Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa
File: tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa (raw, json)
Hash identifier: goqPhfATTY7UUdH4nZlMzNdPQpsyFFgFHBxyoIIk6WA=
Subject key identifier: B7:3B:31:C6:AD:D6:98:2B:AC:CD:AF:EB:F4:D9:3B:01:6C:47:EC:99
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 0198A79BD603ADB3D570D04414770E188E23
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa
Signing time: Thu 14 Aug 2025 08:04:24 +0000
ROA not before: Thu 14 Aug 2025 08:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 77.90.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:9b:d6:03:ad:b3:d5:70:d0:44:14:77:0e:18:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Aug 14 08:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b73b31c6add6982baccdafebf4d93b016c47ec99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:c5:9d:1a:d8:85:23:9a:6e:5d:1d:11:3e:
dd:dc:13:1a:b2:81:51:35:ab:16:12:33:60:0e:a9:
91:7c:a5:02:99:54:e6:07:b7:4f:7b:07:d8:18:f0:
5e:9a:f6:58:3f:10:3a:e9:b2:1c:57:44:43:46:3a:
37:e6:fb:d1:66:94:20:eb:10:20:7b:29:ff:00:0c:
e7:2f:de:5d:68:c3:f7:3d:26:2d:32:e3:d2:52:80:
f9:1f:87:01:c0:b8:46:06:62:a3:82:30:58:1c:fc:
16:6f:7b:5a:f9:b7:f8:0f:8c:b5:47:3d:67:55:73:
7b:ea:da:be:9c:18:6b:4b:0d:db:43:2f:8b:c9:83:
44:0e:d8:f6:2e:3f:24:a9:95:51:f0:5e:bf:f4:88:
13:90:ea:42:9d:a8:f0:f1:78:44:32:9e:23:bf:80:
dc:02:66:ee:ba:a6:0a:a1:9c:2a:9f:3a:d0:f5:4c:
6a:f3:f1:b4:8c:ae:d2:c1:78:64:e8:1f:b1:14:79:
93:c1:49:d4:63:eb:84:b9:ff:ab:29:5c:fa:2a:54:
51:93:f8:c4:95:5e:ff:68:01:31:a2:ee:c8:dc:69:
f8:69:ba:6a:d8:bb:ad:1e:ca:e2:6a:4b:6e:e7:bd:
f1:be:e4:3e:66:e8:12:26:df:8a:d2:bb:56:d3:53:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:31:C6:AD:D6:98:2B:AC:CD:AF:EB:F4:D9:3B:01:6C:47:EC:99
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4e:79:7d:64:c9:2d:0a:c0:9d:7c:26:17:b7:61:e0:86:f4:
00:75:c3:a2:ac:50:c3:fc:96:a7:50:d0:b9:7a:1f:48:71:fa:
46:44:3f:70:a2:40:05:a9:d1:29:92:65:61:cf:8c:bf:44:6e:
3a:f2:34:59:3f:38:3b:72:00:ac:65:f9:4f:69:9c:87:a3:03:
29:10:b6:46:07:91:21:78:5f:d1:8b:6d:55:c4:86:5e:fb:20:
ce:bc:e2:81:d4:1e:4e:11:9b:d0:f0:0d:ab:65:d9:1a:64:cb:
42:31:4e:5e:ed:03:cc:97:9a:c7:5f:3e:ad:3a:5a:2d:80:f5:
c6:12:bf:ac:66:18:e9:52:15:26:c0:f2:91:48:7f:5f:af:42:
66:8f:ee:e4:06:2a:d5:8a:da:e6:87:f6:02:5e:e2:cd:8a:fd:
e3:7a:3e:08:e1:af:f2:5e:44:68:80:a6:de:bf:ab:a7:55:38:
bc:66:db:a4:92:da:5f:ac:c7:25:b5:27:9b:69:bf:3b:21:eb:
70:82:f4:1c:8e:15:d7:2c:02:43:d6:30:c7:9c:4d:05:83:11:
fc:00:a9:b3:8f:92:31:82:72:93:01:74:d7:12:6c:53:6f:61:
12:99:16:dd:7c:22:fc:5b:d0:96:3d:fe:03:50:c9:22:66:3a:
98:3d:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:09:18 2025 by rpki-client