Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fao7WExLDEpu1LFawbL2WzsdL2k.roa
File: fao7WExLDEpu1LFawbL2WzsdL2k.roa (raw, json)
Hash identifier: QSrLTR5vhkaq01veEqwW6gmy0aK0hTgLxDW0CjtAN54=
Subject key identifier: 7D:AA:3B:58:4C:4B:0C:4A:6E:D4:B1:5A:C1:B2:F6:5B:3B:1D:2F:69
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01992EA7F3EA7C52F7386D43AFDE6A9CBD6E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fao7WExLDEpu1LFawbL2WzsdL2k.roa
Signing time: Tue 09 Sep 2025 13:26:22 +0000
ROA not before: Tue 09 Sep 2025 13:26:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 77.47.142.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:a7:f3:ea:7c:52:f7:38:6d:43:af:de:6a:9c:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 9 13:26:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7daa3b584c4b0c4a6ed4b15ac1b2f65b3b1d2f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:ea:0d:10:82:ec:89:b1:70:64:6b:6d:92:
ad:28:cd:6c:ab:f5:00:fc:92:aa:74:f0:16:24:6a:
d7:96:18:5c:a1:99:be:93:99:e8:48:89:89:af:21:
d5:55:f2:2c:43:29:34:8d:2d:13:5f:fd:a3:06:30:
6e:e2:0e:3f:9e:6c:e1:51:88:9d:71:20:d1:44:6f:
68:93:e3:7c:b4:16:98:5a:45:d1:1d:15:f6:a5:e3:
37:06:9f:90:38:da:80:67:a2:07:e6:c6:d0:a9:bb:
6e:77:41:e5:a0:5f:a0:a4:6f:a2:50:91:da:5d:e7:
df:6b:12:d9:55:a9:33:79:4d:29:54:a0:70:aa:a5:
f7:57:fb:1f:6b:8b:a7:67:59:cb:d0:ae:45:ef:cd:
49:ee:2e:96:1f:db:6a:61:e9:ef:dc:d6:26:a9:16:
06:0a:0c:21:4b:04:75:15:78:65:70:61:eb:bf:9e:
e7:f7:21:3c:ca:d2:e1:bc:f6:90:35:ea:da:e4:c1:
27:7c:1d:2a:f8:12:23:25:d8:4e:04:bd:6b:8e:cf:
a3:06:48:ff:a4:8a:51:e8:72:43:b3:90:53:fd:68:
b4:09:0b:06:1e:d7:10:ce:e1:77:c9:5f:86:3f:b4:
42:b9:53:d2:59:90:84:2c:a6:fd:89:90:57:91:68:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:3B:58:4C:4B:0C:4A:6E:D4:B1:5A:C1:B2:F6:5B:3B:1D:2F:69
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fao7WExLDEpu1LFawbL2WzsdL2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
195.178.136.0/24
195.178.148.0/23
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
Signature Algorithm: sha256WithRSAEncryption
49:45:ff:b5:d1:c9:f6:d8:10:10:27:50:a4:6f:f5:3e:29:06:
81:d9:13:d0:30:8b:dc:f3:83:54:25:5a:b8:6c:ce:56:8d:b6:
c3:a8:70:7d:1f:74:ba:4d:03:fa:59:60:33:fd:c3:53:69:32:
a4:ed:dc:44:34:1f:77:d7:7b:f9:ed:ef:52:0a:fc:d9:26:cb:
1a:bd:c6:46:fb:26:24:6c:2a:6e:db:c8:d2:20:7e:83:f6:5a:
42:e6:dc:ea:e2:ac:ae:35:6e:f3:2f:0b:27:5b:87:80:9e:ae:
33:86:a3:e1:3b:e2:d5:3a:55:7e:bf:78:20:bd:68:02:d0:a3:
67:62:b2:78:2d:65:a8:df:17:b9:7d:9c:f9:e0:33:b9:9e:e9:
15:be:7d:0b:0b:d3:ad:ca:73:6d:07:58:50:a1:c6:4c:b6:f3:
68:63:16:07:ba:60:7e:e0:34:73:0c:2d:04:50:65:60:90:71:
73:70:9d:8f:8e:c2:0d:29:31:83:eb:e5:ac:5c:7a:27:cf:ad:
a7:88:2a:b0:0e:b2:c1:56:30:cc:bd:2b:b3:d2:2b:87:a5:1b:
e5:1f:89:41:f9:43:91:74:9b:b2:06:16:fe:73:e9:5f:c2:08:
ef:3d:ed:22:a4:ff:47:8a:06:5e:2a:0c:b2:dc:7a:fa:ca:ca:
ff:f2:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:03:41 2025 by rpki-client