Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/oT6eU5jg6GeWinI65AP3JkBdIEU.roa
File: oT6eU5jg6GeWinI65AP3JkBdIEU.roa (raw, json)
Hash identifier: 4mUdlmHKaTaONouB/qGCFubi9rj7ibQ9dZCuHDFkLAQ=
Subject key identifier: A1:3E:9E:53:98:E0:E8:67:96:8A:72:3A:E4:03:F7:26:40:5D:20:45
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01977D60FE2A8F2AD6BC339AEA4874D20541
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/oT6eU5jg6GeWinI65AP3JkBdIEU.roa
Signing time: Tue 17 Jun 2025 10:13:17 +0000
ROA not before: Tue 17 Jun 2025 10:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:60:fe:2a:8f:2a:d6:bc:33:9a:ea:48:74:d2:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 17 10:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a13e9e5398e0e867968a723ae403f726405d2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:63:e7:cf:a4:e8:61:f4:57:fa:44:ea:33:
45:79:d6:33:c3:8b:1e:69:f5:9a:71:c4:3f:11:8c:
14:07:69:b0:28:b2:f9:86:8f:d7:3e:62:da:14:4b:
bd:c7:7e:74:73:55:93:fb:1e:40:9e:a7:41:4d:96:
63:b7:ff:09:72:e9:8e:4b:0a:c6:10:6f:45:fc:06:
64:7d:0d:75:89:8b:33:7b:00:5b:11:c9:0b:3b:4d:
4c:4e:04:98:79:fd:dc:95:5c:ec:c6:32:1f:57:cd:
8a:f0:da:88:f6:b4:a4:d7:cf:7b:f9:ab:b6:73:83:
66:e8:16:97:2a:a6:cc:2c:3f:ce:43:6b:1e:ea:31:
c3:90:11:be:9c:c1:d4:5d:ee:a3:ac:46:50:b1:08:
25:08:ae:16:ff:ff:a1:b0:f7:d5:97:76:71:2a:9b:
5f:c5:d2:f8:25:47:57:0f:16:eb:f0:bd:0d:f1:d0:
eb:e1:01:69:a4:a3:88:bc:9a:79:b2:16:b1:70:e1:
ad:98:8f:d8:72:0f:7e:d2:03:a2:2c:8e:9f:6c:b2:
d5:6b:3c:86:1d:c5:be:43:14:3a:77:9f:7c:27:f8:
8e:60:a2:d8:57:79:49:fc:49:e3:d2:37:9e:e1:d0:
cd:77:ee:6e:e2:35:79:40:d2:ad:b5:8d:ac:a4:ee:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:9E:53:98:E0:E8:67:96:8A:72:3A:E4:03:F7:26:40:5D:20:45
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/oT6eU5jg6GeWinI65AP3JkBdIEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.248.0/21
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0-195.178.149.255
195.178.152.0-195.178.156.255
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:71:f8:64:90:a1:d8:4c:7f:5c:98:33:e1:2f:5a:b6:cf:7b:
5e:b5:6f:ad:e9:83:a7:d2:0a:8a:55:95:d8:66:2c:b4:e9:da:
15:3f:57:06:9e:ab:fa:af:58:1e:c0:ef:9a:6e:11:47:0e:5e:
6b:43:42:fd:2e:8b:48:e9:c7:8a:93:81:5c:b3:0d:24:9e:db:
49:a8:2c:c1:4c:b7:fa:73:29:56:a5:51:70:c7:d1:74:58:ec:
df:7e:75:aa:19:10:41:dd:73:24:29:db:ed:23:4f:49:d8:d9:
c9:fe:6d:c7:d8:a2:40:79:97:11:59:93:00:ab:5e:fd:85:15:
a8:9f:d7:9e:3b:86:e6:76:9d:b7:f2:a7:1e:c5:ef:94:04:a5:
3b:d5:24:7c:5f:bb:85:f8:3c:88:da:0a:f3:4c:ff:e6:c9:34:
dc:dd:2f:1b:c4:da:c9:21:b0:9c:ee:12:ec:3e:00:f2:60:27:
53:8f:9a:33:9e:e1:32:c0:96:06:3d:94:c3:e5:df:83:bf:40:
fd:b5:84:86:1f:85:c4:a5:87:c6:0a:6c:b1:f7:ab:8b:04:68:
69:e7:bc:ab:4f:03:2b:dd:8e:4c:17:6f:a4:b5:0a:e9:64:19:
d9:e7:7d:16:5d:27:46:3b:4e:95:8b:92:c4:50:ef:90:53:90:
c6:a8:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:46:41 2025 by rpki-client