Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zHFpybvQWqCcE0wcrIQdWt99-bg.roa
File: zHFpybvQWqCcE0wcrIQdWt99-bg.roa (raw, json)
Hash identifier: oiEqkUXJcusi96ZqI1Fte+3V8PFNOg426q2wFvAt2mg=
Subject key identifier: CC:71:69:C9:BB:D0:5A:A0:9C:13:4C:1C:AC:84:1D:5A:DF:7D:F9:B8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01990B1AE895C0FBAE534EF4CD6B601541AE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zHFpybvQWqCcE0wcrIQdWt99-bg.roa
Signing time: Tue 02 Sep 2025 15:45:36 +0000
ROA not before: Tue 02 Sep 2025 15:45:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 77.111.101.0/24 maxlen: 24
94.229.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:1a:e8:95:c0:fb:ae:53:4e:f4:cd:6b:60:15:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 2 15:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc7169c9bbd05aa09c134c1cac841d5adf7df9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:26:c6:43:1d:57:7c:8f:2f:01:eb:19:13:cb:
f4:c8:e9:f1:8e:c2:d5:bf:c8:83:62:98:4d:2c:18:
99:82:fd:96:72:11:0a:1b:87:c1:e7:08:ac:f6:9d:
09:4b:b4:34:77:d3:9f:b3:50:a1:37:61:15:97:32:
50:6a:73:ae:25:b2:e6:b7:d2:49:91:63:59:73:d4:
d7:ad:ab:c3:24:67:40:64:70:c2:09:02:2a:0a:29:
c4:0b:dc:86:0a:46:2e:4f:5f:f5:42:ba:0c:80:be:
5d:85:20:89:a7:3d:8d:e1:22:99:a6:9e:4c:a5:d1:
b6:7b:f2:4d:93:b6:e1:bb:14:b0:66:3d:2a:9b:70:
ef:33:f4:04:9c:73:48:55:a3:c5:d1:bd:13:f3:b1:
23:e0:d8:e7:59:c3:99:14:bd:55:b2:0d:28:fe:63:
3a:a1:8a:04:5e:99:b1:d1:f1:0c:4f:9b:bb:ec:e8:
ad:b8:3c:f6:2b:ab:04:f6:3c:c0:f6:c6:1d:fc:17:
5b:ec:ae:e9:0e:30:94:7c:32:9e:e6:48:2e:ac:a4:
86:7e:e2:91:41:88:4a:3e:7c:3a:49:2b:ce:e5:27:
e5:a0:63:07:16:96:16:d1:9f:c8:fd:d3:3d:8a:0e:
cf:cf:f9:fd:75:40:0e:55:db:a1:57:c7:af:d2:bb:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:69:C9:BB:D0:5A:A0:9C:13:4C:1C:AC:84:1D:5A:DF:7D:F9:B8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zHFpybvQWqCcE0wcrIQdWt99-bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.101.0/24
94.229.221.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fb:92:ec:d5:4c:ba:11:07:b5:e3:7d:10:0e:57:5f:6a:0b:
9d:89:9a:82:bc:1a:94:f8:5d:65:d3:33:70:ac:69:2e:05:2b:
d1:a0:ca:37:2a:d3:14:f3:01:cb:75:38:f1:09:33:8c:f7:57:
ec:5e:d1:2f:9d:38:74:ca:f8:dd:4e:46:c0:23:34:91:73:a2:
e1:ed:20:5a:36:c1:47:0d:25:ad:6e:ef:36:44:a5:0a:05:5b:
7c:ba:68:b5:5c:2e:04:79:25:d1:3a:b0:d2:e4:3f:da:ce:50:
b9:dd:8b:c6:44:f3:36:50:29:18:5b:74:9b:0c:ab:83:d0:2b:
01:6d:68:74:30:da:1b:46:f6:8c:bd:1b:23:a5:bf:63:4a:4b:
1c:5a:dd:d0:cc:da:95:03:f9:d1:9a:cc:d7:ee:59:29:49:35:
e5:51:2b:ce:0e:9e:cd:c7:ea:4d:15:a8:f3:23:bb:90:3c:8c:
f5:0b:58:70:7e:d5:4b:bd:a8:ef:c3:41:33:e9:23:36:e5:e8:
c3:17:b8:b9:a0:49:ea:48:c7:b8:c7:48:e0:3f:bc:0c:6f:c5:
4f:41:86:d6:bc:f7:37:2b:63:53:07:4b:4d:2a:8a:46:26:4c:
a5:0c:97:90:84:52:5b:72:d8:1f:1b:d0:17:f9:67:e0:24:a7:
d3:8f:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 13:54:41 2025 by rpki-client