Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/0ArCn88ad7Gi60vnalz09vRQW5c.roa
File: 0ArCn88ad7Gi60vnalz09vRQW5c.roa (raw, json)
Hash identifier: 6iRAcdRwqjGbTdLIZY0yjb5Mc3gGZy84vwvdwQHNY88=
Subject key identifier: D0:0A:C2:9F:CF:1A:77:B1:A2:EB:4B:E7:6A:5C:F4:F6:F4:50:5B:97
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01988F9AD1FBA56F731D30779D702215E72F
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/0ArCn88ad7Gi60vnalz09vRQW5c.roa
Signing time: Sat 09 Aug 2025 16:12:24 +0000
ROA not before: Sat 09 Aug 2025 16:12:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 77.111.68.0/22 maxlen: 22
77.111.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:9a:d1:fb:a5:6f:73:1d:30:77:9d:70:22:15:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Aug 9 16:12:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d00ac29fcf1a77b1a2eb4be76a5cf4f6f4505b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:13:cf:83:94:33:e7:59:f7:65:ac:c2:05:
95:91:9b:84:f0:77:1f:1d:a3:13:c1:eb:1a:1a:c0:
1d:79:c1:f9:e6:22:d0:3b:a1:45:58:03:e0:c4:e7:
fa:3c:6f:f8:54:5b:0a:bf:bf:83:87:42:5a:63:3a:
8c:09:9a:99:9d:5e:02:52:95:16:70:cd:74:c8:b6:
82:fb:15:e5:c1:11:36:f3:6e:86:78:85:2c:da:d6:
69:1a:cf:0e:34:89:82:c5:1b:9a:4f:5c:ff:28:a2:
1a:86:15:5a:4f:58:16:8d:0c:42:35:25:31:a8:ef:
b5:64:2e:2c:c0:f0:01:59:b9:de:f0:ce:29:b5:f2:
79:19:52:e6:91:0f:3a:dc:3e:ba:e2:7d:b2:e0:49:
20:c0:58:8f:c3:9c:54:67:4d:65:1f:ea:9d:85:12:
ed:56:a9:56:24:07:23:89:6c:54:f3:08:40:c1:d4:
1f:bb:ca:5f:f1:63:83:f9:9e:73:40:55:38:01:67:
d9:cc:bc:ab:31:3e:56:80:13:00:7a:74:17:ce:85:
6f:d1:a5:5d:9c:5b:9a:a4:71:6c:d1:09:65:5b:0e:
eb:91:55:f2:55:51:f5:9f:6c:92:82:48:51:bb:3e:
f7:a2:8a:a2:49:f1:ea:24:84:cc:29:cb:6f:e5:70:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0A:C2:9F:CF:1A:77:B1:A2:EB:4B:E7:6A:5C:F4:F6:F4:50:5B:97
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/0ArCn88ad7Gi60vnalz09vRQW5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.68.0-77.111.79.255
Signature Algorithm: sha256WithRSAEncryption
dd:ee:a2:dc:c7:22:07:1c:ae:32:38:5d:d2:15:a7:40:f2:ec:
6f:79:a9:7d:dd:b0:70:be:54:ce:61:1f:6c:c0:52:b2:43:83:
f5:f8:07:da:9e:dd:7b:7b:f1:52:da:3b:ec:64:7d:2c:7c:5b:
82:37:f8:80:89:fa:38:79:8c:41:f3:e3:a8:cf:62:57:eb:c3:
7a:34:f5:b0:4f:d5:53:8f:b8:bf:d1:d4:37:0f:6d:79:ee:35:
b3:24:9d:12:8b:68:e6:2c:4e:28:3c:e1:e9:fb:8a:ce:af:9a:
44:03:30:3b:35:aa:a8:6e:8d:d9:64:9c:20:00:a0:43:11:93:
69:c8:d2:d3:86:87:60:88:a1:b8:6d:88:06:90:2f:09:e4:bc:
10:5d:1d:38:47:e4:a1:a4:2e:73:93:59:28:ae:c9:5f:e2:5e:
f5:07:d8:c7:b3:4c:fa:0c:ca:24:4e:a7:0a:4a:1c:67:9c:28:
9b:fa:a6:37:a9:3a:73:48:ed:55:db:2e:e3:19:9e:10:31:5d:
c2:cc:c0:53:dc:8a:9b:82:67:bc:e8:41:4c:9b:a0:46:21:f5:
03:8e:c8:46:d8:55:5d:f8:02:59:49:6e:0b:a8:42:6f:1b:83:
7b:91:1e:fb:4c:5d:8b:d3:bf:58:31:4c:6c:41:cd:f9:48:51:
c7:52:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:47:02 2025 by rpki-client