Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa
File: 6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa (raw, json)
Hash identifier: pSLhM/hRoovgEjgf+bz81N5PCn36Sbq5zBr5OXVmzxA=
Subject key identifier: EA:AB:77:E0:EE:6B:E0:08:C0:9D:0D:2D:E6:86:4F:A0:4C:C8:AA:31
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019A17DB5CD06EDA9EC41316F101F457648B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa
Signing time: Fri 24 Oct 2025 20:14:03 +0000
ROA not before: Fri 24 Oct 2025 20:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/24 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
195.178.140.0/23 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:db:5c:d0:6e:da:9e:c4:13:16:f1:01:f4:57:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Oct 24 20:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaab77e0ee6be008c09d0d2de6864fa04cc8aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:31:01:d8:49:19:36:0e:e3:31:c6:e0:46:
1f:1f:99:e2:48:88:a2:58:0d:3f:4a:8f:c9:15:8f:
4d:0f:b6:7a:8d:68:30:f4:5c:1e:a0:b3:7a:f4:e8:
8b:b2:24:b8:a9:da:8e:10:3f:b6:72:84:b3:58:56:
81:90:99:ed:37:13:32:f2:eb:fa:28:89:37:47:45:
28:5e:9a:98:b3:aa:60:d0:6a:02:fd:b2:72:ca:6f:
5d:7a:62:0f:85:46:4d:74:d9:d4:7e:0c:0c:47:f1:
4e:e8:3d:2f:54:8c:d4:ce:00:39:19:8e:df:81:25:
f3:2d:6a:cb:b6:af:83:b0:27:66:ac:a9:ad:2e:56:
dd:00:ce:59:09:fc:a5:d1:03:53:64:65:3b:d6:3e:
d6:c4:28:77:bd:cb:cd:d7:a8:99:af:98:32:63:5d:
ab:4a:a4:70:11:fe:6e:ee:1e:e0:42:e9:e7:39:bc:
b3:c0:6e:9c:e4:cb:2d:1b:44:98:9d:c3:fb:62:a5:
3f:f0:30:cd:b2:a2:e9:1c:a0:3d:d8:b6:a4:70:26:
34:0b:c5:dd:de:01:1a:29:c5:45:e7:0e:ee:30:0a:
2b:91:4e:50:15:de:86:b6:92:2f:23:b8:3d:a0:bb:
91:5e:49:b6:cb:85:d8:d5:7a:38:2a:1d:2b:8b:3f:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:77:E0:EE:6B:E0:08:C0:9D:0D:2D:E6:86:4F:A0:4C:C8:AA:31
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/22
77.47.212.0/24
77.47.240.0/23
77.47.243.0/24
195.178.140.0/23
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:63:49:48:8c:a9:a6:1d:79:74:57:f2:98:24:ee:33:55:4b:
5b:5c:07:f7:95:04:c3:59:0e:51:c3:e7:64:42:0e:91:c8:8d:
4c:1c:d7:cd:80:db:35:d7:64:fe:94:13:53:24:47:7f:52:5a:
73:c1:3a:79:1c:2e:79:18:8f:85:fc:ed:a3:a8:be:8e:6b:96:
90:70:04:8d:8c:82:b4:f8:d0:56:4a:7d:f7:b5:3f:27:8d:47:
1f:90:9d:31:29:45:6b:34:66:1b:28:12:71:20:3e:e4:63:2e:
ac:89:d3:6d:ea:96:75:3a:eb:78:55:1a:b8:10:ab:02:02:8c:
2a:5e:08:62:db:c2:05:9f:88:0f:aa:38:cf:fc:80:be:98:f0:
91:3d:24:32:b1:33:b0:e0:3c:15:eb:49:63:85:0c:7d:77:2b:
a5:5a:67:ff:95:07:db:82:a7:cc:17:87:94:bc:15:ce:74:e3:
c1:a3:ae:71:36:07:74:64:67:c1:40:09:ca:d2:5c:af:e3:b1:
ba:13:f5:d3:63:83:2e:3f:96:5e:5e:08:e1:cc:01:f8:b9:bf:
da:cd:3c:a8:44:a7:8a:0c:81:5f:73:3d:f3:2e:60:80:a6:ec:
32:6d:59:96:74:5b:f0:74:f3:20:89:84:fb:16:d2:7a:41:77:
9c:09:ba:7b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZoX21zQbtqexBMW8QH0V2SLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUxMDI0MjAxNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFiNzdlMGVlNmJlMDA4YzA5ZDBkMmRlNjg2NGZhMDRjYzhhYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfcxAdhJGTYO4zHG4EYfH5niSIii
WA0/So/JFY9ND7Z6jWgw9FweoLN69OiLsiS4qdqOED+2coSzWFaBkJntNxMy8uv6
KIk3R0UoXpqYs6pg0GoC/bJyym9demIPhUZNdNnUfgwMR/FO6D0vVIzUzgA5GY7f
gSXzLWrLtq+DsCdmrKmtLlbdAM5ZCfyl0QNTZGU71j7WxCh3vcvN16iZr5gyY12r
SqRwEf5u7h7gQunnObyzwG6c5MstG0SYncP7YqU/8DDNsqLpHKA92LakcCY0C8Xd
3gEaKcVF5w7uMAorkU5QFd6GtpIvI7g9oLuRXkm2y4XY1Xo4Kh0riz9p2wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOqrd+Dua+AIwJ0NLeaGT6BMyKoxMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvNnF0MzRPNXI0QWpBblEwdDVvWlBvRXpJcWpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATS+PAwQC
TS+cAwQATS/UAwQBTS/wAwQATS/zAwQBw7KMAwQC1G/cMA0GCSqGSIb3DQEBCwUA
A4IBAQCzY0lIjKmmHXl0V/KYJO4zVUtbXAf3lQTDWQ5Rw+dkQg6RyI1MHNfNgNs1
12T+lBNTJEd/UlpzwTp5HC55GI+F/O2jqL6Oa5aQcASNjIK0+NBWSn33tT8njUcf
kJ0xKUVrNGYbKBJxID7kYy6sidNt6pZ1Out4VRq4EKsCAowqXghi28IFn4gPqjjP
/IC+mPCRPSQysTOw4DwV60ljhQx9dyulWmf/lQfbgqfMF4eUvBXOdOPBo65xNgd0
ZGfBQAnK0lyv47G6E/XTY4MuP5ZeXgjhzAH4ub/azTyoRKeKDIFfcz3zLmCApuwy
bVmWdFvwdPMgiYT7FtJ6QXecCbp7
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:23 2025 by rpki-client