Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Rbo4c60fiX-Of8IIrD_RMneexDc.roa
File: Rbo4c60fiX-Of8IIrD_RMneexDc.roa (raw, json)
Hash identifier: i+Ce1wqitteyrH/15dsVG/UgakVIKe+0bRihmcPsBaw=
Subject key identifier: 45:BA:38:73:AD:1F:89:7F:8E:7F:C2:08:AC:3F:D1:32:77:9E:C4:37
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0196FF4CA46B9A64EBD3B2E9990F645FDCF6
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Rbo4c60fiX-Of8IIrD_RMneexDc.roa
Signing time: Fri 23 May 2025 22:38:54 +0000
ROA not before: Fri 23 May 2025 22:38:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ff:4c:a4:6b:9a:64:eb:d3:b2:e9:99:0f:64:5f:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 23 22:38:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ba3873ad1f897f8e7fc208ac3fd132779ec437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:a0:06:c7:cc:96:3c:3e:63:a7:e6:d7:0b:
4f:c4:2b:87:e0:a0:b9:fc:e7:b3:93:12:59:02:5f:
ff:65:42:bd:5a:fd:37:78:d1:6b:5a:90:23:b6:b9:
91:bf:81:73:85:a7:29:15:51:87:a5:df:55:ff:f3:
6b:e6:3d:5c:68:3c:8d:95:7d:22:6e:71:8c:43:9f:
25:6a:fd:fd:19:bd:59:af:9b:4f:a3:65:01:70:f4:
5f:fc:5e:bc:2d:68:43:d9:27:02:29:91:a0:40:cf:
b4:9d:ba:d4:f7:a6:11:87:b7:ec:8c:7d:27:70:db:
24:de:4d:c7:dc:da:99:c3:f7:e6:14:be:27:3a:a6:
6f:88:6f:eb:e3:ca:c5:b6:d7:93:06:5f:48:9b:8e:
79:b9:d6:cc:5d:42:86:c2:4d:31:58:cd:b8:24:11:
48:2a:83:3e:48:3c:2d:5e:1f:0f:32:cb:d8:47:a7:
ac:d3:95:0b:18:fc:c5:48:43:3c:6a:43:c5:36:7d:
0f:28:27:f8:fd:b6:2a:3f:3a:a0:0c:7c:c0:56:a0:
68:b7:de:3c:ca:13:f2:c8:cf:f5:6f:d5:54:8a:4a:
be:ee:1b:04:c8:22:87:68:4e:12:89:be:f4:5f:9a:
40:7d:08:e0:30:25:de:5a:8c:7d:e8:3b:dd:e7:cd:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:38:73:AD:1F:89:7F:8E:7F:C2:08:AC:3F:D1:32:77:9E:C4:37
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Rbo4c60fiX-Of8IIrD_RMneexDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0-77.110.106.255
77.110.108.0-77.110.110.255
77.110.114.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
9f:b8:34:19:be:1e:41:36:08:d3:28:af:4a:38:e4:0d:e1:c6:
f0:6d:29:3e:f7:22:7e:af:4a:00:46:d1:a5:f1:4f:82:c0:81:
c8:72:0d:1f:38:23:03:c8:ad:bc:35:5e:cc:24:89:b7:61:5f:
b5:9c:a6:2d:75:81:47:9c:4a:cf:80:9f:d9:b1:a9:88:96:3c:
80:da:a9:e0:83:15:62:9d:3d:c7:39:2f:ac:e7:6f:2c:01:3b:
58:31:bd:98:51:9b:74:ec:09:66:c7:4a:2e:00:43:2d:30:98:
4e:04:68:5e:57:6b:39:30:78:94:49:f3:dc:55:ba:ee:3b:51:
7e:b4:9a:e1:56:62:75:c2:54:2e:6b:c3:0e:6a:c6:e9:dc:c5:
b2:b6:ac:fa:1b:f0:3c:e7:2d:94:27:f2:80:19:4d:61:eb:11:
04:bd:74:84:b6:85:b6:3e:25:8a:7b:44:19:da:af:0f:6f:d8:
2a:d8:a2:a3:80:ce:8f:f9:de:29:df:ee:a2:17:69:4a:c7:6a:
16:9a:c6:10:2e:f3:e6:61:fd:4d:80:3d:fe:79:50:7b:78:5e:
d6:2f:58:66:30:e6:1e:ac:f8:2b:c3:5c:0a:f7:dc:bf:61:15:
fd:9e:81:5a:e5:7a:cc:e2:99:53:31:17:75:9f:93:e5:2f:d2:
08:7e:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:51:23 2025 by rpki-client