb6badfe32c125bc58bd4d28275badb4dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:fd:47:81:f3:e0:e1:66:a1:0a:fb:ed:7e:
49:f5:e7:0c:84:7b:60:2a:e1:6b:ba:31:a2:19:12:
0a:37:dd:d0:bc:84:f4:e0:98:4d:22:11:72:c1:f8:
9b:25:34:c8:f7:e0:c2:51:04:fd:30:06:62:38:3b:
a8:67:f8:e4:cd:f8:2a:21:ea:07:e1:81:0d:b3:88:
98:d4:37:e6:ad:26:03:96:ec:42:a3:d7:fa:0c:f2:
67:66:03:c8:34:d2:96:26:77:dc:c7:de:55:59:dc:
b8:81:f4:6c:19:ba:14:79:80:b4:38:36:df:fb:2f:
0e:21:6e:44:06:85:8e:2d:89:9e:a1:1c:3b:f6:38:
0c:05:d6:af:bc:13:69:e3:12:6e:65:00:71:fb:bd:
34:40:fd:1c:b3:62:e3:a3:b8:4c:1e:3e:0b:f7:18:
f2:80:ea:29:c4:8c:23:83:89:b0:2d:6a:3f:40:e5:
dd:eb:8b:42:68:3e:e7:9b:34:8b:72:39:60:d5:5d:
a5:58:6b:56:7e:1a:a2:94:c4:d8:c6:bb:51:4d:a5:
d2:8d:41:6c:25:af:71:a3:da:e1:78:e2:8a:6b:fa:
c5:60:44:5b:fa:56:1f:9d:56:28:e8:4b:36:a2:e0:
fb:36:69:f7:1b:64:4a:4d:46:8e:a8:03:53:3c:b9:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:2F:B6:BA:DF:E3:2C:12:5B:C5:8B:D4:D2:82:75:BA:DB:4D:C4
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/_CEvtrrf4ywSW8WL1NKCdbrbTcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.129.0/24
77.105.132.0/24
77.105.135.0/24
77.105.160.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
71:63:ac:46:e4:33:cf:57:a6:fc:17:d7:ab:f8:69:d6:0d:61:
bf:60:d7:68:ad:02:e2:ae:eb:d0:ea:38:4f:1f:c3:f8:b5:57:
70:e8:38:f2:0e:0b:4d:b5:2d:ae:fb:37:72:48:c3:b6:98:ae:
48:8e:be:0b:7f:07:30:76:00:b2:2f:28:5a:b5:81:b0:ed:e0:
e1:1f:47:d5:2c:de:29:1b:9b:2a:d4:9d:ab:8c:69:f7:1b:ce:
e3:03:f2:8a:85:ff:ac:f2:40:45:4b:60:58:24:b0:14:e3:1c:
94:1d:22:ac:67:44:aa:56:12:df:7e:bc:e8:aa:56:16:ff:8a:
51:ea:b2:31:a6:63:10:1b:38:e9:64:cb:c5:dc:ef:2b:82:fc:
a8:16:91:bf:5a:c5:9c:f9:31:47:47:f8:d4:62:e2:38:b6:0e:
54:eb:ff:f4:fc:26:31:eb:23:9a:f8:41:a3:32:74:1f:4e:a5:
aa:85:14:7a:0d:eb:49:ab:6a:c0:d5:a6:37:40:31:9a:30:57:
0b:0e:5c:fb:0a:19:c3:cc:82:bd:a2:f4:54:58:fa:89:0c:3d:
97:b4:d7:f7:bb:3f:cb:de:67:62:f3:30:f1:87:c0:bd:92:fc:
b9:71:7f:2a:c3:87:d0:be:b5:6e:d0:9b:e6:cc:2c:04:07:67:
df:ee:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:57 2025 by rpki-client