Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E1QmZBv0QwO_7T6Wr5DwgYsTcLg.roa
File: E1QmZBv0QwO_7T6Wr5DwgYsTcLg.roa (raw, json)
Hash identifier: 0yNcGWPTJlOwYCHZclrCpnk/Wt6wZAaXFzuG8oLjSB0=
Subject key identifier: 13:54:26:64:1B:F4:43:03:BF:ED:3E:96:AF:90:F0:81:8B:13:70:B8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198C6B98A56A5615108BB5D805B23637108
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E1QmZBv0QwO_7T6Wr5DwgYsTcLg.roa
Signing time: Wed 20 Aug 2025 09:05:04 +0000
ROA not before: Wed 20 Aug 2025 09:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 77.93.136.0/24 maxlen: 24
77.107.82.0/24 maxlen: 24
80.240.86.0/24 maxlen: 24
81.168.109.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:b9:8a:56:a5:61:51:08:bb:5d:80:5b:23:63:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 20 09:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135426641bf44303bfed3e96af90f0818b1370b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:9a:c8:87:62:20:3d:1f:36:fc:e9:64:76:
71:e5:2f:70:91:71:3c:bf:23:00:bc:14:c3:b9:c3:
5b:b1:3a:2a:ab:0e:ec:8d:eb:18:7f:6f:62:76:67:
3a:47:45:6a:a0:35:ca:5d:f5:2d:73:28:c5:8f:34:
6f:47:16:59:2a:eb:b3:8a:c2:37:c0:a5:19:28:c8:
11:ba:9e:eb:9c:7a:d0:59:9b:b1:6b:bf:f6:59:3c:
06:19:13:0b:73:35:99:57:da:d3:99:43:b7:dc:0b:
00:cb:a0:23:f1:51:74:71:64:1a:9a:d0:34:23:11:
6b:59:76:5b:be:03:35:60:58:48:26:32:b6:e5:d2:
f8:cd:bd:97:48:95:eb:aa:ec:b7:70:43:88:df:17:
79:79:aa:91:2a:f6:c8:85:6b:0f:81:a0:5f:76:68:
6d:02:2c:2d:5b:18:df:21:6b:0e:6d:c0:9f:fe:c2:
12:f3:f9:d3:c5:09:7c:17:d5:9a:30:15:bb:cb:be:
2d:2d:96:20:b7:f4:7d:32:9a:2c:f9:93:b5:ff:37:
97:d6:ca:56:a8:2a:40:fb:38:52:c6:65:51:99:b1:
4c:a6:ee:fc:2d:95:bc:9e:f7:09:84:0a:5b:e8:37:
a4:b6:7a:77:d7:17:5b:ac:f0:bf:43:70:c6:f0:38:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:26:64:1B:F4:43:03:BF:ED:3E:96:AF:90:F0:81:8B:13:70:B8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E1QmZBv0QwO_7T6Wr5DwgYsTcLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.136.0/24
77.107.82.0/24
80.240.86.0/24
81.168.109.0/24
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e6:64:47:9f:bf:7c:cd:2a:2d:4f:76:ea:d9:fc:37:a0:a3:
45:78:09:5a:82:74:75:c0:72:c8:7b:5a:1b:eb:27:a9:31:b9:
c7:a5:54:d9:39:a0:5b:77:8c:c1:1f:d2:ef:17:5d:3e:25:94:
4f:1a:46:af:70:bd:2c:6a:b8:41:ab:a1:0e:1c:76:bc:54:4e:
08:c5:40:9d:9e:ab:87:29:d3:90:00:be:e4:17:ab:5b:06:69:
54:ec:36:01:9e:5b:a4:14:ec:ba:82:c8:ab:dc:2b:8c:ca:ae:
8e:69:4b:96:ca:1c:29:5c:68:c9:8a:dc:23:0d:1f:39:3c:6d:
b5:5f:43:5b:c2:f1:69:dc:58:2b:92:88:89:4c:78:35:ec:ca:
80:69:fb:7d:b6:bb:d8:85:88:71:ad:72:f5:bc:61:a8:66:20:
a6:ee:e1:07:9c:1d:c1:e5:33:12:b7:25:53:37:90:ea:cd:79:
04:ae:0b:54:26:e7:12:fd:b7:c6:99:df:02:99:60:1a:34:12:
df:6a:f1:22:f8:6f:06:d1:f7:80:03:1e:9b:ed:b6:30:4a:62:
e3:73:f8:ea:ec:51:a9:12:98:fc:0c:83:13:e2:f2:73:f1:bb:
73:aa:0f:5d:e2:1f:4e:13:a3:3e:12:bf:93:7f:75:1b:26:13:
c5:07:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:30 2025 by rpki-client