Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/e0DnWMnFmTru3C2aoS2JyaRDfus.roa
File: e0DnWMnFmTru3C2aoS2JyaRDfus.roa (raw, json)
Hash identifier: fqlHTmNWiwqv1CPk291HDWeErulj/q6A/K6RapftY6s=
Subject key identifier: 7B:40:E7:58:C9:C5:99:3A:EE:DC:2D:9A:A1:2D:89:C9:A4:43:7E:EB
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0197F08615F1674C745D998171397EC19986
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/e0DnWMnFmTru3C2aoS2JyaRDfus.roa
Signing time: Wed 09 Jul 2025 18:50:08 +0000
ROA not before: Wed 09 Jul 2025 18:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.47.156.0/22 maxlen: 24
77.47.243.0/24 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:86:15:f1:67:4c:74:5d:99:81:71:39:7e:c1:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 9 18:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b40e758c9c5993aeedc2d9aa12d89c9a4437eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:0b:20:75:62:b9:cc:85:4b:bb:8e:0d:62:
33:df:cb:e8:9e:e7:05:ad:06:e4:e8:1c:b6:48:34:
c2:4d:5b:7f:0b:35:3d:86:91:57:23:c3:f5:4a:78:
88:d9:ba:f0:1d:3e:87:6a:3c:81:23:d3:28:a4:e2:
79:18:2a:ff:60:6b:17:80:b3:29:9d:ce:f5:cc:eb:
81:eb:4f:d9:31:24:9c:ae:f2:a0:31:31:ae:c0:15:
7c:1b:7f:33:00:88:03:54:f8:17:f7:d9:7a:50:4d:
e0:aa:48:5d:db:48:2b:c2:be:5d:8f:6e:7f:68:0d:
16:c9:ce:9f:47:fa:f7:7d:54:e2:99:a3:a8:4c:48:
74:70:e9:b6:aa:5e:c9:1d:1e:a3:3e:cd:62:d6:31:
2a:56:e9:df:c8:fb:4a:89:7a:1d:d2:ce:ac:9b:c0:
08:64:2b:05:0f:e1:31:be:47:6a:1c:a3:2e:a2:c8:
2e:dd:06:0e:c1:63:a8:e0:75:50:e3:5a:b2:85:db:
85:58:eb:99:fe:1a:60:7a:b1:12:5c:7b:80:e3:c1:
03:96:b2:f9:8c:ec:51:30:b6:01:a1:9d:1d:b3:29:
10:ac:3f:36:27:75:33:05:94:ec:1c:dc:5a:1d:82:
0a:92:62:dd:84:08:71:f8:81:52:69:82:43:3b:fb:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:40:E7:58:C9:C5:99:3A:EE:DC:2D:9A:A1:2D:89:C9:A4:43:7E:EB
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/e0DnWMnFmTru3C2aoS2JyaRDfus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.243.0/24
195.178.140.0/23
195.178.146.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:2d:bc:a9:ad:af:9d:64:68:9e:30:96:77:2b:17:d7:68:dc:
00:5e:36:01:fe:cb:1c:17:ce:6d:c0:64:f8:aa:a9:cc:73:ee:
c7:60:32:6e:99:18:aa:8a:97:55:a6:eb:f1:e3:5f:aa:3a:e8:
4c:77:b8:17:3c:82:9d:db:35:0b:5f:99:f4:4e:e2:cb:9b:64:
5d:77:e9:38:cd:5f:67:b1:61:d1:a2:af:95:cf:c7:19:11:1e:
08:e3:50:60:82:a6:03:99:95:73:b8:40:c0:db:8b:76:20:25:
35:2f:1f:d4:4d:c6:32:a7:77:0f:c6:e3:7d:f6:62:ab:61:50:
53:7a:61:cb:ee:fe:2e:f6:ad:99:a6:c2:1b:6b:d7:2b:86:4a:
34:2e:65:eb:d4:cd:b1:4d:41:d4:cf:30:d6:98:5a:df:a0:57:
14:8a:0a:d1:c9:17:18:77:5d:99:48:64:1f:79:26:13:2e:c0:
b3:84:e5:a3:1a:b6:7a:85:c2:6b:99:0d:d8:1f:c8:87:94:4a:
a8:40:b1:d8:da:16:a1:71:5c:e2:bc:a6:81:db:e8:bd:ca:84:
4e:07:91:85:79:86:23:f4:c8:33:f9:37:da:0d:d8:fa:e9:31:
c5:0b:0c:20:e1:79:a7:2b:1c:3b:4a:6b:f4:ba:b8:66:75:e1:
7b:85:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:50 2025 by rpki-client