Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J7CyH1jM9ABCm1K4JA17hUYmY30.roa
File: J7CyH1jM9ABCm1K4JA17hUYmY30.roa (raw, json)
Hash identifier: pc5Ro1o2+7p7REcnwD0zFlaopmSxt85bKJwvLWmQqWU=
Subject key identifier: 27:B0:B2:1F:58:CC:F4:00:42:9B:52:B8:24:0D:7B:85:46:26:63:7D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0197C01138B88B7B7D4EF62977D2D1A65492
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J7CyH1jM9ABCm1K4JA17hUYmY30.roa
Signing time: Mon 30 Jun 2025 09:00:43 +0000
ROA not before: Mon 30 Jun 2025 09:00:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/24 maxlen: 24
77.47.213.0/24 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.151.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:11:38:b8:8b:7b:7d:4e:f6:29:77:d2:d1:a6:54:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 30 09:00:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b0b21f58ccf400429b52b8240d7b854626637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:d6:da:e3:eb:81:e8:c8:e0:ca:bd:c5:c5:
65:51:23:c4:c0:57:6b:cd:18:5d:eb:af:d7:8d:df:
fa:0e:eb:7f:a1:b4:14:a5:9b:85:4c:d5:89:bf:1c:
18:41:0a:63:90:2f:24:47:7b:07:cd:66:db:32:28:
25:d5:41:3a:6e:0a:ff:38:87:d7:33:9b:e5:77:1f:
d3:03:c2:83:29:a2:af:b2:86:d1:a7:f8:3e:7a:0d:
27:3d:28:9d:33:fa:6f:9d:a7:7f:6d:23:3d:74:88:
40:e1:14:29:c0:39:14:9b:25:6c:ba:aa:f9:09:35:
5f:48:88:8b:9f:cd:61:07:27:f5:b4:91:b6:6a:69:
54:d9:38:5e:5f:d0:8b:09:b6:78:bf:1a:c8:2b:fa:
7a:d1:ff:46:92:d3:fa:fe:27:8e:c9:09:28:0c:7d:
d3:00:a1:1a:b5:3b:a3:67:00:57:ab:ae:63:99:02:
f7:3d:51:b0:47:8b:bd:99:c5:3d:99:4b:fc:a4:f6:
42:9b:23:a4:47:a5:c1:7e:27:59:e4:83:7e:35:6c:
be:41:e9:fd:dc:20:f5:ee:eb:1f:66:d8:d1:dc:e4:
63:bf:8e:43:6b:eb:10:26:c6:cf:58:ff:01:48:d8:
d1:d7:c7:cc:d4:1f:c2:c5:93:57:3b:48:16:a3:98:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B0:B2:1F:58:CC:F4:00:42:9B:52:B8:24:0D:7B:85:46:26:63:7D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J7CyH1jM9ABCm1K4JA17hUYmY30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0/24
77.47.248.0/21
195.178.140.0/23
195.178.146.0/24
195.178.148.0/23
195.178.151.0/24
195.178.156.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
89:ac:75:67:a8:01:80:f1:9a:d4:01:6b:67:53:6f:a6:84:6c:
4d:91:67:ed:bb:e9:9f:42:1d:4c:a7:34:d0:9a:c6:f0:f7:e8:
98:b1:0e:d4:38:2d:0d:db:0a:84:d7:53:32:ab:70:6c:03:72:
b9:20:ba:50:31:05:48:fd:d5:d6:8b:6c:4a:4e:31:5d:67:87:
ca:f9:95:14:30:06:f6:a4:2a:27:f5:42:dd:9d:93:43:d7:7d:
46:d3:05:4c:04:4e:da:3b:01:8e:0c:50:97:58:79:0c:b9:57:
f0:b9:e0:21:27:33:89:08:c9:c4:aa:84:8c:9f:95:5b:6b:0a:
ad:bc:5c:59:72:c3:be:2e:1c:fb:2f:78:37:7b:f3:d8:60:a3:
af:aa:12:4c:67:70:5b:a8:04:95:3e:c9:a7:ef:54:43:df:0b:
c9:a4:ef:cb:c0:17:61:39:ad:d2:c3:cd:50:d5:31:e9:e1:0a:
a2:9a:44:92:19:2b:5d:26:bd:0d:b7:bf:41:bd:05:e9:04:9b:
8d:51:55:8d:9c:29:a7:78:cc:cb:86:e9:a2:b5:a2:96:00:40:
ba:b2:04:3c:17:c8:e4:d0:23:d1:97:d1:26:19:ae:31:e6:cf:
0a:4f:42:48:61:69:5e:1e:ad:24:78:6f:35:41:63:fd:a0:d0:
da:15:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:34:28 2025 by rpki-client