Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/S1RfsmJWrTSVYn0bgLgV6uSGS9o.roa
File: S1RfsmJWrTSVYn0bgLgV6uSGS9o.roa (raw, json)
Hash identifier: 6GW/YM8KanThjvsOobmtnnsY2uWqxmk/1xhOzheXoh8=
Subject key identifier: 4B:54:5F:B2:62:56:AD:34:95:62:7D:1B:80:B8:15:EA:E4:86:4B:DA
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019784B3FE04D6188423160738682331D6A0
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/S1RfsmJWrTSVYn0bgLgV6uSGS9o.roa
Signing time: Wed 18 Jun 2025 20:21:17 +0000
ROA not before: Wed 18 Jun 2025 20:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 77.110.66.0/24 maxlen: 24
77.110.71.0/24 maxlen: 24
77.110.74.0/24 maxlen: 24
77.110.79.0/24 maxlen: 24
77.110.82.0/24 maxlen: 24
77.110.87.0/24 maxlen: 24
77.110.90.0/24 maxlen: 24
77.110.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:b3:fe:04:d6:18:84:23:16:07:38:68:23:31:d6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jun 18 20:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b545fb26256ad3495627d1b80b815eae4864bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:a1:1e:57:47:c8:ad:19:70:c0:95:d6:9c:
44:6f:a7:bf:48:05:57:3e:84:38:67:02:e0:e0:b9:
3c:c9:e9:a8:55:66:5f:2e:d3:65:0f:36:f7:df:d2:
e2:02:63:56:7b:7f:f3:9b:96:46:24:19:a0:e5:bd:
79:50:43:b9:14:ee:ab:4c:86:e0:0c:7b:3b:a1:dc:
07:aa:01:37:d2:5b:a1:8e:06:83:23:8f:40:7a:f9:
42:2e:e3:04:e4:d7:d3:9b:89:75:85:df:aa:60:d5:
55:30:fd:aa:f2:36:45:60:81:a6:9b:82:62:18:d9:
aa:59:eb:d0:2a:a2:7c:7a:40:a0:9e:06:a7:2e:39:
cc:9d:1b:7c:0f:43:3f:21:93:33:a4:40:62:f7:04:
5e:30:7c:9c:41:4a:86:fe:ac:34:f0:79:a0:75:dd:
96:79:b7:70:8e:d1:f4:fa:47:5b:8c:dc:75:6a:dd:
26:31:5e:8a:27:dc:04:4c:fe:be:bf:81:4d:2a:1d:
cf:d5:29:d6:ee:64:8a:e4:33:88:87:10:ab:4f:4a:
14:34:ed:67:e2:36:28:5b:dc:8a:66:dd:cb:23:89:
bc:ff:71:f9:c9:df:1a:ac:85:42:3f:4d:9a:21:34:
f6:e5:bb:09:52:53:9a:50:28:e0:ac:03:a9:28:bf:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:54:5F:B2:62:56:AD:34:95:62:7D:1B:80:B8:15:EA:E4:86:4B:DA
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/S1RfsmJWrTSVYn0bgLgV6uSGS9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.66.0/24
77.110.71.0/24
77.110.74.0/24
77.110.79.0/24
77.110.82.0/24
77.110.87.0/24
77.110.90.0/24
77.110.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1b:60:b0:e5:78:a1:d9:99:83:fc:5f:d2:38:dd:c5:97:47:
f5:5a:14:bb:a3:ce:2a:07:5a:8e:08:6e:9a:27:a2:40:99:d3:
0c:08:d0:1a:59:85:30:33:38:04:14:b1:f5:92:23:9e:61:e1:
bb:f2:b7:aa:90:94:11:98:ce:a6:a3:2a:e8:d7:8c:d8:de:66:
65:9b:53:df:b6:89:d1:75:6a:26:33:4e:a0:bc:31:fd:61:87:
29:71:09:53:e8:7d:92:94:76:48:6f:cc:49:d7:ef:6a:bd:44:
e0:ce:ad:ae:11:9b:a8:9c:83:b7:1e:54:82:c4:06:07:63:c8:
14:3f:b2:c5:c6:9a:74:2c:62:97:d2:e4:c3:2f:14:ab:a6:9d:
17:6e:f8:a0:67:6b:8f:0f:ce:5b:91:d6:8c:08:64:99:cb:1d:
bf:06:0d:4b:7f:88:68:a0:53:24:14:ca:19:c3:e1:97:da:d7:
bb:b4:08:62:7a:bd:08:d0:be:f4:b7:43:f4:7e:6b:f9:5a:dc:
01:11:a2:4c:65:fe:9e:38:f3:50:ef:da:7e:38:ed:e0:d3:b6:
6b:9a:1b:87:f7:e3:c3:ac:8e:1b:17:20:f8:1a:b6:67:ce:46:
dd:ed:da:17:7c:5e:58:ed:70:d0:d9:e2:71:eb:23:a7:5b:38:
80:0d:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:32:21 2025 by rpki-client