Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/PqS-plcVhsejlZ8Jgzx1wDxYdHk.roa
File: PqS-plcVhsejlZ8Jgzx1wDxYdHk.roa (raw, json)
Hash identifier: qaGWFgzA9dckEvjqjFgwqWa8ehUtFrqyvzX0PSS6ngs=
Subject key identifier: 3E:A4:BE:A6:57:15:86:C7:A3:95:9F:09:83:3C:75:C0:3C:58:74:79
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01969AF6D8FAB1A44B872FB8CF89AC41B8C9
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/PqS-plcVhsejlZ8Jgzx1wDxYdHk.roa
Signing time: Sun 04 May 2025 11:03:10 +0000
ROA not before: Sun 04 May 2025 11:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.111.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:f6:d8:fa:b1:a4:4b:87:2f:b8:cf:89:ac:41:b8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 4 11:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ea4bea6571586c7a3959f09833c75c03c587479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:75:99:a6:82:24:6f:1b:20:f7:ec:e1:78:
86:32:05:bf:66:a8:66:6d:31:53:4d:aa:4e:8b:b1:
47:09:27:c7:a9:7a:57:ee:f7:12:a4:52:0a:65:9a:
1e:d6:7e:cc:27:5a:97:d1:74:80:70:ab:5c:c3:50:
ed:c1:1c:4c:eb:76:aa:6c:77:3e:69:d2:74:be:5f:
bb:47:75:4a:74:fb:75:a1:9a:01:3a:53:4a:81:f0:
43:0a:2f:62:98:0d:43:bd:4a:3a:86:c4:d1:eb:4c:
8e:2f:24:7b:a4:56:6d:28:d6:d7:22:2e:81:6d:d8:
64:06:f9:b8:fb:21:46:4c:6f:ee:9e:04:b0:1d:df:
79:16:a2:3c:5c:f4:ca:46:1a:b5:64:c0:dc:bd:4b:
de:c1:e8:f6:9f:b3:cb:b5:f1:5a:53:9a:05:ce:b6:
f5:07:7a:07:cd:b3:cc:c6:ec:97:48:bc:85:7c:a6:
a6:ac:4d:75:53:95:dc:d9:23:8f:f7:97:06:d5:d7:
67:be:55:e5:ae:46:1b:f9:b2:24:14:1c:59:e7:dc:
47:20:b2:3e:91:c3:73:93:36:23:0c:f0:53:94:80:
1b:67:f7:f6:12:9e:33:6a:43:8a:41:51:79:69:e8:
cf:97:5d:0c:04:ec:bb:53:17:6a:cc:b5:ae:d6:dc:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:BE:A6:57:15:86:C7:A3:95:9F:09:83:3C:75:C0:3C:58:74:79
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/PqS-plcVhsejlZ8Jgzx1wDxYdHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0-77.110.106.255
77.110.108.0/22
77.110.114.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
98:f5:48:14:de:5b:dc:fd:87:15:e6:05:d0:50:d3:22:1a:4a:
23:9a:2f:e3:5d:52:39:78:98:a6:28:e6:36:01:f9:8f:12:cc:
07:64:c8:4e:8c:d0:21:f9:76:53:20:bb:0d:00:ac:45:ee:81:
81:88:09:a4:21:80:58:1d:ed:a6:16:58:45:2e:f5:a1:4b:d9:
85:b7:22:f8:f6:dd:d7:09:9a:b6:64:66:80:32:dd:6f:54:91:
41:b0:a7:16:ba:bc:1a:68:7a:c3:33:fb:5a:3d:12:0f:10:0d:
8b:aa:7b:d0:1d:49:45:94:57:f4:cf:15:0e:1a:62:eb:42:ea:
2e:51:89:e1:f6:9e:f0:7b:30:58:00:af:2d:b3:28:a8:49:ae:
15:95:1d:56:1a:9b:cb:6b:58:49:f9:ef:e7:16:09:4d:8b:dc:
63:01:7d:9f:44:02:0a:be:20:7e:fd:1f:74:38:3b:80:90:ad:
bc:43:93:9b:25:46:c5:d9:1b:51:1e:7a:69:bb:c5:54:58:6e:
ee:44:96:68:e9:de:a1:9c:2a:68:bf:cb:8c:4e:50:34:08:dc:
d0:a8:49:e0:31:ca:1d:3f:e1:3a:8e:15:fc:88:89:b1:71:83:
17:c3:0a:1c:24:18:b2:f9:8c:e2:35:a7:c3:13:54:2f:65:60:
65:e3:7e:22
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaa9tj6saRLhy+4z4msQbjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNTA0MTEwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWE0YmVhNjU3MTU4NmM3YTM5NTlmMDk4MzNjNzVjMDNjNTg3NDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ad1maaCJG8bIPfs4XiGMgW/Zqhm
bTFTTapOi7FHCSfHqXpX7vcSpFIKZZoe1n7MJ1qX0XSAcKtcw1DtwRxM63aqbHc+
adJ0vl+7R3VKdPt1oZoBOlNKgfBDCi9imA1DvUo6hsTR60yOLyR7pFZtKNbXIi6B
bdhkBvm4+yFGTG/ungSwHd95FqI8XPTKRhq1ZMDcvUvewej2n7PLtfFaU5oFzrb1
B3oHzbPMxuyXSLyFfKamrE11U5Xc2SOP95cG1ddnvlXlrkYb+bIkFBxZ59xHILI+
kcNzkzYjDPBTlIAbZ/f2Ep4zakOKQVF5aejPl10MBOy7UxdqzLWu1tzKnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD6kvqZXFYbHo5WfCYM8dcA8WHR5MB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvUHFTLXBsY1Zoc2VqbFo4Smd6eDF3RHhZZEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAVNbmAD
BABNbmoDBAJNbmwwDAMEAU1ucgMEB01uADANBgkqhkiG9w0BAQsFAAOCAQEAmPVI
FN5b3P2HFeYF0FDTIhpKI5ov411SOXiYpijmNgH5jxLMB2TITozQIfl2UyC7DQCs
Re6BgYgJpCGAWB3tphZYRS71oUvZhbci+Pbd1wmatmRmgDLdb1SRQbCnFrq8Gmh6
wzP7Wj0SDxANi6p70B1JRZRX9M8VDhpi60LqLlGJ4fae8HswWACvLbMoqEmuFZUd
Vhqby2tYSfnv5xYJTYvcYwF9n0QCCr4gfv0fdDg7gJCtvEOTmyVGxdkbUR56abvF
VFhu7kSWaOneoZwqaL/LjE5QNAjc0KhJ4DHKHT/hOo4V/IiJsXGDF8MKHCQYsvmM
4jWnwxNUL2VgZeN+Ig==
-----END CERTIFICATE-----
Generated at Fri May 16 06:11:51 2025 by rpki-client