Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CFZdoRwoRNPuzLajJoY1nLMoVnA.roa
File: CFZdoRwoRNPuzLajJoY1nLMoVnA.roa (raw, json)
Hash identifier: YOqrEvseUEVF1AhLQJTFp25Hjp1hvf5Crj9S0CZIwBE=
Subject key identifier: 08:56:5D:A1:1C:28:44:D3:EE:CC:B6:A3:26:86:35:9C:B3:28:56:70
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01990B16550C77A47B7F203732B94B675C14
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CFZdoRwoRNPuzLajJoY1nLMoVnA.roa
Signing time: Tue 02 Sep 2025 15:40:36 +0000
ROA not before: Tue 02 Sep 2025 15:40:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:16:55:0c:77:a4:7b:7f:20:37:32:b9:4b:67:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 15:40:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08565da11c2844d3eeccb6a32686359cb3285670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:3c:d2:c6:7d:2e:65:c4:b8:df:d1:0a:87:
a7:e4:96:2e:be:d3:82:b5:70:4c:7b:1f:ea:2b:cf:
aa:1a:54:2e:3d:15:9f:fb:ef:00:b1:15:07:10:73:
1b:1c:f5:1d:11:21:63:05:42:80:0f:d2:2c:c9:86:
f4:59:4c:d1:e2:d3:4b:73:ce:a4:cf:87:31:2e:e2:
3e:e3:a5:7d:76:9c:5d:71:5f:0e:20:d8:2a:5b:3e:
fb:13:0b:28:1b:59:e5:36:b3:82:d1:68:20:e9:75:
54:4b:80:25:3c:5b:ce:08:b2:f8:11:7c:bd:c8:52:
21:84:3d:5b:17:71:bb:56:0c:36:67:1d:83:88:8e:
55:a4:3a:0d:53:b1:a7:0d:32:68:4f:3d:e3:77:7f:
13:72:d6:1d:21:65:54:a3:99:d7:f2:9c:cf:11:95:
5e:f2:42:aa:b4:15:26:05:2a:90:b5:10:a4:7b:29:
e7:29:2a:2c:98:2f:21:a7:14:3a:4d:3c:e7:0f:4d:
28:b3:8e:9c:a3:4d:0b:96:e2:9c:cd:f2:33:e7:28:
0a:aa:a1:87:28:62:3a:f7:66:60:56:c5:2e:55:68:
7f:9f:68:69:b2:2c:4d:00:df:4e:49:ae:e1:0f:e5:
cb:ea:ee:8e:33:a3:a9:20:80:00:30:15:3b:50:5d:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:5D:A1:1C:28:44:D3:EE:CC:B6:A3:26:86:35:9C:B3:28:56:70
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CFZdoRwoRNPuzLajJoY1nLMoVnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7a:77:d6:42:c4:1f:ff:77:5d:69:61:f9:f8:c0:9f:2b:f0:
bc:40:2c:6c:97:a2:f8:16:84:5f:3a:5a:0b:fd:c3:e0:6f:ea:
d6:00:5e:c3:73:bc:63:4f:5e:f9:17:be:f0:c5:a1:8e:62:0f:
11:ff:b5:b1:8f:19:a4:d8:dc:e1:90:d6:a8:76:fa:64:82:a9:
c2:c1:8a:1a:51:da:d9:cb:38:71:a2:85:79:cd:d2:7f:5c:e9:
fe:a1:5d:85:28:99:1d:c9:50:15:0d:56:3a:dd:5f:e0:89:32:
d2:03:70:2a:f7:2f:3f:3f:17:50:ba:11:bc:ee:97:8d:1b:a2:
83:91:fa:a7:fb:1f:58:ab:4a:31:e5:35:8b:e6:de:2a:32:95:
88:d1:03:2f:90:4d:23:49:f8:09:72:6f:0e:3c:4f:5a:a8:15:
a3:02:2a:10:08:f3:e7:d3:37:a4:8e:89:a6:5f:90:c9:f2:5b:
09:54:fd:01:e5:6b:1e:39:5c:b0:22:da:8c:96:21:7b:0a:2e:
fa:60:5d:6c:26:c7:f9:04:38:58:c9:0b:e1:21:40:25:8e:30:
17:03:63:dd:2b:f0:26:5b:05:54:e0:40:e1:be:fe:d0:6b:d4:
ca:13:a1:18:d8:7a:5b:28:79:d4:38:f4:a8:5e:4a:7f:43:c4:
41:c3:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:09:48 2025 by rpki-client