Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/dhCWHEfUE6vusnYr9Cpsw49GGBU.roa
File: dhCWHEfUE6vusnYr9Cpsw49GGBU.roa (raw, json)
Hash identifier: sfCfke9wYtz4NQ6ml95RZDRUqTquZcuUDHPHT8jSjBk=
Subject key identifier: 76:10:96:1C:47:D4:13:AB:EE:B2:76:2B:F4:2A:6C:C3:8F:46:18:15
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01978919DEEEBA7E98A80E4D931A8385B7CA
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/dhCWHEfUE6vusnYr9Cpsw49GGBU.roa
Signing time: Thu 19 Jun 2025 16:51:03 +0000
ROA not before: Thu 19 Jun 2025 16:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202015
IP address blocks: 77.83.199.0/24 maxlen: 24
79.141.160.0/23 maxlen: 23
79.141.162.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
79.141.173.0/24 maxlen: 24
91.193.19.0/24 maxlen: 24
185.33.84.0/23 maxlen: 23
185.33.86.0/23 maxlen: 23
185.253.119.0/24 maxlen: 24
193.42.38.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
194.124.229.0/24 maxlen: 24
2a01:8640:4::/48 maxlen: 48
2a01:8640:5::/48 maxlen: 48
2a01:8640:b::/48 maxlen: 48
2a01:8640:e::/48 maxlen: 48
2a01:8640:1e::/48 maxlen: 48
2a01:8640:1f::/48 maxlen: 48
2a01:8640:22::/48 maxlen: 48
2a01:8640:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:19:de:ee:ba:7e:98:a8:0e:4d:93:1a:83:85:b7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jun 19 16:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7610961c47d413abeeb2762bf42a6cc38f461815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:44:e2:f7:7d:e9:17:57:ff:c1:4c:74:99:
c4:32:7e:94:91:68:9f:5b:77:d9:56:b5:bc:be:3a:
aa:f7:5f:b7:dc:09:95:41:fd:32:ca:97:4f:9a:67:
b6:0e:c9:25:b9:a5:35:b0:ae:3c:e7:81:c4:8f:ac:
a2:e9:dc:05:1d:e4:05:ee:c7:43:fe:53:88:9b:06:
2d:56:84:63:c1:e3:2e:33:ee:59:e4:13:3e:95:27:
70:29:c6:51:58:14:3c:2f:fc:c7:41:a2:f7:d1:6e:
78:35:60:f2:36:bd:82:be:55:59:1d:b3:62:83:da:
30:24:24:ee:36:8e:c2:86:8b:30:84:83:ee:cc:ce:
2a:87:6b:00:5e:b5:66:89:3b:05:44:22:c7:26:63:
25:67:d0:7f:56:0e:fe:2e:b8:62:c7:7c:2f:54:3f:
9d:5b:aa:60:01:db:61:a2:ca:9c:2f:ec:26:a4:32:
78:d3:e6:02:ee:0c:ad:2c:6a:77:e0:8d:10:42:4a:
57:a6:41:5c:34:fc:fc:df:0c:6e:3f:1b:d7:b4:a8:
0b:c2:29:5d:72:2a:4e:4f:9f:76:22:30:04:25:e9:
ae:91:dd:2e:e2:ff:04:24:9f:8e:b3:97:9d:9a:77:
34:22:b9:c5:a6:eb:7d:93:2c:7f:1b:a4:9e:5c:85:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:96:1C:47:D4:13:AB:EE:B2:76:2B:F4:2A:6C:C3:8F:46:18:15
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/dhCWHEfUE6vusnYr9Cpsw49GGBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.199.0/24
79.141.160.0/22
79.141.172.0/23
91.193.19.0/24
185.33.84.0/22
185.253.119.0/24
193.42.38.0/24
193.111.208.0/24
194.124.229.0/24
IPv6:
2a01:8640:4::/47
2a01:8640:b::/48
2a01:8640:e::/48
2a01:8640:1e::/47
2a01:8640:22::/47
Signature Algorithm: sha256WithRSAEncryption
70:8f:6e:88:b6:04:3b:c3:1a:a9:69:c9:77:e1:42:c7:07:28:
84:76:4b:8c:20:2f:75:d3:8d:13:4d:22:87:f3:65:da:3a:00:
cd:1e:12:70:c7:a4:fe:bb:e9:ef:1a:e4:be:f2:3b:04:a3:5f:
31:93:47:7b:de:d6:3b:ee:78:74:44:45:29:0d:50:eb:16:89:
7c:32:b0:ab:6e:67:dc:3c:e6:fa:29:57:b2:ae:60:01:fe:4e:
7a:d6:68:d8:43:4c:cb:ce:6a:ff:cb:e8:dd:80:00:2b:63:e7:
1b:12:4a:01:b0:0f:03:67:c3:54:b7:8f:60:d2:03:5d:d9:f2:
06:2f:56:59:59:15:e4:0b:26:0f:57:02:93:aa:f7:98:e1:20:
2c:76:6e:2c:f8:27:f9:aa:64:d3:d3:75:3c:5c:d0:24:ec:b3:
d2:f8:c8:fe:61:f2:25:37:49:ce:93:e9:15:73:99:27:60:eb:
b1:e6:af:23:c8:0e:ca:2e:04:b2:70:de:bf:60:a9:5c:e7:21:
44:e7:d1:a4:a0:3a:07:56:d0:24:2d:71:87:af:77:42:6c:42:
ec:eb:1a:68:42:3f:c2:07:de:9f:a4:2d:8b:6f:1f:05:1b:9e:
a3:db:55:e7:58:c3:47:e4:02:1b:bf:06:68:2a:d0:ed:32:10:
81:54:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:51:44 2025 by rpki-client