Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/65uCTGHnj2d-ZMz37cNEU4MDVwU.roa
File: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (raw, json)
Hash identifier: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=
Subject key identifier: EB:9B:82:4C:61:E7:8F:67:7E:64:CC:F7:ED:C3:44:53:83:03:57:05
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0199110C51DB21823B62F5E736211DFC4BC2
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/65uCTGHnj2d-ZMz37cNEU4MDVwU.roa
Signing time: Wed 03 Sep 2025 19:27:23 +0000
ROA not before: Wed 03 Sep 2025 19:27:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 77.110.64.0/22 maxlen: 22
77.110.64.0/24 maxlen: 24
77.110.65.0/24 maxlen: 24
77.110.68.0/22 maxlen: 22
77.110.68.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.70.0/24 maxlen: 24
77.110.72.0/22 maxlen: 22
77.110.72.0/24 maxlen: 24
77.110.73.0/24 maxlen: 24
77.110.76.0/22 maxlen: 22
77.110.77.0/24 maxlen: 24
77.110.80.0/22 maxlen: 22
77.110.84.0/22 maxlen: 22
77.110.88.0/22 maxlen: 22
77.110.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 11:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:11:0c:51:db:21:82:3b:62:f5:e7:36:21:1d:fc:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Sep 3 19:27:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb9b824c61e78f677e64ccf7edc3445383035705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:3a:de:c6:cd:be:0f:9e:fc:6b:21:61:51:
cf:33:b5:c5:0f:de:a4:05:52:67:f1:fa:65:da:7f:
57:02:bc:ce:ca:04:e7:d6:1d:bc:44:4c:93:27:10:
83:37:85:c0:4c:7f:15:9c:11:79:3f:31:b5:01:88:
e0:9e:6a:e4:6f:28:1c:c7:4e:9c:ef:6c:de:ff:ab:
a3:e6:0c:05:11:47:76:18:6b:bf:85:de:fb:0a:45:
1c:fc:cc:39:02:52:fe:e6:2a:83:5f:19:5e:bc:95:
4a:e0:07:3c:39:3c:34:24:38:0f:de:5d:37:f2:03:
21:b4:3d:6c:bd:09:3e:70:c4:8f:bd:d5:4c:2c:7a:
d1:3b:c1:6f:a4:82:86:77:00:f5:17:25:75:ef:70:
66:ea:26:34:18:08:32:fb:1e:a1:3c:ba:0a:37:6e:
48:04:f3:8b:56:ee:2e:d4:b8:52:70:83:3d:64:57:
48:da:2b:10:0f:3d:c8:f7:68:fe:c2:08:dc:30:21:
3f:f6:b7:0c:b9:45:82:79:dc:e1:9d:96:e5:d7:3a:
c6:f2:a1:b6:fa:8b:51:62:b9:b6:39:ec:21:f5:11:
9d:2c:64:c8:6b:e3:98:c6:d9:ff:37:2e:35:be:77:
33:c4:80:8f:cf:c4:14:dd:a6:07:88:52:d5:eb:81:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:82:4C:61:E7:8F:67:7E:64:CC:F7:ED:C3:44:53:83:03:57:05
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/65uCTGHnj2d-ZMz37cNEU4MDVwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.64.0/19
Signature Algorithm: sha256WithRSAEncryption
76:f4:71:90:10:ba:d9:e3:aa:27:a2:b2:5a:20:45:48:13:7a:
be:50:a0:82:b1:b4:d4:a7:7c:f0:db:31:45:53:78:57:27:ca:
96:81:b1:74:42:14:01:ed:c1:a0:1e:7e:66:62:07:72:42:4c:
93:8c:5a:06:18:01:3c:90:31:48:e9:a0:01:84:c4:ae:02:03:
fe:8e:0d:d1:35:23:ca:a8:04:31:22:94:45:c0:57:8e:c5:3b:
07:39:04:05:4f:51:11:ed:e1:dd:12:a4:a2:8a:31:d9:7f:ec:
81:24:02:f9:9b:6e:e9:68:49:d0:8d:94:ca:22:4c:ea:d6:4b:
4f:69:67:d8:cc:f0:ca:24:f0:bb:a0:15:95:8a:a0:ea:0f:2c:
39:57:67:fc:4b:e2:05:a8:40:41:db:bc:46:69:c3:69:8c:ac:
1d:2d:2c:fd:4b:15:d6:83:f5:47:91:9b:6c:76:13:6c:49:1c:
8f:97:7d:20:bf:ae:b5:fb:c5:ac:ee:cb:31:b7:e5:89:d5:74:
37:b1:29:d4:8f:c7:15:40:71:53:ea:1f:89:8a:76:7a:a5:49:
71:b9:4d:4d:f1:dd:8a:43:84:79:82:ae:9c:8c:28:1d:27:11:
13:f0:02:17:23:19:5b:4a:90:f5:64:2c:a4:fa:86:f1:62:3a:
6d:e3:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 17:54:40 2025 by rpki-client