Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/c8NulbO8-aStj8PEckQl7aJ8U20.roa
File: c8NulbO8-aStj8PEckQl7aJ8U20.roa (raw, json)
Hash identifier: JuyxDg+TRvuFu7yCz/hx/QBQ/A2jt6/tKuFwMw/SA1E=
Subject key identifier: 73:C3:6E:95:B3:BC:F9:A4:AD:8F:C3:C4:72:44:25:ED:A2:7C:53:6D
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 019A023FBE727F73AEC3691844B88A62B480
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/c8NulbO8-aStj8PEckQl7aJ8U20.roa
Signing time: Mon 20 Oct 2025 15:32:03 +0000
ROA not before: Mon 20 Oct 2025 15:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215939
IP address blocks: 77.87.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:3f:be:72:7f:73:ae:c3:69:18:44:b8:8a:62:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Oct 20 15:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73c36e95b3bcf9a4ad8fc3c4724425eda27c536d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:11:15:09:c2:d7:35:93:ba:54:f9:a7:6f:
5d:dd:d2:9b:cd:87:21:b3:7e:98:e2:bf:9c:3d:62:
6c:bf:4e:44:05:29:1b:17:26:22:58:7d:1a:bc:9e:
b1:4d:db:8f:9c:a2:fa:b2:92:5a:94:d8:9e:9a:24:
74:5c:f0:de:77:63:65:89:86:b5:7a:23:5c:e5:05:
f0:97:fa:8e:43:b4:dd:3a:56:3a:a3:63:b7:e7:be:
d7:ca:6f:d3:b7:ff:af:35:cd:5e:16:f3:ad:05:78:
e8:81:8f:7e:f4:18:85:ac:b2:67:b7:df:87:88:82:
76:6d:88:53:ce:22:a5:6e:dc:c3:41:45:5d:70:d3:
7a:70:91:f9:24:9b:b8:f3:14:ac:39:c2:72:1a:d4:
5c:e8:18:33:15:d9:ba:cc:49:56:0e:21:a9:c0:aa:
3e:f5:f3:bc:b7:a5:83:d2:25:f5:e7:4e:8f:f4:00:
a0:9e:bd:c8:92:5b:a0:67:ad:55:5f:b0:69:6d:8a:
f3:c6:9b:bd:9d:e5:70:50:df:5b:75:83:fc:28:1d:
ba:f9:7b:f7:22:a0:13:f9:7a:56:57:20:65:62:6f:
24:c1:b3:9f:67:63:87:a8:64:b7:58:dc:96:6f:66:
f8:8a:e7:57:eb:87:39:54:40:64:5c:04:8f:0b:58:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C3:6E:95:B3:BC:F9:A4:AD:8F:C3:C4:72:44:25:ED:A2:7C:53:6D
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/c8NulbO8-aStj8PEckQl7aJ8U20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:46:36:4f:29:2a:1f:b2:3d:e5:03:fc:10:5b:b1:d0:29:bf:
f6:56:be:97:63:58:b0:00:98:c5:8b:f4:07:99:a2:a8:ac:be:
47:c7:d8:4c:90:ef:c1:25:c4:09:3a:b8:a8:07:ca:05:2b:41:
66:3a:2a:00:3c:d1:13:36:28:35:ae:1c:97:3e:39:cb:69:21:
c8:a7:aa:57:6b:6f:bd:1a:71:87:48:e0:29:7f:0d:85:51:04:
b0:54:2e:8d:d3:ce:f9:62:78:50:b4:0a:36:ea:b3:8e:61:e1:
13:c8:cc:00:67:46:bf:89:b3:59:20:bd:97:7b:5b:95:28:0f:
ec:aa:fd:35:22:8c:62:ad:02:0f:61:81:36:9b:64:fc:b2:8d:
bd:c5:c5:90:48:41:87:7e:80:e3:3c:75:73:7a:1c:d2:c5:0c:
2e:bf:42:65:b1:45:6a:01:90:c9:47:e0:a0:95:8d:e7:f5:89:
1b:b4:84:13:7d:c5:35:55:6c:f4:23:67:61:cf:37:3a:8a:1f:
5f:d5:61:9d:7d:a4:7b:6f:44:4e:b1:88:75:02:aa:11:d4:34:
5d:30:f8:8a:fa:60:de:a5:d8:a2:51:2c:52:2c:a3:d4:59:be:
b0:93:e7:74:4f:e0:75:03:ff:0d:ec:96:dc:d8:9a:d1:59:51:
4d:c0:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:47 2025 by rpki-client