Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CeV5w1W_u3ZbCkhjn0AzRXNejQg.roa
File: CeV5w1W_u3ZbCkhjn0AzRXNejQg.roa (raw, json)
Hash identifier: 3gcrdt3za2A3LYaWSKK7Kxt7a7BJ5+0gB6LoNfxXSAg=
Subject key identifier: 09:E5:79:C3:55:BF:BB:76:5B:0A:48:63:9F:40:33:45:73:5E:8D:08
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01972FA3D30C76B466B34E0706C6B270A2DF
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CeV5w1W_u3ZbCkhjn0AzRXNejQg.roa
Signing time: Mon 02 Jun 2025 07:55:54 +0000
ROA not before: Mon 02 Jun 2025 07:55:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29582
IP address blocks: 77.76.3.0/24 maxlen: 24
78.142.22.0/23 maxlen: 24
79.124.80.0/23 maxlen: 24
91.92.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:a3:d3:0c:76:b4:66:b3:4e:07:06:c6:b2:70:a2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 2 07:55:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e579c355bfbb765b0a48639f403345735e8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:b0:ce:94:06:60:f3:68:14:3b:7e:a5:77:
4f:88:58:62:01:97:30:b1:65:2f:41:8d:a5:8a:09:
4c:7d:72:75:a2:d2:8a:5e:c0:3c:cc:0d:b3:34:a5:
85:d0:05:5d:c6:7f:34:88:fb:ec:2d:02:8a:1e:3a:
84:7b:b6:e8:f3:e9:eb:a4:02:4b:52:fc:41:14:6c:
29:de:91:37:c4:1c:43:1e:b7:ef:e1:34:4b:86:e3:
18:90:b2:f9:37:df:b2:4b:fa:4a:1a:45:5c:bd:86:
76:51:bc:20:2e:0c:4c:f7:3c:9f:bc:bf:b7:e7:3f:
ff:18:d5:f8:c4:83:73:f1:d9:47:cd:46:ce:00:08:
42:9a:97:e0:52:c0:d5:51:fb:63:58:f6:91:9a:16:
87:ee:70:f0:9e:c6:08:d2:a8:84:f5:f0:83:65:b8:
23:a7:27:eb:82:82:b2:ac:68:d7:f5:4b:2e:f9:d7:
b1:ae:8c:83:06:a1:3e:a7:d9:ad:a6:6e:9e:6a:01:
7a:ab:89:51:2f:ca:64:b8:00:2a:bf:09:d8:99:70:
e0:73:a3:e7:14:5e:ea:37:c0:3f:d4:de:c6:d8:b0:
9a:aa:36:cc:44:19:d0:b4:f8:00:b0:9a:d5:c9:cb:
0a:68:0c:b2:3c:ef:24:7b:69:3e:81:bc:ec:e4:66:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:79:C3:55:BF:BB:76:5B:0A:48:63:9F:40:33:45:73:5E:8D:08
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CeV5w1W_u3ZbCkhjn0AzRXNejQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.3.0/24
78.142.22.0/23
79.124.80.0/23
91.92.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:83:fa:b3:0a:35:3b:59:e8:8f:a7:a7:f2:bf:15:dc:17:fa:
ef:43:9e:ca:c0:0a:4f:95:b2:05:37:f6:c9:6d:d5:44:c4:6b:
e3:9e:29:b1:45:08:72:9a:16:2f:72:47:9b:7c:0a:31:b7:63:
02:91:cc:b2:d3:87:af:ad:37:77:e9:23:e8:bf:92:32:32:b8:
1a:c4:bb:5f:4e:93:7e:83:1a:fe:b4:9c:94:2c:f5:21:0a:fe:
c4:92:72:ba:5c:dc:36:39:47:17:59:75:7e:40:db:b1:59:bf:
c4:13:14:2d:6c:47:63:d5:c7:2b:bb:b4:ab:d0:07:37:21:27:
67:cf:c1:2a:a9:0f:58:1a:7f:6d:2b:52:57:79:e6:38:3c:a6:
7d:18:9f:e8:cf:49:9b:96:c9:af:76:33:1f:ce:54:3a:dd:dd:
62:b8:74:83:d4:67:41:91:16:0c:bc:98:60:fe:58:79:c5:00:
dd:e9:66:ea:3a:cc:69:08:cd:9d:a6:b0:df:a7:b8:a0:67:84:
78:bc:22:5e:3e:9f:4b:4a:31:a3:b5:38:5e:e7:15:0b:c0:7e:
2f:e0:fa:3c:71:55:5f:79:a2:25:c0:d4:f2:16:21:39:4e:d2:
da:d2:7b:5f:6b:ec:c9:a0:3c:0c:bb:72:38:59:89:2d:16:55:
3c:47:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:42:30 2025 by rpki-client