Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/ybngJ4bltqGaCJZ0PyEHE7kdYc8.roa
File: ybngJ4bltqGaCJZ0PyEHE7kdYc8.roa (raw, json)
Hash identifier: HpM50WuhG0t+PfyJWJJeovM9AbhjDbCj5u+lO3n/X0M=
Subject key identifier: C9:B9:E0:27:86:E5:B6:A1:9A:08:96:74:3F:21:07:13:B9:1D:61:CF
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 01990995CCF32AB9702375FF843337E909DE
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/ybngJ4bltqGaCJZ0PyEHE7kdYc8.roa
Signing time: Tue 02 Sep 2025 08:40:36 +0000
ROA not before: Tue 02 Sep 2025 08:40:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 24
77.50.192.0/18 maxlen: 24
77.233.192.0/19 maxlen: 19
77.233.192.0/20 maxlen: 20
77.233.208.0/22 maxlen: 22
77.233.216.0/22 maxlen: 22
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 24
81.17.144.0/21 maxlen: 21
81.17.155.0/24 maxlen: 24
81.17.156.0/23 maxlen: 23
91.204.128.0/23 maxlen: 23
91.204.130.0/24 maxlen: 24
94.141.162.0/23 maxlen: 23
94.141.163.0/24 maxlen: 24
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/24 maxlen: 24
2a00:e78::/31 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:95:cc:f3:2a:b9:70:23:75:ff:84:33:37:e9:09:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Sep 2 08:40:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9b9e02786e5b6a19a0896743f210713b91d61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:81:34:ff:8b:83:94:83:81:e9:bb:66:4e:
ad:cf:7b:e1:f0:01:64:75:13:89:cb:d0:ec:4f:6c:
21:98:11:00:0b:46:11:c1:e4:2b:be:bf:51:2b:f0:
71:0a:cf:b5:a2:97:0f:6c:1a:d3:ee:2c:a2:ac:f2:
b8:ad:32:99:10:86:2c:f7:09:74:f6:66:66:8a:61:
87:23:4c:59:f2:31:df:66:dc:0b:cf:98:21:c1:37:
7e:b1:5c:be:06:72:60:ba:0c:cf:f6:b2:ab:2f:b8:
58:70:c9:72:cf:7a:73:81:e3:77:ae:8a:38:28:38:
60:25:05:dc:38:0b:47:56:31:14:77:ad:8f:d9:09:
f7:ad:72:44:40:27:87:fc:4d:5d:28:e7:e3:03:aa:
b1:5f:0d:3d:70:71:42:52:c9:e6:a3:b8:46:fb:2a:
91:b5:29:81:90:73:b7:c1:88:a0:db:17:4f:ea:b3:
b7:cb:30:ab:ad:75:92:d8:94:79:70:c3:83:e6:c4:
5f:f2:bb:4e:eb:c2:22:37:69:8a:80:65:72:00:90:
ac:64:19:e6:80:21:40:fb:a5:bc:28:0d:d5:70:70:
61:2d:01:3f:92:31:a4:ec:f9:eb:98:03:83:a4:ed:
95:3a:4b:26:48:fa:e7:b5:06:3d:5a:04:64:38:2e:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B9:E0:27:86:E5:B6:A1:9A:08:96:74:3F:21:07:13:B9:1D:61:CF
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/ybngJ4bltqGaCJZ0PyEHE7kdYc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0-91.204.130.255
94.141.162.0-94.141.191.255
185.185.140.0/24
IPv6:
2a00:e78::/31
Signature Algorithm: sha256WithRSAEncryption
cd:3d:0d:22:00:04:df:d1:7a:43:d9:80:98:11:7a:18:eb:a4:
77:5f:ed:43:c4:77:6a:2f:73:99:d2:63:8e:eb:9d:b8:5a:1c:
ab:85:8f:4a:fc:99:ee:b1:98:3a:55:3c:67:06:80:1e:51:68:
03:39:6e:44:89:f5:41:0e:cd:b4:d9:85:ab:41:43:09:37:65:
e2:8c:17:d6:76:34:dc:4c:f4:06:c6:70:36:c3:66:d8:c4:54:
58:4b:56:ac:f5:32:e4:b3:07:b6:9a:94:a7:c9:2b:24:4b:2e:
65:f6:f0:0c:0a:95:74:14:22:ae:2a:02:a4:dd:49:21:79:9d:
9e:18:ae:39:ee:0f:fd:e4:69:f4:29:b5:17:83:77:c8:ac:bd:
da:b7:66:22:6e:24:66:1d:90:95:a1:d7:f9:8d:9d:f7:64:73:
3c:dc:32:51:e2:db:82:88:a5:13:b6:47:1a:71:36:56:d7:42:
17:ef:9f:20:40:4a:bb:58:8f:d3:6f:d6:d5:f2:97:ee:cd:b1:
0b:3a:50:ae:5d:c5:c1:c7:2c:7c:4b:54:0a:4e:3e:fb:9b:f8:
ef:be:72:a7:06:a2:fa:66:55:dc:9b:48:a9:a4:87:0b:ee:2c:
43:77:44:ae:93:b9:9e:a1:b2:52:a8:08:2b:87:16:2f:ce:d4:
c5:66:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:21 2025 by rpki-client