Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/NeUwRTp81tfBXG66ClQqWHPlCb4.roa
File: NeUwRTp81tfBXG66ClQqWHPlCb4.roa (raw, json)
Hash identifier: +vVG588nooXT+gCvKcWSHK/jt+83wQoJ4IiwpnhbSoc=
Subject key identifier: 35:E5:30:45:3A:7C:D6:D7:C1:5C:6E:BA:0A:54:2A:58:73:E5:09:BE
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0196C689A1430CA015002E2643E4153035E7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/NeUwRTp81tfBXG66ClQqWHPlCb4.roa
Signing time: Mon 12 May 2025 22:07:10 +0000
ROA not before: Mon 12 May 2025 22:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.47.156.0/22 maxlen: 24
77.47.243.0/24 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:89:a1:43:0c:a0:15:00:2e:26:43:e4:15:30:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 12 22:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e530453a7cd6d7c15c6eba0a542a5873e509be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:0d:08:b8:73:a7:f4:b1:1d:9c:27:2b:5a:
b2:74:a1:00:3a:40:4e:31:b7:27:71:bb:58:04:93:
71:f1:a8:50:d8:c8:53:99:75:04:71:1a:51:57:fe:
a8:95:de:0f:dc:d2:da:be:8d:a5:45:bb:58:bb:9a:
5d:51:67:de:16:2b:78:21:36:08:39:07:b3:15:a3:
d5:9e:a3:a4:be:43:5a:f2:18:3c:be:d1:7e:c9:ad:
92:42:04:44:f1:e4:94:73:15:cd:38:65:68:f6:75:
b0:1d:fd:fb:ed:92:1c:e2:3c:cf:51:cc:8d:41:c2:
9a:70:db:61:57:90:cc:6f:ca:ca:85:f5:51:18:d6:
9f:76:10:62:52:7f:47:24:83:c0:a6:62:2f:1e:ec:
3c:c1:04:b7:6c:85:f3:10:8c:67:47:e8:58:ed:3b:
e1:5f:7f:c1:c8:a4:fd:a8:e8:2f:65:9c:10:b9:e5:
09:fc:ad:5a:c9:3b:2b:73:1a:21:24:52:76:b1:59:
7c:11:2b:11:ec:e2:88:d1:b2:a2:25:22:42:58:03:
51:22:2c:01:af:49:e3:46:78:09:55:f0:8a:6b:92:
a1:b5:82:d8:08:3f:f0:1d:6a:38:33:76:16:a7:90:
56:a9:01:0d:d0:89:ca:f7:50:89:85:30:5a:fc:34:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:30:45:3A:7C:D6:D7:C1:5C:6E:BA:0A:54:2A:58:73:E5:09:BE
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/NeUwRTp81tfBXG66ClQqWHPlCb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.243.0/24
195.178.140.0/23
195.178.146.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:d7:24:0b:78:79:cc:31:fa:60:c6:02:03:f9:a3:75:84:6d:
00:80:0f:d4:8f:58:8d:91:d7:c3:5d:9a:72:79:83:42:1c:c7:
dd:b5:5b:25:6c:c1:67:81:54:fb:cf:75:e0:49:11:c7:e4:47:
b7:93:6b:86:55:2d:60:ba:e4:2f:0c:05:2e:65:9f:b7:74:0d:
53:07:6f:d4:10:03:fb:49:1e:aa:dc:04:bb:75:95:50:17:76:
8e:60:42:aa:3c:df:e0:03:ad:b5:7d:c5:44:67:c7:1d:69:0b:
2e:1b:a0:ff:cd:01:7a:8f:96:89:e0:eb:0c:95:c3:2a:23:fc:
dd:09:5f:be:c1:9b:dc:cf:b3:e1:e9:ac:29:88:02:a6:ba:43:
dc:68:3b:b5:0e:37:7e:6f:d0:27:dd:3f:22:eb:70:75:fd:35:
61:65:49:40:99:d4:20:65:05:19:85:a7:b5:c1:3d:42:96:9d:
36:c9:22:47:2c:61:01:9a:32:0b:da:27:12:ad:81:b1:ab:70:
fb:0d:49:fb:bd:da:ba:f5:3b:f3:cd:72:f4:94:90:d9:69:a2:
bd:5f:5f:e0:fb:d3:81:21:e5:94:cb:f6:07:34:ff:19:98:6b:
19:ab:2f:a2:fb:98:fe:85:d2:9f:00:9a:62:ce:25:9d:dd:ba:
89:3e:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:52 2025 by rpki-client