Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa
File: 5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa (raw, json)
Hash identifier: Tk6h46GooTA/gBtAz3CQBGmG5ai7s8MBzIVWccJFxM0=
Subject key identifier: E7:30:41:3F:A0:3D:C9:7C:4F:9C:84:F9:CD:92:0E:C4:05:E7:5A:7F
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 0199A5F68DC8DC1675BE6DF6B2A6A7D0664E
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa
Signing time: Thu 02 Oct 2025 17:27:02 +0000
ROA not before: Thu 02 Oct 2025 17:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216300
IP address blocks: 77.105.128.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.132.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
77.105.164.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:f6:8d:c8:dc:16:75:be:6d:f6:b2:a6:a7:d0:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Oct 2 17:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e730413fa03dc97c4f9c84f9cd920ec405e75a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:b2:44:c7:42:ce:e8:6c:0e:5c:f9:a4:f0:
a0:f6:e5:a1:df:bd:fd:ea:a4:be:f5:7b:25:18:9c:
16:62:9c:36:b8:d1:2c:aa:43:da:53:09:c6:fc:72:
84:ef:a1:50:32:bd:d3:b2:89:b0:e4:34:64:6d:51:
99:75:a3:4a:bc:cf:98:2e:3a:e6:48:ce:87:80:89:
f6:1e:05:f7:6f:9f:07:2a:aa:25:2e:2c:88:bd:d3:
c0:20:e3:8e:b8:0c:6c:c8:20:85:4f:14:21:00:f1:
68:c1:af:e4:a1:fe:cf:5d:69:d9:cd:25:fc:b2:26:
39:93:5f:a9:e6:c0:73:c0:87:ae:db:36:ce:0d:a5:
68:19:fe:8d:c3:77:7d:d3:00:49:87:38:4d:86:b4:
f1:9d:0a:9e:50:86:51:80:e2:68:b4:f3:4c:b7:9e:
32:3b:fb:39:91:1d:20:3b:62:eb:b1:5e:45:d2:05:
0c:35:ee:57:12:51:0c:36:5e:c8:9b:82:2d:1f:ed:
73:20:f5:7d:39:b9:e1:bb:92:2b:17:14:8b:ba:b5:
6e:d9:73:c6:27:40:13:9c:cd:4f:5c:04:8d:98:35:
b6:3e:ec:d9:55:44:f6:a8:44:67:62:f3:40:72:c2:
9c:2f:15:78:a9:45:8f:89:10:d9:e3:64:a9:ba:f3:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:41:3F:A0:3D:C9:7C:4F:9C:84:F9:CD:92:0E:C4:05:E7:5A:7F
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.130.255
77.105.132.0/24
77.105.134.0/23
77.105.160.0/24
77.105.164.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:90:61:39:82:70:82:2d:8b:b9:eb:02:a9:85:d6:61:24:cd:
04:18:40:e8:0e:28:d1:dd:8d:b2:ad:0e:14:9f:f6:97:c6:24:
7c:0c:88:a6:45:91:81:5c:b5:c9:1c:34:7e:1d:00:b7:bb:69:
4e:5c:b5:f7:ab:a4:d5:ef:f9:b5:b6:c8:68:07:27:96:16:f2:
33:3f:5f:45:5f:ca:13:b3:56:ac:d8:df:a5:51:86:31:46:58:
b3:e1:84:0a:56:c1:cb:2b:2e:09:aa:7b:af:95:54:28:65:e8:
8a:08:f7:17:e2:01:48:d1:0b:fe:b8:d1:35:6e:b3:e1:4a:65:
a1:2c:d5:23:ca:fb:84:d6:13:d7:65:35:24:f3:ac:d4:44:20:
3e:a8:01:e7:e5:91:95:44:64:d7:6c:0b:e9:13:8f:4a:02:28:
c0:18:bd:57:52:05:67:64:35:b0:af:f4:a4:58:5e:7b:ca:08:
17:12:d5:8e:b6:4f:18:2b:b4:ab:86:9a:1d:0a:85:0e:14:1d:
c9:0e:40:d7:8d:a3:f2:b6:ef:56:4f:08:a9:44:6c:4f:74:da:
e0:a4:b5:c1:7d:34:68:d5:cc:5d:13:8c:2d:fc:1d:3b:6d:d0:
64:96:c8:af:d2:ac:64:d6:52:33:cf:fb:d2:ac:cb:94:55:77:
47:ca:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:05 2025 by rpki-client