Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/UF3Vre6C-2uWPd901r4ODYt5AHA.roa
File: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (raw, json)
Hash identifier: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=
Subject key identifier: 50:5D:D5:AD:EE:82:FB:6B:96:3D:DF:74:D6:BE:0E:0D:8B:79:00:70
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01969773CB3075A4BD868A3726D279FF2FD1
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/UF3Vre6C-2uWPd901r4ODYt5AHA.roa
Signing time: Sat 03 May 2025 18:41:10 +0000
ROA not before: Sat 03 May 2025 18:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 77.110.112.0/24 maxlen: 24
77.110.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:73:cb:30:75:a4:bd:86:8a:37:26:d2:79:ff:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 3 18:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505dd5adee82fb6b963ddf74d6be0e0d8b790070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:a1:2d:60:36:e9:b6:67:ef:54:f2:ba:3e:
c0:28:75:5f:de:17:8d:6b:4b:6a:44:ea:50:17:92:
54:42:95:3b:03:f1:9d:d2:e4:17:59:7d:41:b3:9a:
dd:e4:88:f3:41:4a:16:cb:ff:21:1b:2e:03:b8:b4:
bb:7b:6f:83:fe:76:4d:0a:24:32:36:ff:87:f5:11:
41:2b:40:ae:d2:ca:ad:3a:5f:b7:63:14:40:aa:eb:
00:1f:22:e6:1a:bb:19:8b:91:fc:0f:23:77:96:67:
1e:57:08:93:ee:58:d6:31:31:c7:97:64:31:64:d0:
30:66:84:13:6f:fd:e4:dd:33:3a:51:07:e3:3c:e7:
ec:e4:f5:60:b4:68:6c:6f:c3:89:3d:6b:33:2d:c8:
1b:d1:b2:ba:3c:ec:b3:b8:3e:47:22:30:88:a7:d0:
0a:64:1e:8a:f9:54:1a:7d:4e:48:cd:9a:9c:db:1f:
3c:b6:db:38:18:d4:25:27:5a:55:6b:7a:13:ec:d6:
f6:ad:12:58:28:60:f3:ad:8d:86:77:08:73:5c:18:
c1:56:34:89:b0:d3:11:75:df:a0:28:4c:fd:10:78:
fb:ba:7a:39:08:5e:50:91:8f:de:66:c9:a4:dd:50:
c0:80:45:6e:26:5b:90:8e:80:73:8d:83:85:ee:60:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5D:D5:AD:EE:82:FB:6B:96:3D:DF:74:D6:BE:0E:0D:8B:79:00:70
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/UF3Vre6C-2uWPd901r4ODYt5AHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:2d:13:b9:a8:63:d7:41:fc:f6:07:63:2a:10:b2:93:1b:37:
ce:42:6e:04:3c:68:14:0d:9f:7f:f3:61:72:cd:3a:ed:76:5d:
a1:17:43:df:d6:d3:5e:e3:b9:3a:04:45:d6:53:e5:2c:77:e7:
d8:52:f1:ce:af:8c:4d:52:64:cd:cf:36:b8:fb:52:1f:ba:25:
25:3f:18:4d:44:e5:d7:ab:aa:e6:9f:26:cb:3c:64:1b:64:03:
74:ca:57:90:aa:6d:61:3a:20:65:8d:59:fd:c7:64:36:d7:94:
be:4c:4b:02:59:93:24:8f:f8:de:ad:38:9a:d1:fe:12:20:01:
95:81:8d:1c:11:8b:02:0a:eb:bf:09:77:50:50:9f:bb:09:26:
40:55:37:28:9a:2e:e4:84:3f:7f:02:59:4b:49:24:6a:b1:99:
c5:8a:0f:7c:a3:70:4b:2d:ad:9b:42:64:ff:f6:73:8a:be:24:
d6:f9:16:75:0f:0b:14:ee:d1:2c:85:f6:d3:44:c2:b3:24:0c:
f3:23:73:1b:bf:1d:eb:43:cf:8f:8c:0f:37:68:97:a8:2b:c1:
78:8d:48:fd:9c:dd:df:b3:e0:b0:09:a2:46:8f:0c:4c:8c:7d:
d9:d8:42:2b:4c:81:13:40:3f:67:c2:4f:1b:db:23:78:e4:98:
2d:02:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:26:23 2025 by rpki-client