Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/jXLpkBBRrrRHjLoA0K-cw--pBrA.roa
File: jXLpkBBRrrRHjLoA0K-cw--pBrA.roa (raw, json)
Hash identifier: RDhF74MSc3oQL4ctthS0IBCNFsLyipPZpShGGlt9FTc=
Subject key identifier: 8D:72:E9:90:10:51:AE:B4:47:8C:BA:00:D0:AF:9C:C3:EF:A9:06:B0
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019784B892846E8ADBE02E6C7AE07088797D
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/jXLpkBBRrrRHjLoA0K-cw--pBrA.roa
Signing time: Wed 18 Jun 2025 20:26:17 +0000
ROA not before: Wed 18 Jun 2025 20:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 77.110.64.0/22 maxlen: 22
77.110.65.0/24 maxlen: 24
77.110.68.0/22 maxlen: 22
77.110.68.0/24 maxlen: 24
77.110.70.0/24 maxlen: 24
77.110.72.0/22 maxlen: 22
77.110.73.0/24 maxlen: 24
77.110.76.0/22 maxlen: 22
77.110.80.0/22 maxlen: 22
77.110.84.0/22 maxlen: 22
77.110.88.0/22 maxlen: 22
77.110.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:b8:92:84:6e:8a:db:e0:2e:6c:7a:e0:70:88:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jun 18 20:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d72e9901051aeb4478cba00d0af9cc3efa906b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:4e:2e:f6:b6:5b:40:19:bb:04:51:cf:48:
09:2d:a8:41:fb:86:11:00:81:53:bd:25:de:2e:3f:
cf:b6:eb:db:19:2e:c6:ec:e9:eb:84:f7:b8:67:c8:
cd:df:34:9d:56:b6:4d:e2:3d:5b:59:cb:70:d1:b5:
0d:ab:51:cd:59:c9:64:46:ec:05:f3:98:39:73:d5:
42:0c:24:8c:58:e6:43:18:a8:18:ca:4e:02:c6:48:
f3:6a:a6:b8:64:69:40:16:94:08:3b:3c:57:37:1f:
7a:3b:b4:5c:e9:79:ba:eb:66:a8:f4:66:79:0b:82:
42:63:e9:9a:e7:0a:1a:e1:7b:28:77:a7:49:12:e6:
3a:6f:67:01:56:d2:19:28:26:a5:bb:6a:b4:0d:dd:
53:32:ec:6c:42:44:0b:f0:22:99:9a:fd:f1:36:fc:
c4:ab:cc:80:78:53:8d:c8:ed:1c:59:62:2f:c0:f1:
fe:25:98:5e:d1:3c:74:e2:4b:31:8c:dc:82:a0:ff:
43:d4:ca:c1:8f:d9:8e:52:40:93:9b:b5:c4:a3:2f:
ed:6b:d0:b8:69:50:49:84:87:a7:2a:31:7a:1f:9f:
bd:d3:74:fe:47:d5:b8:ff:1b:89:d6:d1:5c:c8:17:
8a:0e:1a:5b:61:33:21:cc:43:75:8d:53:21:52:57:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:E9:90:10:51:AE:B4:47:8C:BA:00:D0:AF:9C:C3:EF:A9:06:B0
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/jXLpkBBRrrRHjLoA0K-cw--pBrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.64.0/19
Signature Algorithm: sha256WithRSAEncryption
37:d9:10:73:10:c1:77:66:88:8d:63:c2:99:73:6a:c9:60:50:
76:5c:11:a0:ac:ef:a0:92:fa:8e:fb:e6:12:b1:25:46:c9:2e:
14:4d:3c:2d:7d:34:e5:7c:2f:c8:28:a7:c8:c4:e8:4c:57:8a:
2e:6d:c1:78:b9:74:85:24:47:4e:e3:87:ad:ec:06:6e:5b:4b:
4d:de:3f:2d:5d:64:6a:67:f0:32:bf:15:98:e5:97:c2:46:da:
70:4f:08:59:62:e9:bb:c9:e8:2e:9e:6c:58:2a:d1:3b:90:4b:
ce:59:fd:0c:89:4e:82:66:91:65:f5:01:c8:36:ac:e0:b3:e8:
83:8d:4d:ba:24:af:7a:0c:9c:39:a0:b2:08:3b:71:64:e1:93:
40:e1:71:3b:34:f4:ed:62:ab:6f:fc:b0:13:c4:9d:d7:e3:fb:
a7:45:25:6d:73:3f:3b:a8:fe:20:7d:ef:ef:68:11:27:f0:c7:
c6:4d:d7:08:eb:c6:f6:55:ee:20:58:a0:7b:2f:ad:fa:7c:1b:
29:e8:90:ef:31:c4:4b:b2:9e:26:12:51:19:25:dc:6f:6e:3a:
38:9f:13:a9:dc:d0:1f:cd:73:60:e4:8c:61:34:ac:9c:3c:ac:
6f:95:6e:d4:8c:7f:63:ac:66:f4:17:18:d1:ed:9b:dc:0c:aa:
01:c0:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:21:55 2025 by rpki-client