Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/mDrBvH9-_6AGmnfQhhKTBvtv97w.roa
File: mDrBvH9-_6AGmnfQhhKTBvtv97w.roa (raw, json)
Hash identifier: t3TfofLeB/tKmes4ssLQUEWo/4/EQzuiUU+OoK+9vGM=
Subject key identifier: 98:3A:C1:BC:7F:7E:FF:A0:06:9A:77:D0:86:12:93:06:FB:6F:F7:BC
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019701B0375D6BE2162E607CD6691B7A50F8
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/mDrBvH9-_6AGmnfQhhKTBvtv97w.roa
Signing time: Sat 24 May 2025 09:46:55 +0000
ROA not before: Sat 24 May 2025 09:46:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45007
IP address blocks: 77.76.1.0/24 maxlen: 24
82.118.248.0/21 maxlen: 24
91.148.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:b0:37:5d:6b:e2:16:2e:60:7c:d6:69:1b:7a:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 24 09:46:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983ac1bc7f7effa0069a77d086129306fb6ff7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:0d:8f:b4:fd:a4:0c:01:03:02:27:3d:0f:
5e:78:ec:50:24:ed:79:3a:40:d0:35:6a:ba:7c:5f:
84:4d:a7:42:1e:96:a6:a4:e0:96:1e:79:11:f0:fe:
3a:da:9f:c8:ec:26:73:9b:4c:af:c6:8b:56:17:e6:
14:19:05:21:98:e3:42:90:01:70:5e:62:c9:78:7e:
c7:43:b1:b6:48:a5:9a:b7:8a:38:ef:70:f6:7c:7d:
5d:a5:b1:73:53:95:f8:06:09:56:c8:59:e8:f2:21:
5a:5c:5c:eb:f6:99:28:99:63:87:46:25:69:9d:e6:
30:4a:e8:13:68:98:8f:d4:a5:04:71:56:24:39:6f:
ee:92:f7:7c:30:dd:ad:90:e2:fa:14:0c:2b:15:4c:
8e:5a:ec:78:50:b1:42:e8:4d:43:2e:4c:63:e8:25:
ce:79:a8:52:f5:b9:da:93:c2:4b:62:e9:2e:80:6b:
9f:3b:81:ea:f2:87:b5:a6:67:b9:be:b5:29:83:7f:
b1:86:79:27:eb:56:52:02:45:f4:a8:00:60:f1:1b:
c9:14:d7:4c:96:62:3e:7a:32:0d:64:31:73:a6:e6:
39:40:10:3d:42:d2:b3:60:87:14:e2:a7:24:d8:34:
ff:ff:63:be:26:23:1d:86:9c:22:17:eb:d1:f1:d0:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:C1:BC:7F:7E:FF:A0:06:9A:77:D0:86:12:93:06:FB:6F:F7:BC
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/mDrBvH9-_6AGmnfQhhKTBvtv97w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.1.0/24
82.118.248.0/21
91.148.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:b2:45:59:63:e4:15:a7:e4:23:e4:8a:45:79:21:fc:24:20:
24:2f:3b:74:31:ff:dd:b8:39:97:50:15:51:07:92:d3:68:b7:
98:dd:47:2d:b3:38:f5:9a:e3:84:7e:32:93:13:b5:c1:33:51:
64:d3:7b:2b:bf:2f:59:24:84:1d:ef:78:de:7e:58:51:f6:38:
2a:d4:07:32:72:05:14:0f:95:e9:86:63:b8:23:e4:6e:66:bb:
22:d8:9a:63:9e:55:02:9c:73:9d:a6:f1:ee:b5:4a:6e:c2:bf:
3d:04:53:7c:9a:0f:5d:74:e0:50:5c:1c:0b:9f:8e:01:a3:23:
4f:1a:5a:3d:cd:f1:3e:b1:6d:81:52:a1:0a:7e:7c:3f:3a:57:
c0:10:b4:e7:99:fb:5e:da:ab:e4:20:0c:a1:08:90:62:1b:ca:
61:55:4e:5c:a5:08:08:68:17:25:1f:c4:cc:b0:5a:ff:70:27:
21:93:ca:6a:cd:28:fe:df:f8:fe:eb:f3:0f:bf:9f:7e:29:cd:
d1:fe:a3:5b:69:f0:3d:90:b8:7c:2f:b0:c4:e6:46:7a:59:96:
64:77:cc:4f:a3:57:23:5b:41:aa:ad:a7:47:91:71:e4:b6:fb:
57:b9:a4:72:47:88:a3:a6:00:fb:9d:4b:d4:cb:8a:50:cb:ab:
c3:e0:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:07:28 2025 by rpki-client