Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/aKFi1aME1l1V_WYgzTGI4swO8z4.roa
File: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (raw, json)
Hash identifier: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=
Subject key identifier: 68:A1:62:D5:A3:04:D6:5D:55:FD:66:20:CD:31:88:E2:CC:0E:F3:3E
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 01981DF44B99BAECA9A200997FCD78D08847
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/aKFi1aME1l1V_WYgzTGI4swO8z4.roa
Signing time: Fri 18 Jul 2025 14:33:25 +0000
ROA not before: Fri 18 Jul 2025 14:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197889
IP address blocks: 77.221.32.0/20 maxlen: 20
77.221.32.0/22 maxlen: 22
77.221.32.0/23 maxlen: 23
77.221.32.0/24 maxlen: 24
77.221.33.0/24 maxlen: 24
77.221.34.0/23 maxlen: 23
77.221.34.0/24 maxlen: 24
77.221.35.0/24 maxlen: 24
77.221.43.0/24 maxlen: 24
77.221.44.0/23 maxlen: 23
77.221.46.0/23 maxlen: 23
77.221.49.0/24 maxlen: 24
77.221.52.0/23 maxlen: 23
77.221.54.0/23 maxlen: 24
77.221.56.0/23 maxlen: 23
77.221.58.0/23 maxlen: 23
77.221.62.0/24 maxlen: 24
2a10:4940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:f4:4b:99:ba:ec:a9:a2:00:99:7f:cd:78:d0:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jul 18 14:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a162d5a304d65d55fd6620cd3188e2cc0ef33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:b8:70:48:1b:cf:8b:f4:56:5f:3c:a1:e7:
e8:94:07:16:90:da:7d:15:3b:3b:c5:88:c3:b5:3c:
ae:f3:b7:84:10:e6:b4:a6:21:18:d3:75:9c:0a:39:
42:72:6d:83:15:eb:7c:2b:a1:01:41:75:ef:e4:56:
35:20:d3:07:be:4f:b8:e2:44:05:3d:ea:8c:c9:f3:
c2:41:cd:ba:54:c0:72:21:e3:a2:ba:de:d3:20:fd:
c6:d8:50:e8:97:55:60:9a:a1:fa:89:7b:02:fb:8c:
07:39:42:09:f9:59:49:24:b0:da:07:ae:06:c5:78:
79:0a:0a:88:0d:a3:72:e3:00:3d:e0:8c:cd:45:86:
d7:9a:ff:4a:24:f1:d3:de:1a:50:2b:28:3c:e9:34:
f4:d9:d8:75:55:87:0e:98:a0:74:62:1b:ad:47:80:
0c:48:46:5c:05:1f:c4:24:10:9b:e4:1e:60:92:97:
ec:69:57:48:ba:ea:56:bf:9b:f5:72:9c:c5:41:84:
61:69:98:06:a3:c3:21:a3:94:02:f6:42:57:d5:f8:
df:e4:db:ef:e3:fe:cc:00:e5:53:fe:7e:b8:86:23:
1f:93:a8:04:10:4d:ca:62:37:ab:0b:40:28:cb:73:
b2:ce:50:a6:b7:5a:11:f8:74:50:fc:ed:d7:98:61:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:62:D5:A3:04:D6:5D:55:FD:66:20:CD:31:88:E2:CC:0E:F3:3E
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/aKFi1aME1l1V_WYgzTGI4swO8z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.32.0/20
77.221.49.0/24
77.221.52.0-77.221.59.255
77.221.62.0/24
IPv6:
2a10:4940::/32
Signature Algorithm: sha256WithRSAEncryption
00:41:b5:33:76:7a:91:f0:4f:fe:52:e4:55:ea:31:28:fa:58:
3c:8a:29:2b:47:4c:a6:8f:85:87:b0:35:8a:f8:10:9b:ce:75:
b1:81:ad:42:68:74:7a:a1:2e:e3:7a:ce:3e:eb:1f:6e:8e:b1:
32:4e:57:fb:8d:d3:76:c8:d3:01:d4:89:af:09:ef:58:4b:b0:
d2:30:7e:b5:55:4e:23:17:62:52:36:a2:83:c5:1b:44:7f:5e:
52:36:a4:44:08:35:97:4a:c8:65:d0:21:2e:dc:7c:c4:da:2b:
25:48:f8:90:63:80:50:3f:90:6b:40:3c:b8:db:68:c7:70:67:
eb:b3:fd:2f:8f:5d:45:b1:85:20:d2:43:91:7d:77:72:a7:93:
fa:e5:fe:a9:63:bd:7d:e2:9f:ba:f9:9e:ec:a1:89:6b:2f:d4:
3f:47:d3:56:7e:b8:8d:e1:43:ab:70:0c:da:bf:aa:c2:a8:ac:
1c:ef:38:7d:ed:04:f5:4d:db:e2:af:91:a7:ff:30:25:8c:e7:
9e:c2:fc:e4:a7:84:30:cb:15:79:33:e4:0c:24:c0:61:40:30:
39:04:89:92:3f:25:d0:a2:db:4b:a4:c2:3d:f9:10:38:93:62:
58:0e:22:73:c0:9f:62:4d:39:c9:c8:82:71:9c:f0:44:34:91:
3b:e2:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:37 2025 by rpki-client