Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/CjLSMGibyEhdelyfZmqFOB2qECU.roa
File: CjLSMGibyEhdelyfZmqFOB2qECU.roa (raw, json)
Hash identifier: pqhinrFyaD+q2aZAUbDW8Bbgn5UMRjvfkqqXaugexmo=
Subject key identifier: 0A:32:D2:30:68:9B:C8:48:5D:7A:5C:9F:66:6A:85:38:1D:AA:10:25
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 0199188CFF9551DDA63DCD00C6B5A87F6131
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/CjLSMGibyEhdelyfZmqFOB2qECU.roa
Signing time: Fri 05 Sep 2025 06:25:17 +0000
ROA not before: Fri 05 Sep 2025 06:25:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42539
IP address blocks: 77.235.80.0/21 maxlen: 21
77.235.88.0/22 maxlen: 22
77.235.92.0/23 maxlen: 23
77.235.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:8c:ff:95:51:dd:a6:3d:cd:00:c6:b5:a8:7f:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Sep 5 06:25:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a32d230689bc8485d7a5c9f666a85381daa1025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:25:bf:df:d1:44:5e:a0:de:9b:4e:f0:4e:
c7:f9:c4:bd:f0:1d:9b:d8:e0:de:ec:26:3e:f6:4e:
a4:66:fe:63:e0:02:22:5f:3c:51:68:e7:79:11:1d:
44:10:40:62:4e:aa:80:d1:01:9a:87:a3:2c:5a:c0:
b5:e6:50:e1:c0:be:e0:69:39:f9:2d:7a:ab:44:42:
e6:0b:62:b9:c1:11:4f:e9:7f:b3:af:db:f6:20:af:
cf:be:b5:5d:60:95:28:7d:29:f3:b1:f9:a3:5d:ec:
09:a6:fb:ab:3c:a8:ab:4d:69:42:7a:9b:9e:6e:34:
fe:f3:32:a1:29:25:b6:2d:d9:45:03:32:4a:f8:0f:
ae:48:57:a7:ab:83:08:bf:38:b5:79:b5:96:43:5b:
e6:67:9a:67:6b:94:58:05:f5:a1:f6:ba:1a:f5:55:
e6:a9:8f:57:1c:e1:65:91:dd:4b:d3:52:32:8e:96:
da:ca:89:ab:6a:9f:68:f9:86:cf:1a:9a:43:a7:2d:
67:5e:66:4f:49:3d:db:38:9f:a6:01:68:4d:f8:d6:
93:d9:a5:a6:e7:67:f5:2a:d5:52:3b:d9:80:f7:de:
e9:fb:df:3d:e2:ab:0e:02:aa:d0:43:37:13:4e:58:
37:7a:b3:08:16:c6:e4:3d:b8:67:03:b8:b8:14:f8:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:D2:30:68:9B:C8:48:5D:7A:5C:9F:66:6A:85:38:1D:AA:10:25
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/CjLSMGibyEhdelyfZmqFOB2qECU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.80.0-77.235.94.255
Signature Algorithm: sha256WithRSAEncryption
71:6b:e4:d2:51:8a:90:d5:8f:08:fa:8a:18:b6:96:8c:6e:8f:
d3:c5:7d:b7:19:a2:4e:63:d7:96:62:3c:b1:13:d9:04:73:a5:
4f:86:f1:d3:ca:4d:35:ae:87:9d:b1:5c:5f:9c:1f:12:89:09:
ac:70:72:e6:97:9b:d7:10:99:a1:87:47:7d:7e:f8:97:b8:46:
eb:e6:63:f1:e8:6c:8d:d3:05:10:b9:d6:2c:61:39:2d:4c:fd:
f9:29:e3:92:76:26:0b:3f:61:39:b1:82:ae:a5:50:8f:45:4d:
8a:43:f7:80:f5:2b:ef:ed:76:7d:6a:b0:f1:05:43:e1:75:7c:
d8:67:0b:4d:4f:1e:03:49:2a:7b:ca:69:8b:fa:31:73:bf:5e:
d2:38:ee:a5:6a:2b:74:8a:f2:2b:73:3e:7d:19:e2:32:ed:32:
08:90:e8:4b:5f:ce:d7:32:46:7b:ec:bd:29:6d:47:e4:9c:1d:
d7:82:d3:ea:72:e7:48:0f:b6:ba:88:22:e4:40:21:36:fd:38:
cf:37:86:7c:22:c3:60:fb:26:b6:8c:1f:1d:e6:bd:38:c8:34:
49:dc:fb:af:52:4e:32:d0:46:d2:38:75:62:26:7d:90:b9:65:
a5:ac:06:67:75:8b:ce:ec:27:47:fc:be:16:ef:1a:9c:7f:5e:
99:2c:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:22 2025 by rpki-client