Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa
File: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (raw, json)
Hash identifier: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=
Subject key identifier: 07:43:59:9C:E3:CF:DA:1F:28:0F:E4:4D:A8:9F:93:6B:6C:AA:FC:57
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019784AF6979DC93538D926978891A7B4942
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa
Signing time: Wed 18 Jun 2025 20:16:17 +0000
ROA not before: Wed 18 Jun 2025 20:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 77.110.64.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.72.0/24 maxlen: 24
77.110.77.0/24 maxlen: 24
77.110.80.0/24 maxlen: 24
77.110.85.0/24 maxlen: 24
77.110.88.0/24 maxlen: 24
77.110.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:af:69:79:dc:93:53:8d:92:69:78:89:1a:7b:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jun 18 20:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0743599ce3cfda1f280fe44da89f936b6caafc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:d1:09:39:a2:83:73:a7:9a:53:da:7e:fa:
c6:6f:42:51:1d:61:e9:f6:93:5e:9b:3f:62:51:a2:
02:8e:37:b6:9e:1f:ea:b3:72:a5:d6:44:53:fe:58:
a2:39:13:69:6c:28:2d:2c:ee:ee:7b:b1:79:1c:20:
80:2f:c1:c9:b6:a1:ce:7c:e9:c4:0d:63:8f:11:cf:
e4:4e:41:aa:e8:9b:f1:d2:a2:38:4a:5a:ab:b0:0c:
51:b7:7c:ee:7e:57:56:46:4c:fe:e7:19:d3:2e:18:
78:41:c4:03:b0:dd:0f:cb:fb:3c:10:74:3a:3e:34:
5b:2d:6c:7e:49:64:17:c5:f0:a9:a7:15:24:28:81:
e5:fc:6a:ab:eb:09:9e:a5:27:5c:65:19:44:a8:e4:
60:4e:c4:44:5f:84:94:bd:48:53:20:03:d9:1a:59:
ec:f4:95:ca:79:d9:e3:9a:d9:57:2c:18:0e:5b:22:
86:35:4e:e5:3c:93:56:c3:25:a2:f3:01:f4:1e:e8:
b8:65:c0:61:14:2b:43:83:07:00:77:1c:20:9f:0c:
ae:14:e3:e9:2b:f0:94:03:52:23:15:f0:e4:30:da:
3b:08:ff:19:db:2b:ae:74:34:0e:f4:24:c4:a2:fa:
e9:e4:9f:e5:76:69:a5:d8:10:68:26:5b:d0:ca:35:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:59:9C:E3:CF:DA:1F:28:0F:E4:4D:A8:9F:93:6B:6C:AA:FC:57
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.64.0/24
77.110.69.0/24
77.110.72.0/24
77.110.77.0/24
77.110.80.0/24
77.110.85.0/24
77.110.88.0/24
77.110.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f8:cc:62:c9:14:4f:8e:80:c7:d6:ce:69:be:34:ed:07:8a:
1c:a0:22:0c:42:c3:c8:40:19:b9:ed:86:3f:d5:0a:39:96:47:
41:52:20:91:9c:36:b9:3a:ac:a5:eb:a4:19:d1:03:9e:97:9b:
58:73:6e:5e:e7:95:d6:78:27:9f:ff:f1:e9:61:aa:2d:fa:ae:
cd:ce:b3:d3:2c:b1:f5:a5:d5:2c:df:45:ff:8f:a7:01:7e:91:
f2:ec:d3:8c:4b:45:a3:2e:7f:71:58:92:41:f9:e9:00:b5:6f:
b0:4e:a6:ca:08:15:52:49:fb:1e:3e:d1:fd:ff:18:03:6b:e1:
51:19:58:f3:ef:1b:2e:54:a7:67:d1:55:0b:fa:5b:62:72:fb:
db:73:1a:19:1c:7b:c1:ef:7c:a4:9a:58:d0:2b:03:1c:a3:7f:
b6:fe:6a:59:f6:3c:2e:35:b5:9e:e0:5c:1a:9f:66:d3:81:2d:
6d:d1:82:2c:7e:a1:10:cd:61:f7:2e:71:e8:f7:a9:db:9a:f0:
35:9c:8c:37:55:b2:f5:7f:19:d2:9b:40:ac:20:ad:6d:00:8d:
6f:d7:bc:1c:77:f1:32:fc:f3:e9:8b:5f:d6:46:c4:f9:88:8a:
b6:f1:da:b4:b1:ec:ea:91:3c:e3:08:24:0a:93:8b:3a:48:38:
8d:17:6e:04
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZeEr2l53JNTjZJpeIkae0lCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNjE4MjAxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQzNTk5Y2UzY2ZkYTFmMjgwZmU0NGRhODlmOTM2YjZjYWFmYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QfRCTmig3OnmlPafvrGb0JRHWHp
9pNemz9iUaICjje2nh/qs3Kl1kRT/liiORNpbCgtLO7ue7F5HCCAL8HJtqHOfOnE
DWOPEc/kTkGq6Jvx0qI4SlqrsAxRt3zufldWRkz+5xnTLhh4QcQDsN0Py/s8EHQ6
PjRbLWx+SWQXxfCppxUkKIHl/Gqr6wmepSdcZRlEqORgTsREX4SUvUhTIAPZGlns
9JXKednjmtlXLBgOWyKGNU7lPJNWwyWi8wH0Hui4ZcBhFCtDgwcAdxwgnwyuFOPp
K/CUA1IjFfDkMNo7CP8Z2yuudDQO9CTEovrp5J/ldmml2BBoJlvQyjUrpwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFAdDWZzjz9ofKA/kTaifk2tsqvxXMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvQjBOWm5PUFAyaDhvRC1STnFKLVRhMnlxX0ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATW5AAwQA
TW5FAwQATW5IAwQATW5NAwQATW5QAwQATW5VAwQATW5YAwQATW5dMA0GCSqGSIb3
DQEBCwUAA4IBAQBv+MxiyRRPjoDH1s5pvjTtB4ocoCIMQsPIQBm57YY/1Qo5lkdB
UiCRnDa5Oqyl66QZ0QOel5tYc25e55XWeCef//HpYaot+q7NzrPTLLH1pdUs30X/
j6cBfpHy7NOMS0WjLn9xWJJB+ekAtW+wTqbKCBVSSfsePtH9/xgDa+FRGVjz7xsu
VKdn0VUL+lticvvbcxoZHHvB73ykmljQKwMco3+2/mpZ9jwuNbWe4Fwan2bTgS1t
0YIsfqEQzWH3LnHo96nbmvA1nIw3VbL1fxnSm0CsIK1tAI1v17wcd/Ey/PPpi1/W
RsT5iIq28dq0sezqkTzjCCQKk4s6SDiNF24E
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:34:56 2025 by rpki-client