Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/0BpOv7ID4DFMrx668XTbhOenKNs.roa
File: 0BpOv7ID4DFMrx668XTbhOenKNs.roa (raw, json)
Hash identifier: H36mM6sLdMLgLe3nc9mJCOTiie2y6GYALZ/i/6VFQPQ=
Subject key identifier: D0:1A:4E:BF:B2:03:E0:31:4C:AF:1E:BA:F1:74:DB:84:E7:A7:28:DB
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 01995C3F1B5C2DF50798A9AED0A07D8FA3CC
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/0BpOv7ID4DFMrx668XTbhOenKNs.roa
Signing time: Thu 18 Sep 2025 09:54:23 +0000
ROA not before: Thu 18 Sep 2025 09:54:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205410
IP address blocks: 77.74.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:3f:1b:5c:2d:f5:07:98:a9:ae:d0:a0:7d:8f:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Sep 18 09:54:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d01a4ebfb203e0314caf1ebaf174db84e7a728db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:cf:5a:7b:ae:6e:fd:6f:17:bf:28:db:4e:
12:86:d2:da:3a:e9:ce:22:70:d7:b6:5e:6f:62:32:
9f:0f:9d:b0:77:9b:96:b5:f9:48:76:e8:71:2b:65:
98:20:83:63:80:a1:b3:cd:30:0f:3b:0d:d6:4e:be:
07:1a:a7:7b:93:5b:cf:a5:7f:e1:e3:06:94:e5:01:
a0:e1:e1:73:98:0d:6b:d1:84:ed:79:10:79:c3:6e:
8b:84:d6:dc:66:4a:5b:ae:0b:6a:75:20:5e:58:7a:
61:26:b1:3e:c5:02:30:a8:f5:16:11:21:65:70:3a:
b4:5d:b7:e8:99:16:5b:3d:29:66:35:7e:6c:8c:41:
a7:5e:7b:8a:00:ba:1c:1f:e9:18:fc:00:f2:29:e9:
fa:c8:e1:ea:a4:be:a9:1e:fe:9b:5a:d3:18:19:00:
9e:c1:df:1e:96:31:4c:6d:21:5c:84:d1:e7:dc:3e:
6a:8b:1b:2f:34:e2:d8:9e:99:ec:66:d1:97:2e:dd:
b1:a0:12:a9:6d:71:bb:cc:41:71:77:0d:80:b0:75:
4b:c4:f9:27:cb:81:e4:c1:94:60:e2:0e:db:b4:1a:
cb:7b:e0:ad:c9:9b:78:9c:09:83:c9:a9:27:7a:10:
14:97:5b:ba:04:9b:d1:5c:b5:2e:90:60:5e:c9:f9:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1A:4E:BF:B2:03:E0:31:4C:AF:1E:BA:F1:74:DB:84:E7:A7:28:DB
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/0BpOv7ID4DFMrx668XTbhOenKNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.203.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a0:6f:34:53:76:c4:04:ef:6e:94:23:9a:d4:30:f4:aa:56:
e9:85:6e:47:72:ef:dc:35:f5:77:5c:85:71:e3:91:52:06:96:
c1:41:ee:d2:95:b1:3c:57:4b:89:83:90:4f:1b:37:92:16:9f:
80:db:3e:81:8b:50:89:47:a0:4c:b6:4d:62:51:54:61:67:3e:
a0:65:98:3c:fd:22:66:59:97:01:05:d9:b6:0b:98:71:1b:8d:
6d:8c:b0:e0:b0:20:38:a8:7f:9f:d7:69:92:75:86:b1:13:a0:
a4:08:e2:f9:30:ed:29:52:15:0c:fa:4f:56:fb:4f:90:d6:ab:
ef:1f:9a:85:ac:4b:22:de:7b:75:b3:f2:b5:99:de:ba:91:56:
e2:ce:88:77:1d:c2:b8:a7:fc:19:35:e4:24:a9:b5:57:a4:7a:
3a:2a:79:f6:61:a7:a9:bb:71:b3:26:81:d0:3e:f7:05:8d:96:
86:14:f0:01:cc:16:7f:5b:7a:8d:d6:9c:a8:78:e3:de:86:c4:
53:33:e9:d5:75:6d:30:60:b8:77:99:3e:94:c1:89:cc:17:08:
93:3e:c0:0a:86:71:8f:49:04:06:3e:7a:36:50:58:5a:01:9f:
5c:0a:31:f6:c7:06:e1:a4:33:cf:d2:a7:95:e5:0d:45:a7:f4:
2f:6f:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:23 2025 by rpki-client