Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa
File: lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa (raw, json)
Hash identifier: s4PZbf+hjf3iDmNtbUCQUPc0IiLibPsLSs4quWHg7C4=
Subject key identifier: 96:F5:C9:C9:0C:B7:9D:62:93:7F:3B:BC:A0:50:40:59:36:0C:B6:EA
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 0197D6E7C3B944B098533B38E02ACD8674CA
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa
Signing time: Fri 04 Jul 2025 19:26:42 +0000
ROA not before: Fri 04 Jul 2025 19:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213212
IP address blocks: 77.81.183.0/24 maxlen: 24
77.81.186.0/23 maxlen: 23
185.76.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:e7:c3:b9:44:b0:98:53:3b:38:e0:2a:cd:86:74:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Jul 4 19:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f5c9c90cb79d62937f3bbca0504059360cb6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:80:dd:33:38:4c:7d:7b:cb:0b:0d:a1:3c:
bd:22:aa:d9:47:39:3c:6e:a8:87:98:8d:72:aa:ac:
51:64:c5:93:2e:56:dd:c8:22:3c:4b:93:ea:f9:60:
a9:23:e7:5b:37:3a:67:29:5c:5a:9c:6d:d5:b3:9a:
70:43:73:e1:3c:2a:e7:1c:41:91:c0:0a:5d:13:80:
57:76:9e:2e:90:b6:d7:26:4f:a1:b6:2a:4d:9d:fe:
d3:f5:7c:cf:29:8d:df:a8:c6:1e:65:fc:e2:72:8c:
b2:8b:8c:64:d4:1e:84:39:bf:29:39:99:e7:0a:a9:
d0:d7:b6:bc:09:a1:b0:7d:58:9c:67:8a:fc:32:ca:
5c:a4:77:10:68:fa:30:6d:0b:c5:30:7a:90:3c:68:
1c:eb:8a:78:ae:3c:fd:4b:b2:39:93:4d:4e:2d:8f:
0e:26:59:0a:a6:87:44:26:7d:23:ee:23:43:0e:09:
6f:e0:aa:db:5b:f1:2f:6c:28:69:ac:44:11:b0:75:
89:d8:d3:f6:41:6f:c8:a4:52:47:59:a7:54:73:f4:
4a:e4:3f:82:65:58:50:3d:4f:50:9d:2f:7c:f2:95:
92:76:79:1c:6b:92:8c:18:4e:b8:13:b7:67:33:32:
bf:7c:af:26:df:1c:11:e0:e7:48:10:8d:55:51:4e:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:C9:C9:0C:B7:9D:62:93:7F:3B:BC:A0:50:40:59:36:0C:B6:EA
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.183.0/24
77.81.186.0/23
185.76.159.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5d:aa:bd:ef:ac:b8:79:eb:29:fa:3e:37:03:c9:6f:12:a7:
ee:9f:18:99:4b:0d:64:de:39:d9:96:73:17:f0:f3:e8:1b:d3:
b8:e3:a8:50:4a:3a:10:0a:3e:49:c0:2e:28:bb:cb:36:38:01:
3c:e6:3b:73:79:e8:30:78:10:79:c5:f8:d5:12:f0:b0:02:4d:
49:11:6c:dd:10:7b:b5:af:bf:27:d3:de:01:de:b0:40:9c:ff:
52:9b:14:29:32:39:ec:9b:f3:17:f7:06:55:c7:ca:47:0b:80:
65:94:f6:df:e4:78:08:7f:1e:fd:15:21:21:58:de:a2:6b:f0:
c5:31:14:39:1d:3e:ff:77:ce:95:55:94:69:5a:f5:fa:5b:8a:
9a:c7:6d:a8:99:a5:82:ef:cd:6d:96:17:6e:27:43:ae:74:73:
02:32:c6:91:44:00:7e:0c:21:23:61:d3:f3:b8:15:2e:49:3f:
da:21:4c:1f:6e:b9:f0:c6:b9:d1:06:46:c6:38:ae:bd:39:d9:
9b:c5:44:15:b1:dd:7c:01:22:7f:8d:cb:d4:fa:a1:72:4f:91:
32:71:5a:8b:2f:80:41:93:2e:e7:50:a0:cd:9f:91:ed:69:82:
a4:0a:47:38:99:36:cc:b9:55:10:b7:a9:4d:a6:d5:51:47:5e:
0f:fa:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:25 2025 by rpki-client