Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/SO2aAnB4S5yHRruYM18XroAhS7s.roa
File: SO2aAnB4S5yHRruYM18XroAhS7s.roa (raw, json)
Hash identifier: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=
Subject key identifier: 48:ED:9A:02:70:78:4B:9C:87:46:BB:98:33:5F:17:AE:80:21:4B:BB
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019784B6BCFDA376C5831A360D9EB99C621B
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/SO2aAnB4S5yHRruYM18XroAhS7s.roa
Signing time: Wed 18 Jun 2025 20:24:17 +0000
ROA not before: Wed 18 Jun 2025 20:24:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.110.67.0/24 maxlen: 24
77.110.75.0/24 maxlen: 24
77.110.83.0/24 maxlen: 24
77.110.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:b6:bc:fd:a3:76:c5:83:1a:36:0d:9e:b9:9c:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jun 18 20:24:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ed9a0270784b9c8746bb98335f17ae80214bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:43:05:ea:c2:48:19:f2:c0:18:f5:09:31:
ed:b8:10:5b:29:10:2a:0b:f6:53:07:14:41:37:6a:
c1:75:10:78:84:59:02:1e:36:a5:8f:5f:3a:6c:1c:
d5:9e:09:f1:c9:0b:f6:c4:31:96:b3:ca:d2:4f:d3:
5e:13:7b:9f:21:6a:3a:58:a8:09:eb:d9:ec:8b:54:
6b:f2:6c:a7:33:8c:f3:95:7d:d5:dc:f5:a0:ee:a5:
f0:77:41:2c:96:c4:26:6f:4d:94:76:2d:de:10:f6:
82:6d:67:f5:4a:2a:78:df:76:8e:b5:0b:b3:1b:5d:
64:b2:04:34:87:e0:08:36:29:c2:6b:f3:4f:c9:27:
97:70:f6:aa:12:b1:86:53:cb:0e:2f:f7:34:09:91:
ee:d5:3f:42:41:af:a9:ce:7e:4e:7d:68:ea:9f:e2:
ef:f1:52:86:82:89:8b:12:fd:ea:bc:c4:2d:9a:b9:
1b:af:1b:e0:d7:32:5c:34:d8:f4:82:84:31:cb:cb:
1f:41:c7:4f:e1:ad:00:66:c5:42:f6:fa:c3:85:9f:
39:81:39:ed:ba:f5:d9:d5:7b:a4:a9:86:97:91:6c:
cc:32:53:24:8b:52:25:f7:60:ac:65:0c:54:5e:02:
76:c2:e7:9b:91:96:81:af:ee:ac:74:dc:16:b0:7c:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:9A:02:70:78:4B:9C:87:46:BB:98:33:5F:17:AE:80:21:4B:BB
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/SO2aAnB4S5yHRruYM18XroAhS7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.67.0/24
77.110.75.0/24
77.110.83.0/24
77.110.91.0/24
Signature Algorithm: sha256WithRSAEncryption
18:62:f4:58:78:1e:0e:7f:76:a9:9a:0b:cf:b2:e4:92:25:c6:
81:2e:f9:09:c8:0c:4c:04:df:38:9a:38:54:66:d1:16:87:42:
68:c3:b9:a1:81:a0:ab:15:eb:bb:bd:62:0c:3d:75:c3:1b:d3:
2c:bb:2f:ea:19:bc:ab:06:e1:0b:de:45:c6:f4:fa:bc:f2:cd:
76:ba:40:53:8f:d2:e3:fa:4f:5e:18:d4:2e:10:46:ff:ff:3d:
8b:ca:27:27:59:ea:4c:de:a8:2f:b2:86:ba:da:40:2b:57:0e:
96:27:6e:82:e6:0a:92:f8:8e:d7:f4:07:cd:d9:fc:52:81:33:
4b:34:d4:2f:2e:62:95:17:e6:15:97:15:03:2d:44:ee:41:e5:
02:00:35:11:e5:61:4f:92:d7:45:6d:e6:68:6f:ab:b5:40:2d:
76:ef:3e:77:09:87:72:b4:33:55:92:77:c1:0e:e1:ec:d3:aa:
e0:08:cf:cb:e5:f2:31:ce:66:e1:d0:c7:46:a7:a0:8a:78:30:
c6:0d:d2:1d:44:13:0a:16:63:34:27:78:20:94:da:c6:ea:b4:
95:53:71:aa:2c:2c:55:7b:8d:38:61:e0:dc:12:7c:da:7c:f1:
a5:15:b7:7a:9b:83:16:10:7e:86:c8:1a:cb:a3:79:32:1b:1b:
fd:88:d2:67
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZeEtrz9o3bFgxo2DZ65nGIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNjE4MjAyNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGVkOWEwMjcwNzg0YjljODc0NmJiOTgzMzVmMTdhZTgwMjE0YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljJDBerCSBnywBj1CTHtuBBbKRAq
C/ZTBxRBN2rBdRB4hFkCHjalj186bBzVngnxyQv2xDGWs8rST9NeE3ufIWo6WKgJ
69nsi1Rr8mynM4zzlX3V3PWg7qXwd0EslsQmb02Udi3eEPaCbWf1Sip433aOtQuz
G11ksgQ0h+AINinCa/NPySeXcPaqErGGU8sOL/c0CZHu1T9CQa+pzn5OfWjqn+Lv
8VKGgomLEv3qvMQtmrkbrxvg1zJcNNj0goQxy8sfQcdP4a0AZsVC9vrDhZ85gTnt
uvXZ1XukqYaXkWzMMlMki1Il92CsZQxUXgJ2wuebkZaBr+6sdNwWsHwxvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEjtmgJweEuch0a7mDNfF66AIUu7MB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvU08yYUFuQjRTNXlIUnJ1WU0xOFhyb0FoUzdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATW5DAwQA
TW5LAwQATW5TAwQATW5bMA0GCSqGSIb3DQEBCwUAA4IBAQAYYvRYeB4Of3apmgvP
suSSJcaBLvkJyAxMBN84mjhUZtEWh0Jow7mhgaCrFeu7vWIMPXXDG9Msuy/qGbyr
BuEL3kXG9Pq88s12ukBTj9Lj+k9eGNQuEEb//z2LyicnWepM3qgvsoa62kArVw6W
J26C5gqS+I7X9AfN2fxSgTNLNNQvLmKVF+YVlxUDLUTuQeUCADUR5WFPktdFbeZo
b6u1QC127z53CYdytDNVknfBDuHs06rgCM/L5fIxzmbh0MdGp6CKeDDGDdIdRBMK
FmM0J3gglNrG6rSVU3GqLCxVe404YeDcEnzafPGlFbd6m4MWEH6GyBrLo3kyGxv9
iNJn
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:20 2025 by rpki-client