Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/F80HvAa8Dw_sS86aBHCmMTAIBvY.roa
File: F80HvAa8Dw_sS86aBHCmMTAIBvY.roa (raw, json)
Hash identifier: HWF3AT4DVyYm495EcP2L4wqZy+VgvjbKAYfO3pkAubg=
Subject key identifier: 17:CD:07:BC:06:BC:0F:0F:EC:4B:CE:9A:04:70:A6:31:30:08:06:F6
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01969FEE82FE872583E4D40E432442EA3621
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/F80HvAa8Dw_sS86aBHCmMTAIBvY.roa
Signing time: Mon 05 May 2025 10:12:10 +0000
ROA not before: Mon 05 May 2025 10:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.8.0/23 maxlen: 24
77.120.9.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 24
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ee:82:fe:87:25:83:e4:d4:0e:43:24:42:ea:36:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: May 5 10:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17cd07bc06bc0f0fec4bce9a0470a631300806f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:ad:f0:23:49:a4:e7:fe:1e:1a:a1:5f:30:
9a:d5:9e:22:b1:e0:54:dc:70:c8:b3:37:2a:36:91:
7d:ce:c6:c6:72:2a:96:6f:02:70:a9:54:4b:5e:b0:
32:cb:8f:92:5e:35:ce:19:64:ac:c8:26:c1:78:09:
86:b0:db:24:0b:54:05:fd:b6:bb:aa:f4:57:1d:38:
e0:98:80:e1:20:da:07:cd:cf:83:d1:9d:f0:9a:49:
4a:96:02:bd:6b:c2:f3:5c:d4:68:2d:04:17:15:b7:
55:6d:63:61:69:68:19:23:b1:ae:a5:54:eb:7d:02:
84:a0:8d:49:f8:91:af:f2:ac:93:f7:68:f8:43:ce:
f8:70:45:f3:55:02:ab:fb:0d:1b:a5:f1:36:7e:fb:
54:d3:66:cc:f2:d7:56:b9:3e:0e:de:f1:4d:41:37:
3c:9f:1e:f8:f0:6e:54:8d:64:1e:04:41:b1:a6:90:
91:6f:76:68:b3:82:a1:57:d6:e4:b2:3a:e2:66:1d:
0f:7e:50:53:73:c8:56:f2:b0:68:dc:51:58:a6:7e:
c6:16:38:9e:e6:8a:ec:19:a4:60:bf:dd:5d:6f:16:
64:3f:3e:fc:01:d8:14:d9:79:1d:53:67:27:95:63:
30:ec:d4:4d:6f:dc:86:0d:c5:e8:74:48:bd:ee:b8:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:07:BC:06:BC:0F:0F:EC:4B:CE:9A:04:70:A6:31:30:08:06:F6
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/F80HvAa8Dw_sS86aBHCmMTAIBvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.199.255
77.120.208.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0/19
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:41:9a:59:17:67:ee:8f:73:ed:f7:da:e9:fd:cc:43:07:a8:
0c:69:28:27:3b:04:6a:ad:14:0c:9d:81:87:19:2e:d2:b6:99:
07:9f:9f:96:77:e2:d3:84:64:0b:55:fb:59:59:a8:ee:ee:02:
fb:b5:e8:4a:ff:00:10:32:44:35:90:19:0a:c1:3c:24:f4:fa:
f2:ad:f5:6c:90:f0:1a:fc:e9:c7:31:a3:16:e5:0f:46:fe:a9:
37:47:d2:0d:93:58:f1:d6:56:44:18:bd:5e:04:3b:3d:16:ad:
bf:2e:ac:c8:bf:6b:09:52:78:89:47:f6:de:7e:bf:a2:45:86:
e1:66:c6:45:71:22:4f:0b:7f:26:2b:d5:d3:2b:21:9a:df:49:
94:c1:30:b1:60:5b:4e:cf:b8:9c:2c:8a:37:21:d4:56:1f:89:
3a:db:60:c5:2e:f8:2e:69:c3:07:24:03:2c:f8:3b:27:1d:6f:
b2:40:a9:98:44:bd:c5:f6:42:d9:a7:54:5e:ff:ea:93:37:d9:
73:69:4c:a8:34:6e:c9:48:62:3d:1c:b6:7d:ec:b4:9a:cf:45:
2f:ec:88:7f:0c:ae:cf:f8:ba:7d:da:38:0f:f9:17:d9:50:61:
7a:44:2c:65:b1:c3:88:83:b0:8a:a7:92:bf:52:7e:eb:5e:d9:
db:7b:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:21 2025 by rpki-client