Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/UaajUBdy4UIZQWAc-WUnNkjyYv4.roa
File: UaajUBdy4UIZQWAc-WUnNkjyYv4.roa (raw, json)
Hash identifier: JCNjXurc6Io2gtx+nJaT/k0gUejH60kmigdqrXZ8+XM=
Subject key identifier: 51:A6:A3:50:17:72:E1:42:19:41:60:1C:F9:65:27:36:48:F2:62:FE
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01982B7E798CC40ADB9CDAEAE8A734477974
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/UaajUBdy4UIZQWAc-WUnNkjyYv4.roa
Signing time: Mon 21 Jul 2025 05:39:25 +0000
ROA not before: Mon 21 Jul 2025 05:39:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.8.0/23 maxlen: 24
77.120.9.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 24
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.100.0/24 maxlen: 24
77.121.101.0/24 maxlen: 24
77.121.112.0/20 maxlen: 21
77.121.127.0/24 maxlen: 24
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:7e:79:8c:c4:0a:db:9c:da:ea:e8:a7:34:47:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jul 21 05:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a6a3501772e1421941601cf965273648f262fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:7f:92:e1:15:8c:c9:82:23:e8:90:0a:13:
08:5c:87:97:df:53:6e:a1:62:bf:8a:0d:c6:be:c4:
d9:88:8a:94:87:13:40:3b:2b:e0:c8:da:a6:c0:df:
b1:3c:74:f6:f7:e7:2f:ea:95:e1:48:c8:b2:97:9d:
a2:c9:60:97:31:03:07:54:19:b3:6b:5c:bc:89:a1:
2f:57:4b:75:dd:8e:be:a1:e4:34:7c:28:1c:5a:2c:
f0:e0:c1:e6:f6:a2:46:a1:d1:0d:c4:21:00:02:62:
47:a9:c4:81:8a:d8:25:50:74:28:dd:2f:d1:3a:7b:
0f:2c:9f:90:91:90:0a:ea:05:12:94:38:10:f3:ff:
5a:e9:56:6e:11:85:8c:52:c5:7f:98:bc:84:fd:ae:
21:65:97:da:fe:d9:74:f8:f3:24:78:37:20:db:da:
7b:04:41:9e:64:6a:0a:e3:2a:51:7c:d0:77:b4:58:
24:89:ce:44:9f:1a:2e:92:0b:d9:a5:b1:df:68:44:
23:31:28:61:2a:d5:11:17:8b:45:53:fd:19:03:07:
00:fe:76:0d:b7:e8:aa:c4:6a:d1:35:ff:9c:28:15:
db:1c:87:73:24:ad:a0:38:c6:59:84:d3:46:f4:b7:
01:62:f1:eb:9e:5e:52:c0:03:80:01:b8:24:54:38:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:A3:50:17:72:E1:42:19:41:60:1C:F9:65:27:36:48:F2:62:FE
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/UaajUBdy4UIZQWAc-WUnNkjyYv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.199.255
77.120.208.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0/19
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
00:02:c8:e4:d0:82:2e:57:d4:da:b2:3c:d4:23:72:78:64:6c:
ee:c1:53:6f:28:eb:33:6a:21:e1:eb:b8:bd:14:49:38:cc:d1:
7f:d2:52:b1:06:d3:c7:9d:bf:24:b8:c0:7d:56:d4:9a:0c:85:
ce:f3:f8:8d:d0:ea:1b:5a:77:80:2a:12:84:04:6a:70:e9:c6:
1d:49:77:99:f9:ab:1a:94:f9:f0:bb:1b:23:55:0a:b2:76:34:
a1:d3:77:b0:37:47:54:23:6e:ac:85:df:38:50:0e:6f:fb:a0:
0b:d1:98:34:88:4f:8d:3d:77:00:9a:bf:4c:0f:bd:9c:bd:6e:
b9:96:9e:ec:27:51:52:ad:8e:e1:9e:38:56:3b:f2:67:d2:ef:
5c:9b:9b:9a:86:ec:c1:41:fd:41:06:44:f3:9b:75:09:08:c7:
fc:5e:89:ac:24:fa:9f:89:60:b9:bc:ad:cb:fe:a3:11:c0:2b:
d6:f6:75:7a:8d:41:80:6a:74:d9:fe:45:0a:c5:db:86:b2:25:
16:68:a7:e3:b5:08:5f:2b:aa:1d:1d:7a:f2:90:ed:ca:d6:6c:
7f:8b:b4:8e:f6:c9:c9:fa:12:4d:8d:e4:6f:47:ca:8b:a1:e7:
51:36:e5:c0:c5:2e:1c:a4:85:8a:30:cf:7d:cb:04:1c:90:b2:
4f:a9:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:59 2025 by rpki-client