Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/75Qx-kzPheTuRxMqDJeoXXXQrYg.roa
File: 75Qx-kzPheTuRxMqDJeoXXXQrYg.roa (raw, json)
Hash identifier: ErepmH4DhXni27k1mjnFsC8LESHYORnx4kYupx2Zkhc=
Subject key identifier: EF:94:31:FA:4C:CF:85:E4:EE:47:13:2A:0C:97:A8:5D:75:D0:AD:88
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0196196946AFACCFCDB8C27E05C6E31E0CE8
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/75Qx-kzPheTuRxMqDJeoXXXQrYg.roa
Signing time: Wed 09 Apr 2025 07:17:31 +0000
ROA not before: Wed 09 Apr 2025 07:17:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.107.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.111.0/24 maxlen: 24
77.110.112.0/24 maxlen: 24
77.110.113.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:69:46:af:ac:cf:cd:b8:c2:7e:05:c6:e3:1e:0c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 9 07:17:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef9431fa4ccf85e4ee47132a0c97a85d75d0ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:5f:17:1f:8b:8f:5a:f4:3c:3d:ad:f4:51:
37:5c:9d:41:52:dd:9d:49:dd:72:f5:62:a3:73:2e:
fe:a8:55:e4:58:e4:20:aa:7e:45:58:b0:3b:48:4f:
fa:4e:d7:4d:18:5e:0e:ad:14:f2:20:58:7b:46:ca:
cd:a3:28:95:a6:44:f8:4d:f1:9d:c5:3d:a3:50:5b:
ff:c7:03:2c:01:f8:03:d1:dc:be:08:5d:76:6b:f0:
0c:3b:66:00:3a:be:22:85:a4:72:64:f8:ef:42:b9:
00:e0:15:bc:b0:e7:20:59:f9:aa:37:85:d2:16:76:
cf:e9:5a:47:04:84:ab:61:7c:0b:da:12:70:13:7b:
c1:09:40:5f:c9:47:04:71:3e:be:ea:1a:4a:68:47:
83:ac:35:6a:b5:bb:ce:65:c6:d5:47:12:2c:46:68:
68:c6:a8:4d:85:c7:93:c5:71:62:05:9d:d6:9c:b8:
14:8d:78:d3:76:b9:6a:93:1e:35:f8:b2:d8:87:04:
67:4c:b7:f2:d8:d8:8b:16:79:c1:42:33:bf:51:39:
70:9e:3e:9c:7d:4e:9a:f2:93:16:7d:71:3e:61:e0:
99:7b:ac:95:51:05:bb:73:6a:27:3d:53:f5:bc:5e:
8f:36:1c:84:3c:67:ed:ed:7c:48:03:a7:3a:b8:57:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:94:31:FA:4C:CF:85:E4:EE:47:13:2A:0C:97:A8:5D:75:D0:AD:88
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/75Qx-kzPheTuRxMqDJeoXXXQrYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0/19
Signature Algorithm: sha256WithRSAEncryption
82:f2:1f:6a:48:46:60:5e:b2:86:34:9f:0b:75:82:af:88:ad:
2c:38:a6:45:9c:e7:3d:1b:96:f6:92:73:e5:02:ec:c2:c3:54:
af:34:04:fa:92:7f:11:fc:eb:6d:28:3d:68:61:ac:1e:1e:88:
cb:0d:ba:dc:0c:20:36:77:cb:71:82:36:ac:6c:10:79:1b:0c:
65:ef:16:8a:bc:2e:25:ef:ec:00:4c:12:e9:98:fd:dd:e4:c3:
0e:04:a4:1b:33:22:ef:07:4f:35:3f:0e:fd:ac:93:d4:1e:cb:
d5:39:69:08:d9:be:7e:05:18:da:60:8c:09:28:4a:dd:5d:ff:
9d:3f:e7:95:c3:8d:1f:f5:f1:9c:28:2c:c5:c2:aa:48:27:32:
84:ba:63:42:b5:58:43:be:74:61:41:1a:f6:b3:00:33:6c:3c:
d3:b5:a0:83:66:2d:f2:7e:75:9b:3b:f2:4f:7e:c9:39:27:ec:
4b:89:56:ea:df:a2:df:0d:d3:5f:b2:f2:ba:b6:9f:52:48:f3:
c6:25:58:c2:54:88:c0:24:12:5a:0e:4f:64:02:27:c9:3d:b0:
2c:2e:2d:54:14:1b:c8:ca:ab:ff:e2:fc:72:5d:98:53:83:36:
ec:2d:d4:49:65:a2:2c:9b:b0:27:5b:17:50:ea:de:0f:25:e5:
cf:2d:b6:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYZaUavrM/NuMJ+BcbjHgzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNDA5MDcxNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk0MzFmYTRjY2Y4NWU0ZWU0NzEzMmEwYzk3YTg1ZDc1ZDBhZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulJfFx+Lj1r0PD2t9FE3XJ1BUt2d
Sd1y9WKjcy7+qFXkWOQgqn5FWLA7SE/6TtdNGF4OrRTyIFh7RsrNoyiVpkT4TfGd
xT2jUFv/xwMsAfgD0dy+CF12a/AMO2YAOr4ihaRyZPjvQrkA4BW8sOcgWfmqN4XS
FnbP6VpHBISrYXwL2hJwE3vBCUBfyUcEcT6+6hpKaEeDrDVqtbvOZcbVRxIsRmho
xqhNhceTxXFiBZ3WnLgUjXjTdrlqkx41+LLYhwRnTLfy2NiLFnnBQjO/UTlwnj6c
fU6a8pMWfXE+YeCZe6yVUQW7c2onPVP1vF6PNhyEPGft7XxIA6c6uFejjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+UMfpMz4Xk7kcTKgyXqF110K2IMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvNzVReC1relBoZVR1UnhNcURKZW9YWFhRcllnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTW5gMA0G
CSqGSIb3DQEBCwUAA4IBAQCC8h9qSEZgXrKGNJ8LdYKviK0sOKZFnOc9G5b2knPl
AuzCw1SvNAT6kn8R/OttKD1oYaweHojLDbrcDCA2d8txgjasbBB5Gwxl7xaKvC4l
7+wATBLpmP3d5MMOBKQbMyLvB081Pw79rJPUHsvVOWkI2b5+BRjaYIwJKErdXf+d
P+eVw40f9fGcKCzFwqpIJzKEumNCtVhDvnRhQRr2swAzbDzTtaCDZi3yfnWbO/JP
fsk5J+xLiVbq36LfDdNfsvK6tp9SSPPGJVjCVIjAJBJaDk9kAifJPbAsLi1UFBvI
yqv/4vxyXZhTgzbsLdRJZaIsm7AnWxdQ6t4PJeXPLbZZ
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:06 2025 by rpki-client