Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/THNlRPuy_OSmJwAh5AqaPu-4H0o.roa
File: THNlRPuy_OSmJwAh5AqaPu-4H0o.roa (raw, json)
Hash identifier: H6rO51juTcU0B9spDYV933Y2sFQTEVq28Z/yjMsoNXo=
Subject key identifier: 4C:73:65:44:FB:B2:FC:E4:A6:27:00:21:E4:0A:9A:3E:EF:B8:1F:4A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0197C00F622BC5DA2D8F3F0E7BC5B78F1C1B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/THNlRPuy_OSmJwAh5AqaPu-4H0o.roa
Signing time: Mon 30 Jun 2025 08:58:42 +0000
ROA not before: Mon 30 Jun 2025 08:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.47.156.0/22 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.151.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:0f:62:2b:c5:da:2d:8f:3f:0e:7b:c5:b7:8f:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 30 08:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c736544fbb2fce4a6270021e40a9a3eefb81f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:80:89:03:85:09:54:30:ce:70:79:a3:66:
c4:91:36:04:50:ca:59:97:b6:1b:a9:77:9c:1c:04:
53:ff:ef:1d:7e:25:0c:1c:91:b4:20:8e:b6:94:31:
ec:b5:26:14:fe:39:07:00:91:51:e4:3f:02:9c:55:
13:f2:d5:01:72:d0:dc:3a:ee:23:0c:f9:10:a1:11:
b4:d5:cf:b6:a9:a9:80:0a:5d:24:68:4a:e6:df:96:
79:36:2e:ce:15:6d:59:1b:48:54:86:a2:94:e9:62:
5e:77:05:01:b8:c3:36:98:c6:bb:4a:d9:89:9e:fc:
00:1b:b7:e5:cb:b4:3b:19:49:12:e8:62:46:cc:16:
da:6d:c7:51:6e:1e:a4:1c:7a:da:a0:42:85:09:c9:
e2:1c:e1:60:75:48:a8:ff:6f:81:db:a1:7f:fc:2c:
6c:9f:c2:cd:2c:6c:3a:15:74:b2:69:f2:ce:37:44:
32:e0:49:31:ff:8e:81:f9:8c:82:9f:cd:e0:49:03:
05:92:a3:ce:cd:07:ed:74:77:04:4b:fc:82:b9:78:
73:77:06:24:22:94:2e:24:9c:ff:17:23:ff:cd:6d:
ca:5c:92:8e:a2:51:7f:74:b0:f1:f7:8a:4e:39:8a:
9d:e9:40:72:48:7e:c2:e4:ca:71:0b:21:1f:15:80:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:65:44:FB:B2:FC:E4:A6:27:00:21:E4:0A:9A:3E:EF:B8:1F:4A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/THNlRPuy_OSmJwAh5AqaPu-4H0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.243.0/24
77.47.248.0/21
195.178.140.0/23
195.178.146.0/24
195.178.148.0/23
195.178.151.0/24
195.178.156.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:7c:8d:18:98:1d:02:4b:6c:d7:46:68:7e:e1:d9:39:0a:fb:
8e:ad:61:89:ee:b4:9c:84:c1:3f:81:84:eb:df:d6:14:8b:a6:
52:6f:2b:c3:bd:6d:50:68:d4:9c:aa:85:e7:6e:20:58:19:74:
b9:49:6b:bb:6f:18:6c:e2:aa:93:2c:8b:c8:b4:6b:1d:0f:e3:
e8:19:ad:d3:34:da:84:e2:02:b9:36:21:22:64:3a:bb:4e:40:
63:38:12:66:ae:d9:e8:98:8c:7d:97:a1:0f:24:0e:1f:42:19:
84:70:34:6a:b0:9f:46:e1:50:e8:6f:7c:82:4d:d7:50:91:58:
16:bd:30:11:9c:22:34:ca:5c:48:4e:a6:a3:b1:5d:ad:b9:d8:
6d:ec:7c:30:bd:93:d2:ac:80:74:76:6f:49:90:2f:4e:03:f6:
2d:90:d2:2a:b4:8b:4f:1b:26:a6:4c:dc:95:00:b6:9d:8a:90:
cb:1a:d5:f8:6a:68:2a:27:9c:eb:8d:9a:3b:a7:06:51:55:18:
c3:98:fb:ae:a4:8a:1a:52:65:ea:b5:57:3c:fd:0b:ff:28:b5:
3d:86:90:41:d1:62:3b:09:f7:fb:fa:2e:f9:a2:aa:15:6f:7c:
4f:19:42:b6:6f:56:ff:cb:54:43:38:5e:90:e8:8f:83:15:26:
b6:31:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:34:53 2025 by rpki-client