Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NTd-v2RnsNEAO8EtTQStJYzMc7w.roa
File: NTd-v2RnsNEAO8EtTQStJYzMc7w.roa (raw, json)
Hash identifier: TOnrHm/cpIaDbkDN/WFxW7XN0xuiGVZLuLS1dCusWzA=
Subject key identifier: 35:37:7E:BF:64:67:B0:D1:00:3B:C1:2D:4D:04:AD:25:8C:CC:73:BC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01981BB72C1E2A25E1722206F64B0DDD9A6F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NTd-v2RnsNEAO8EtTQStJYzMc7w.roa
Signing time: Fri 18 Jul 2025 04:07:25 +0000
ROA not before: Fri 18 Jul 2025 04:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
2a02:2fc0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1b:b7:2c:1e:2a:25:e1:72:22:06:f6:4b:0d:dd:9a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 18 04:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35377ebf6467b0d1003bc12d4d04ad258ccc73bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:a0:50:7a:11:47:f9:4e:3b:c5:2f:9f:c1:
a6:07:b4:55:fa:03:4c:5e:06:52:f8:cb:a2:85:ba:
8a:98:06:3c:79:7f:ef:a7:23:20:86:6f:e7:b5:b0:
1c:5f:00:3a:b8:c8:c5:96:4a:a5:47:24:16:17:58:
37:61:89:e1:b2:cf:81:b8:91:c6:39:ae:57:45:01:
c7:9d:aa:c7:bb:a1:d4:d2:83:c8:78:08:3d:98:0a:
27:ba:57:44:da:2b:45:e1:c8:57:e4:1e:84:ab:8f:
f7:56:19:a0:d6:01:1b:aa:08:c3:a0:2c:da:19:e8:
b4:f9:36:9b:33:05:26:f4:a2:73:33:ff:8d:7d:bc:
86:d0:6a:0d:e6:59:59:ae:04:4f:64:d3:fa:f1:1a:
9c:2f:06:96:6c:79:65:87:44:02:da:7d:a2:4b:fd:
4a:2e:ba:88:62:e3:72:46:32:2c:1b:77:c2:c8:02:
9b:7c:4b:6c:42:50:33:88:ec:3c:d3:e8:2d:44:da:
47:eb:2b:05:81:1f:4f:c6:53:4d:98:f0:cd:f8:fe:
53:a0:9f:d6:d9:11:dc:25:29:5e:ba:b1:1a:44:e3:
da:5c:54:43:67:92:29:ec:bc:e5:1e:ea:ef:62:56:
d8:f4:5e:6c:bb:6f:c1:b0:18:bc:aa:b0:20:dd:13:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:7E:BF:64:67:B0:D1:00:3B:C1:2D:4D:04:AD:25:8C:CC:73:BC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NTd-v2RnsNEAO8EtTQStJYzMc7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.60.0/24
IPv6:
2a02:2fc0:10::/48
Signature Algorithm: sha256WithRSAEncryption
b2:04:9e:5b:14:09:4a:22:29:eb:c0:a1:53:73:bf:7f:ba:ff:
9d:df:8a:36:4c:86:15:cd:89:43:ab:d0:ef:0d:98:4a:a1:00:
a9:fd:36:82:54:4c:11:db:98:9e:df:2a:1f:5d:6c:3e:ff:f0:
a6:17:4f:65:e9:d3:8b:35:e1:33:70:b6:39:a5:f6:80:7b:f1:
e5:7f:ee:14:4a:7d:10:26:52:23:81:03:65:b4:31:b2:a4:ff:
50:71:2b:ac:5f:86:fd:98:89:80:87:3d:26:62:4f:9e:ab:9d:
72:ec:a0:9f:7b:5d:d6:93:d7:dd:de:e7:d4:e1:3a:52:81:39:
29:b7:47:fb:b5:e9:e0:2a:25:da:3a:ee:69:e8:a6:ed:ec:bb:
a2:07:38:41:18:68:5a:cb:96:2f:3c:f7:33:86:66:5f:53:fa:
e6:aa:e9:6c:cf:9a:ee:c1:b7:9f:b9:d3:aa:4c:11:9c:2b:02:
24:e8:37:3f:dc:b7:48:bc:58:c3:88:d8:6a:3d:fc:a4:b1:85:
0f:f8:1e:0f:fc:20:64:c5:bc:63:86:d2:7b:0f:60:01:ee:fd:
65:da:94:aa:dc:48:9f:c1:a1:9a:2e:96:81:96:0d:59:3a:86:
f1:3d:f3:d8:d3:33:cb:2f:c0:71:08:c5:4e:57:7a:7b:0f:b6:
92:4f:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:05 2025 by rpki-client