Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/9N_ApyIrHnOJ1sAuU5vrDFUkehY.roa
File: 9N_ApyIrHnOJ1sAuU5vrDFUkehY.roa (raw, json)
Hash identifier: 7PsPqLU9l7HSHfDbzxlgdJJnRAxwqv4NAwmeNc6LN48=
Subject key identifier: F4:DF:C0:A7:22:2B:1E:73:89:D6:C0:2E:53:9B:EB:0C:55:24:7A:16
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01980A7DBAEB2369FC8122E1BC1BAD7DE94C
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/9N_ApyIrHnOJ1sAuU5vrDFUkehY.roa
Signing time: Mon 14 Jul 2025 19:51:08 +0000
ROA not before: Mon 14 Jul 2025 19:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 77.91.100.0/24 maxlen: 24
77.91.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:7d:ba:eb:23:69:fc:81:22:e1:bc:1b:ad:7d:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jul 14 19:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4dfc0a7222b1e7389d6c02e539beb0c55247a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:a6:3f:dc:ee:d1:38:b3:21:a0:7b:de:35:
f4:be:bc:82:bf:94:1d:88:12:64:65:6d:e9:59:a9:
3f:8a:c0:8e:d2:2a:c4:25:b1:31:5a:cb:02:5a:a8:
ff:1f:f5:fa:7f:fe:35:94:06:b9:a8:4f:b8:c4:46:
4c:d0:13:42:8f:a0:c1:f0:52:23:63:3b:db:58:ab:
0c:15:64:94:42:3b:c4:2a:38:9a:e1:cd:d7:a9:e2:
09:db:38:35:35:d7:9f:51:f7:b7:04:07:ca:a6:22:
2e:1e:03:ad:e4:32:e5:bd:07:c3:e8:79:a7:12:b0:
e1:4d:07:77:c6:e8:e9:c1:f8:bd:f2:79:53:8a:81:
9e:2b:ae:ff:d3:b5:dc:61:81:7c:fd:8f:76:83:4d:
f4:62:77:4d:e8:ab:55:76:91:1e:4d:76:58:2d:87:
c6:fa:6f:18:03:52:31:19:bf:fc:87:4c:b7:6f:28:
bc:b3:fd:7b:28:9d:99:fd:96:99:60:55:8b:ff:f8:
04:78:22:23:5e:04:3b:82:01:db:6f:10:cf:23:c2:
d0:6b:1e:60:18:fa:31:f2:68:e0:d2:62:ac:34:5e:
24:33:3e:cc:20:bb:07:d7:52:61:e0:29:04:ba:cb:
d2:ee:6d:43:96:65:e7:15:ff:7e:68:c8:e3:99:47:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:C0:A7:22:2B:1E:73:89:D6:C0:2E:53:9B:EB:0C:55:24:7A:16
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/9N_ApyIrHnOJ1sAuU5vrDFUkehY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.100.0/24
77.91.102.0/24
Signature Algorithm: sha256WithRSAEncryption
92:05:8a:23:67:26:c0:84:56:73:17:33:9e:d6:22:d3:0d:e0:
14:3e:ad:11:28:ea:af:5f:8b:48:86:eb:69:f8:7b:30:cb:da:
7d:e4:95:7b:f4:13:45:1b:0e:af:26:a1:9f:d0:cd:b1:41:7a:
47:d5:2b:80:e7:8d:6e:2d:27:04:30:13:af:7b:a9:ae:70:d0:
10:20:55:a2:5b:a9:bf:f8:64:aa:c9:cd:b8:2c:5e:33:92:e1:
2a:7f:d5:b6:18:ba:7a:d4:7e:8b:07:e2:4f:54:25:32:8a:c0:
6f:4d:29:8f:f4:5d:bb:ee:a9:69:90:96:32:ae:94:1d:07:01:
82:2f:bf:4e:d9:9c:7a:ec:ad:ba:63:32:1c:21:e9:8f:3d:03:
0b:62:cc:e7:2a:e9:63:0b:06:cb:39:8b:50:33:75:45:e1:a0:
66:2b:71:0e:0b:ed:1d:aa:e0:52:b2:1f:2d:01:2c:bb:54:54:
25:f6:2b:58:d0:c8:2b:cd:39:3c:d1:ad:54:c2:65:e4:1a:d7:
e3:5b:db:5f:61:c3:0c:20:41:f6:2a:48:53:d7:c1:5a:7b:eb:
76:53:14:4f:95:9f:40:66:2b:e3:6d:57:cf:6c:c3:fd:2f:da:
e3:d8:9b:e0:a5:98:8e:ff:69:4e:19:59:ea:51:74:1e:12:99:
6e:35:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:18:04 2025 by rpki-client