
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0ocoOJjGaz_DWh8wZ02oSSRTTgk.roa
File: 0ocoOJjGaz_DWh8wZ02oSSRTTgk.roa (raw, json)
Hash identifier: yZYN8kYOhYox9kSTYDoVA1HHBK8u3Xqffds/KwGK++Q=
Subject key identifier: D2:87:28:38:98:C6:6B:3F:C3:5A:1F:30:67:4D:A8:49:24:53:4E:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019885338FDEE29853547923EB7B95E071F6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0ocoOJjGaz_DWh8wZ02oSSRTTgk.roa
Signing time: Thu 07 Aug 2025 15:43:25 +0000
ROA not before: Thu 07 Aug 2025 15:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10111
IP address blocks: 77.107.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:33:8f:de:e2:98:53:54:79:23:eb:7b:95:e0:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 15:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d287283898c66b3fc35a1f30674da84924534e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:6d:31:e8:14:35:a5:27:c2:b8:b2:8b:14:
d9:02:48:a0:18:e1:de:12:9b:69:f4:6d:c2:95:8b:
1c:12:6c:b7:c7:31:5a:2d:fd:5f:fa:ff:92:a0:4d:
21:ca:e5:22:3f:19:4c:1b:ae:d2:23:0f:12:ee:f4:
c9:85:04:5f:7b:5f:a7:f6:5a:e0:2f:e2:c6:66:64:
37:03:f4:40:e3:c4:b4:12:af:09:4f:30:70:ac:4c:
04:68:9f:50:fb:04:3b:43:6a:07:fb:d3:c6:b8:52:
a2:35:9b:50:16:9c:4e:36:c0:df:01:63:72:ac:87:
fd:a1:bc:18:15:34:7a:29:34:f9:f6:fa:13:54:8a:
af:6e:ff:a3:4d:0b:5a:57:b7:68:6e:8c:32:55:ca:
0c:21:31:af:83:d3:47:8e:ac:96:9b:65:51:37:0a:
dc:d0:d5:09:07:df:21:5f:15:e2:a6:08:a3:00:9f:
74:d1:19:57:da:79:0c:14:e5:b4:0e:35:5b:6f:69:
10:09:f8:8e:7e:7a:1a:35:3a:7c:bc:bc:e5:b8:5f:
ce:8e:f3:e6:34:5d:7a:f4:ca:58:e4:cd:73:ed:8e:
cc:dc:88:56:4f:03:51:31:81:95:19:68:17:fa:6b:
5d:11:20:40:1f:b9:21:0e:9b:d3:2b:f1:f4:4e:e7:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:28:38:98:C6:6B:3F:C3:5A:1F:30:67:4D:A8:49:24:53:4E:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0ocoOJjGaz_DWh8wZ02oSSRTTgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.118.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8a:95:9e:de:b9:89:55:d9:e8:93:0c:83:f9:02:a8:ea:19:
e2:e0:2a:66:97:b1:2c:66:ca:69:b1:ad:84:cf:9a:af:78:26:
21:9d:32:cf:53:3e:52:5f:ba:1f:3c:c7:25:ca:d5:b7:be:79:
44:f6:69:f8:6b:05:a7:e8:d1:bf:bb:c5:a1:84:c0:7a:8e:c4:
8c:9a:ff:81:34:6f:89:ec:57:5c:48:8e:3a:b1:6d:9a:a3:d7:
76:ec:e8:73:22:a2:59:de:70:9d:a8:fb:29:b4:b4:23:10:77:
6f:e4:73:84:d9:4e:ed:02:9a:eb:53:85:82:be:a2:1f:c6:5f:
54:f1:4b:b9:a1:8a:9b:4d:43:18:09:fd:0c:05:a7:68:be:ce:
bd:4b:75:fb:0a:75:bf:0c:e7:1d:7e:78:bd:5d:e8:71:3d:65:
c7:70:ee:37:ee:22:f7:af:c7:76:41:43:b9:ab:54:da:4c:fb:
39:e3:c9:79:cd:2c:e6:e5:10:06:81:14:99:63:a3:92:ac:32:
a9:4f:68:bc:5c:58:9b:a7:6a:f4:83:64:a5:c8:9f:e4:2c:33:
cb:ce:34:ca:b2:94:ab:d1:75:21:a7:a4:1d:52:bf:1f:32:68:
cb:8b:a2:38:93:03:04:69:ee:fc:09:cc:5c:2f:e6:d9:61:20:
a1:d1:a0:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiFM4/e4phTVHkj63uV4HH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwODA3MTU0MzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjg3MjgzODk4YzY2YjNmYzM1YTFmMzA2NzRkYTg0OTI0NTM0ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ZtMegUNaUnwriyixTZAkigGOHe
Eptp9G3ClYscEmy3xzFaLf1f+v+SoE0hyuUiPxlMG67SIw8S7vTJhQRfe1+n9lrg
L+LGZmQ3A/RA48S0Eq8JTzBwrEwEaJ9Q+wQ7Q2oH+9PGuFKiNZtQFpxONsDfAWNy
rIf9obwYFTR6KTT59voTVIqvbv+jTQtaV7dobowyVcoMITGvg9NHjqyWm2VRNwrc
0NUJB98hXxXipgijAJ900RlX2nkMFOW0DjVbb2kQCfiOfnoaNTp8vLzluF/OjvPm
NF169MpY5M1z7Y7M3IhWTwNRMYGVGWgX+mtdESBAH7khDpvTK/H0TufMmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNKHKDiYxms/w1ofMGdNqEkkU04JMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMG9jb09Kakdhel9EV2g4d1owMm9TU1JUVGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWt2MA0G
CSqGSIb3DQEBCwUAA4IBAQAhipWe3rmJVdnokwyD+QKo6hni4Cpml7EsZsppsa2E
z5qveCYhnTLPUz5SX7ofPMclytW3vnlE9mn4awWn6NG/u8WhhMB6jsSMmv+BNG+J
7FdcSI46sW2ao9d27OhzIqJZ3nCdqPsptLQjEHdv5HOE2U7tAprrU4WCvqIfxl9U
8Uu5oYqbTUMYCf0MBadovs69S3X7CnW/DOcdfni9XehxPWXHcO437iL3r8d2QUO5
q1TaTPs548l5zSzm5RAGgRSZY6OSrDKpT2i8XFibp2r0g2SlyJ/kLDPLzjTKspSr
0XUhp6QdUr8fMmjLi6I4kwMEae78CcxcL+bZYSCh0aD8
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:23 2025 by rpki-client