Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/zJpW5AryOfpuFShU6Wx7sRKJLe0.roa
File: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (raw, json)
Hash identifier: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=
Subject key identifier: CC:9A:56:E4:0A:F2:39:FA:6E:15:28:54:E9:6C:7B:B1:12:89:2D:ED
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 0198438018C5AD7CDFB2EEEB95BD8B88AD52
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/zJpW5AryOfpuFShU6Wx7sRKJLe0.roa
Signing time: Fri 25 Jul 2025 21:32:05 +0000
ROA not before: Fri 25 Jul 2025 21:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2111
IP address blocks: 77.71.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:80:18:c5:ad:7c:df:b2:ee:eb:95:bd:8b:88:ad:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Jul 25 21:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc9a56e40af239fa6e152854e96c7bb112892ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:c6:95:d6:6f:e2:95:e7:70:cc:11:6d:91:
1d:ca:78:2a:ef:91:3c:07:eb:ea:34:96:41:47:6a:
11:05:f2:dd:3e:fd:61:fe:3c:b6:cc:32:b7:7f:4b:
ec:35:90:95:e5:c7:42:c2:ad:b0:53:b4:68:3d:16:
3b:9b:20:f7:e7:06:01:d9:f2:a8:f1:bf:d6:4b:a4:
56:33:14:a8:fc:22:d5:9c:44:86:98:a1:e4:f8:de:
50:e4:09:1a:5b:83:35:42:94:8b:15:46:97:41:11:
1e:bc:8d:2d:90:70:91:d9:ab:d0:1d:43:36:11:a2:
46:7c:19:8a:3b:9d:1b:50:03:15:14:ad:ce:04:2f:
a9:8d:77:ad:6d:c3:3c:d0:7b:bb:a1:60:7d:54:b4:
d9:dd:6f:c3:0b:2d:df:ed:7b:ef:1b:3a:5f:40:9c:
b3:05:f7:0e:0e:09:1b:95:87:74:6f:df:8e:0b:b7:
5a:c5:70:bc:54:4c:6d:51:ef:66:a2:0c:43:6e:89:
50:64:69:55:d9:98:5b:c7:48:9b:e6:c7:0e:bb:1d:
93:bf:ec:db:90:ca:78:9e:07:44:fd:83:2a:a2:de:
1d:07:3a:59:a9:f4:f9:31:85:41:ab:c6:a9:27:70:
ad:71:ae:1f:f0:48:71:8a:dd:f3:57:35:f2:27:8b:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:56:E4:0A:F2:39:FA:6E:15:28:54:E9:6C:7B:B1:12:89:2D:ED
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/zJpW5AryOfpuFShU6Wx7sRKJLe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:fe:1b:34:47:97:f5:d2:bf:14:ba:ca:79:46:f7:b9:7f:
26:a4:7e:9b:4c:ca:0f:95:e1:f1:32:3f:c5:9e:a9:8f:d1:e3:
66:7c:9a:50:11:8f:7c:b2:b6:a8:13:2c:6b:79:bd:ba:56:4a:
3a:d5:ee:48:93:e6:af:3a:a0:81:55:5d:81:24:d2:ab:0d:ba:
a5:81:c9:b7:8e:7f:da:10:db:96:17:c4:e2:08:c2:6f:bc:a5:
f7:59:44:18:34:85:24:73:61:96:9c:1b:b4:c6:88:8b:44:8e:
8b:7c:00:2e:cc:1e:da:7b:63:5a:33:14:0b:05:0e:3d:07:84:
33:0f:e2:ec:4c:af:e5:ed:06:9b:05:5d:d2:74:57:b0:e7:70:
4a:b4:07:1b:d6:ff:3d:b9:e7:56:17:57:7e:9e:64:b6:b3:5d:
47:5e:e6:f6:df:21:59:85:2c:f3:9c:40:60:69:65:fc:5e:4e:
55:3e:eb:6d:c0:16:ac:67:a5:4b:f1:f7:53:4b:7d:86:e2:26:
69:65:c5:32:71:67:b3:6b:89:b8:ba:06:b0:5e:a9:7d:ab:e3:
0b:e9:30:55:34:21:32:41:9b:60:43:a2:da:5b:ba:5c:ca:81:
82:2f:59:c2:3d:75:4d:12:d2:6c:6b:0e:65:26:fd:7e:b4:6d:
59:05:73:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhDgBjFrXzfsu7rlb2LiK1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZGVjOWEyMDk2ZGVjMTAzYmFlMmQ3YzM3OTZlMGQ0NzA4
NWMyMDIwHhcNMjUwNzI1MjEzMjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzlhNTZlNDBhZjIzOWZhNmUxNTI4NTRlOTZjN2JiMTEyODkyZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd/GldZv4pXncMwRbZEdyngq75E8
B+vqNJZBR2oRBfLdPv1h/jy2zDK3f0vsNZCV5cdCwq2wU7RoPRY7myD35wYB2fKo
8b/WS6RWMxSo/CLVnESGmKHk+N5Q5AkaW4M1QpSLFUaXQREevI0tkHCR2avQHUM2
EaJGfBmKO50bUAMVFK3OBC+pjXetbcM80Hu7oWB9VLTZ3W/DCy3f7XvvGzpfQJyz
BfcODgkblYd0b9+OC7daxXC8VExtUe9mogxDbolQZGlV2Zhbx0ib5scOux2Tv+zb
kMp4ngdE/YMqot4dBzpZqfT5MYVBq8apJ3Ctca4f8Ehxit3zVzXyJ4uSvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyaVuQK8jn6bhUoVOlse7ESiS3tMB8GA1UdIwQY
MBaAFC7eyaIJbewQO64tfDeW4NRwhcICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEt
MDU3ZDdhZjBhZWY0LzEvekpwVzVBcnlPZnB1RlNoVTZXeDdzUktKTGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEtMDU3ZDdhZjBhZWY0
LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUdgMA0G
CSqGSIb3DQEBCwUAA4IBAQBtNf4bNEeX9dK/FLrKeUb3uX8mpH6bTMoPleHxMj/F
nqmP0eNmfJpQEY98sraoEyxreb26Vko61e5Ik+avOqCBVV2BJNKrDbqlgcm3jn/a
ENuWF8TiCMJvvKX3WUQYNIUkc2GWnBu0xoiLRI6LfAAuzB7ae2NaMxQLBQ49B4Qz
D+LsTK/l7QabBV3SdFew53BKtAcb1v89uedWF1d+nmS2s11HXub23yFZhSzznEBg
aWX8Xk5VPuttwBasZ6VL8fdTS32G4iZpZcUycWeza4m4ugawXql9q+ML6TBVNCEy
QZtgQ6LaW7pcyoGCL1nCPXVNEtJsaw5lJv1+tG1ZBXP+
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:04 2025 by rpki-client