Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/oZWWF5zyx5ocTW76AkaqmRcZRbc.roa
File: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (raw, json)
Hash identifier: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=
Subject key identifier: A1:95:96:17:9C:F2:C7:9A:1C:4D:6E:FA:02:46:AA:99:17:19:45:B7
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01976A6F71B482F3A8FF5F03B0CB41FF90B3
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/oZWWF5zyx5ocTW76AkaqmRcZRbc.roa
Signing time: Fri 13 Jun 2025 17:56:17 +0000
ROA not before: Fri 13 Jun 2025 17:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:6f:71:b4:82:f3:a8:ff:5f:03:b0:cb:41:ff:90:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jun 13 17:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19596179cf2c79a1c4d6efa0246aa99171945b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:c0:78:29:16:91:c9:ae:23:c1:7a:1b:b5:
f6:bb:4b:b1:36:d2:e4:79:00:22:e4:17:69:c7:13:
f5:40:4b:66:66:3d:ce:9f:ca:6a:a7:38:43:2e:4c:
2f:f7:de:ae:a0:1b:25:20:a3:ea:64:b5:f0:2a:96:
c3:56:1c:f9:8f:86:c9:0b:69:46:30:78:d1:e0:a7:
69:2b:33:02:4f:65:99:a4:59:54:ce:df:e8:7a:b7:
5d:59:09:44:3c:0e:3d:a8:95:76:47:f5:52:db:8c:
c2:cd:d8:ea:9c:47:61:fd:2f:51:be:aa:82:21:74:
3b:59:0d:58:17:46:fb:64:42:4a:9c:43:36:a8:04:
58:f0:61:f8:f9:25:d9:17:cf:17:41:69:58:07:85:
d0:bc:39:5e:56:90:8a:f4:97:f1:22:d7:0b:28:e5:
2b:21:7a:0e:b1:9f:a2:32:9c:98:ee:04:4b:48:83:
d0:a7:5d:ac:6a:0f:f2:86:45:e7:a8:ed:67:91:63:
95:69:f8:23:35:0f:7b:bf:22:45:18:0c:44:14:64:
d0:c2:20:e4:87:31:90:81:54:8a:ea:7b:f8:98:af:
32:5a:63:fe:6f:41:0c:72:02:27:2d:02:a6:32:d5:
8e:e7:d7:37:a2:bd:4a:f7:56:c1:3e:67:37:51:76:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:96:17:9C:F2:C7:9A:1C:4D:6E:FA:02:46:AA:99:17:19:45:B7
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/oZWWF5zyx5ocTW76AkaqmRcZRbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0-77.110.106.255
77.110.108.0-77.110.110.255
77.110.114.0-77.110.116.255
77.110.118.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
28:b6:9c:fe:79:ea:75:cf:64:56:dc:6f:fa:8f:0b:ab:00:16:
74:47:51:7c:e4:c3:77:b5:25:14:ae:cd:f3:5f:64:26:ed:f5:
c9:f4:60:db:7c:4f:65:3f:84:80:74:ee:a5:d9:1c:10:35:99:
8b:d2:f3:04:2b:e2:52:25:5a:d8:73:a3:48:65:80:c0:b4:2c:
44:ab:cf:90:c6:06:31:4c:54:98:5b:e9:a1:aa:e4:d7:ec:57:
2b:8c:5b:e9:4e:0d:c4:d5:84:2b:6a:93:f0:1f:e2:0b:05:aa:
38:22:f9:96:61:c4:2e:75:24:60:42:56:74:98:40:ef:a1:51:
b1:db:0d:22:e2:5a:06:5b:8b:93:4f:ea:48:24:16:88:39:a7:
95:e1:aa:97:ed:6a:8c:3d:25:00:09:00:41:c0:ee:52:6a:c0:
55:c4:5e:a1:95:47:c0:2d:77:e0:e8:cd:69:b0:6d:13:71:e5:
a0:1f:a1:37:5b:75:7b:6d:eb:7f:6e:c5:3e:f1:6b:3c:72:12:
23:54:e7:af:26:0a:31:83:b8:d8:a5:a1:b0:f7:96:a0:cd:ab:
aa:70:cc:8a:9b:b9:0e:e3:3e:57:37:1b:9a:7f:91:ea:d7:95:
7e:d1:65:83:05:8e:79:d6:05:b9:98:e1:74:7a:64:f0:fb:eb:
82:1b:b2:95
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZdqb3G0gvOo/18DsMtB/5CzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNjEzMTc1NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTk1OTYxNzljZjJjNzlhMWM0ZDZlZmEwMjQ2YWE5OTE3MTk0NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuHAeCkWkcmuI8F6G7X2u0uxNtLk
eQAi5BdpxxP1QEtmZj3On8pqpzhDLkwv996uoBslIKPqZLXwKpbDVhz5j4bJC2lG
MHjR4KdpKzMCT2WZpFlUzt/oerddWQlEPA49qJV2R/VS24zCzdjqnEdh/S9RvqqC
IXQ7WQ1YF0b7ZEJKnEM2qARY8GH4+SXZF88XQWlYB4XQvDleVpCK9JfxItcLKOUr
IXoOsZ+iMpyY7gRLSIPQp12sag/yhkXnqO1nkWOVafgjNQ97vyJFGAxEFGTQwiDk
hzGQgVSK6nv4mK8yWmP+b0EMcgInLQKmMtWO59c3or1K91bBPmc3UXZdbwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFKGVlhec8seaHE1u+gJGqpkXGUW3MB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvb1pXV0Y1enl4NW9jVFc3NkFrYXFtUmNaUmJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAVNbmAD
BABNbmowDAMEAk1ubAMEAE1ubjAMAwQBTW5yAwQATW50MAwDBAFNbnYDBAdNbgAw
DQYJKoZIhvcNAQELBQADggEBACi2nP556nXPZFbcb/qPC6sAFnRHUXzkw3e1JRSu
zfNfZCbt9cn0YNt8T2U/hIB07qXZHBA1mYvS8wQr4lIlWthzo0hlgMC0LESrz5DG
BjFMVJhb6aGq5NfsVyuMW+lODcTVhCtqk/Af4gsFqjgi+ZZhxC51JGBCVnSYQO+h
UbHbDSLiWgZbi5NP6kgkFog5p5Xhqpftaow9JQAJAEHA7lJqwFXEXqGVR8Atd+Do
zWmwbRNx5aAfoTdbdXtt639uxT7xazxyEiNU568mCjGDuNilobD3lqDNq6pwzIqb
uQ7jPlc3G5p/kerXlX7RZYMFjnnWBbmY4XR6ZPD764IbspU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:24:11 2025 by rpki-client