Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa
File: 1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa (raw, json)
Hash identifier: YcdvazhIm7zqYM8zJdIALjmfMmrTX/mjzf4LOtTALFE=
Subject key identifier: D7:F0:B1:D0:54:2D:36:61:1A:C8:EE:A6:AF:7B:80:3D:4A:BF:B3:D1
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 019598F3CEB636253182D4C80C2E7817AB9D
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa
Signing time: Sat 15 Mar 2025 08:37:49 +0000
ROA not before: Sat 15 Mar 2025 08:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216238
IP address blocks: 77.95.219.0/24 maxlen: 24
2a13:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:f3:ce:b6:36:25:31:82:d4:c8:0c:2e:78:17:ab:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Mar 15 08:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f0b1d0542d36611ac8eea6af7b803d4abfb3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:b5:09:28:e6:8d:b1:9c:80:18:e4:4c:b6:
d6:ec:48:94:83:c9:23:24:3e:b1:cf:96:73:bb:e7:
09:dc:9a:a5:d8:c8:51:81:c3:8d:30:19:b0:94:47:
e0:e8:2f:43:5d:cb:c2:37:3c:65:fa:41:b1:c8:a8:
27:35:f9:d4:03:c2:85:8e:32:ff:5d:8f:95:7f:90:
ca:a3:a5:5e:c2:13:33:a1:e1:61:e8:9c:6f:72:31:
4d:42:47:cd:bc:c9:2d:83:cf:ac:bc:fb:01:fd:63:
32:06:ab:6d:1e:0f:0f:ed:96:a3:4c:cc:b9:e2:f0:
1a:3a:24:d3:9c:d6:84:ce:21:38:ac:aa:a1:90:ec:
af:fb:81:58:47:7f:28:84:f4:f9:0c:55:d7:70:d5:
08:a2:ac:35:0e:81:a9:2e:11:df:8e:7a:ab:13:3e:
e1:cf:c8:d2:14:8c:f2:ff:e7:10:d0:5a:ef:1d:91:
8b:c3:bb:82:5a:06:1d:91:bd:12:c4:08:8c:58:ba:
48:46:e6:9c:63:40:74:2d:32:8f:d7:7d:08:3b:56:
a8:11:ab:7e:26:d3:a9:44:0e:c5:57:7c:09:20:2b:
fa:c0:f9:67:a9:0d:56:3b:fe:f6:6e:53:06:1a:10:
79:96:83:a3:8a:72:43:db:65:9e:21:05:e3:28:b5:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:B1:D0:54:2D:36:61:1A:C8:EE:A6:AF:7B:80:3D:4A:BF:B3:D1
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.219.0/24
IPv6:
2a13:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:eb:1a:e7:a2:1b:93:95:88:c5:f8:45:46:12:73:e0:61:45:
df:fe:cb:ba:8a:f2:d4:79:c5:cf:07:53:ac:6b:51:d9:f8:c7:
e7:25:fc:f6:bb:40:49:6b:92:7a:80:cd:78:7b:b8:f3:c3:6f:
3c:a6:38:de:7a:c2:9a:ac:81:77:f3:f9:27:77:8b:fd:99:98:
be:23:50:fa:fd:c7:75:a9:74:86:57:80:63:38:2d:f1:be:6a:
95:5f:83:a8:5f:86:d4:4b:80:40:59:a6:0e:cf:c5:52:67:48:
d9:16:bb:0b:c4:c9:bb:cf:99:26:dd:f3:6f:36:74:90:90:9e:
1a:5a:f3:7b:08:ad:ab:e8:e2:a7:47:a3:d0:e0:27:bc:c0:f0:
07:ae:87:fc:7b:68:1d:8c:22:06:f3:25:d5:53:cd:f3:01:a4:
70:5b:91:1d:25:7e:4a:da:9e:be:a0:1a:e4:d3:58:79:92:17:
22:f4:a7:27:ed:e3:b4:d1:c9:e4:28:a4:82:a0:d7:1a:6e:79:
55:5f:c2:26:fa:8b:69:22:5d:f1:c8:39:79:c3:b6:0c:d4:47:
e5:08:34:15:cb:a6:00:f3:85:6c:86:f8:b2:4d:a2:4c:35:3f:
af:f5:2f:b0:ec:9b:8f:48:d4:24:c0:52:f9:cc:b3:23:b0:2b:
ee:c5:fd:2a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZWY8862NiUxgtTIDC54F6udMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjhjNDcxZTgzYjE0ZmM2YzZjYzdjZmM5NmMxYWMzZTMw
ODdlYWUwHhcNMjUwMzE1MDgzNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2YwYjFkMDU0MmQzNjYxMWFjOGVlYTZhZjdiODAzZDRhYmZiM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfq1CSjmjbGcgBjkTLbW7EiUg8kj
JD6xz5Zzu+cJ3Jql2MhRgcONMBmwlEfg6C9DXcvCNzxl+kGxyKgnNfnUA8KFjjL/
XY+Vf5DKo6VewhMzoeFh6JxvcjFNQkfNvMktg8+svPsB/WMyBqttHg8P7ZajTMy5
4vAaOiTTnNaEziE4rKqhkOyv+4FYR38ohPT5DFXXcNUIoqw1DoGpLhHfjnqrEz7h
z8jSFIzy/+cQ0FrvHZGLw7uCWgYdkb0SxAiMWLpIRuacY0B0LTKP130IO1aoEat+
JtOpRA7FV3wJICv6wPlnqQ1WO/72blMGGhB5loOjinJD22WeIQXjKLUpvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNfwsdBULTZhGsjupq97gD1Kv7PRMB8GA1UdIwQY
MBaAFI74xHHoOxT8bGzHz8lsGsPjCH6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEt
MTM4YTcxMTdkZTM2LzEvMV9DeDBGUXRObUVheU82bXIzdUFQVXFfczlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEtMTM4YTcxMTdkZTM2
LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATV/bMA0E
AgACMAcDBQMqE/HAMA0GCSqGSIb3DQEBCwUAA4IBAQAV6xrnohuTlYjF+EVGEnPg
YUXf/su6ivLUecXPB1Osa1HZ+MfnJfz2u0BJa5J6gM14e7jzw288pjjeesKarIF3
8/knd4v9mZi+I1D6/cd1qXSGV4BjOC3xvmqVX4OoX4bUS4BAWaYOz8VSZ0jZFrsL
xMm7z5km3fNvNnSQkJ4aWvN7CK2r6OKnR6PQ4Ce8wPAHrof8e2gdjCIG8yXVU83z
AaRwW5EdJX5K2p6+oBrk01h5khci9Kcn7eO00cnkKKSCoNcabnlVX8Im+otpIl3x
yDl5w7YM1EflCDQVy6YA84VshviyTaJMNT+v9S+w7JuPSNQkwFL5zLMjsCvuxf0q
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:24:52 2025 by rpki-client