Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SXjoKnORCjVLPnLoe4NBh8hz00k.roa
File: SXjoKnORCjVLPnLoe4NBh8hz00k.roa (raw, json)
Hash identifier: UqtEqcjw+C9ZiOPS/bUZLJ65qVMT62UK5GkwoJIZeIg=
Subject key identifier: 49:78:E8:2A:73:91:0A:35:4B:3E:72:E8:7B:83:41:87:C8:73:D3:49
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01978C72CE646A1DFBDFB5E2A97BD127A894
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SXjoKnORCjVLPnLoe4NBh8hz00k.roa
Signing time: Fri 20 Jun 2025 08:27:03 +0000
ROA not before: Fri 20 Jun 2025 08:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216151
IP address blocks: 77.76.9.0/24 maxlen: 24
82.118.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:72:ce:64:6a:1d:fb:df:b5:e2:a9:7b:d1:27:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 20 08:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4978e82a73910a354b3e72e87b834187c873d349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:ea:3c:59:58:2a:39:36:18:5b:f8:33:51:
6b:66:9d:df:96:45:ed:4f:e6:a2:36:54:74:f4:9e:
05:9e:e7:bc:63:a6:6a:55:28:85:11:37:14:f7:fb:
13:51:93:de:43:67:e0:14:eb:66:1a:c0:ac:ff:b9:
6f:42:0e:00:12:63:fc:99:f8:cb:d5:24:77:0d:22:
90:05:4c:ad:ae:8a:51:94:c8:b5:0e:45:be:93:71:
ca:6a:8f:3f:f7:73:1e:e2:59:ca:ce:29:73:94:5c:
f0:f0:01:16:96:d0:40:19:fe:f2:81:9a:6d:62:f1:
95:1a:01:79:42:a9:54:6b:ac:0c:c5:94:e3:3b:60:
bb:7b:aa:21:69:bc:24:96:5c:77:af:1b:b8:2a:e9:
c2:b3:dd:6f:86:2d:50:d2:6d:8b:37:ce:99:84:02:
44:ba:8c:e9:af:fc:78:ce:74:7d:63:36:d8:b6:c7:
3b:5e:5e:17:2b:4b:9b:35:ac:b4:99:bc:0b:51:b3:
4f:27:5a:03:fc:c6:10:df:49:7d:2d:b9:a8:ac:e4:
b4:79:6d:0f:54:ef:4a:46:86:23:87:67:65:f9:b2:
6a:a7:ac:4c:ec:a2:c2:9f:67:03:40:24:35:5b:ce:
7f:4b:4a:88:bb:85:65:3c:be:1e:29:3f:c0:23:3a:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:E8:2A:73:91:0A:35:4B:3E:72:E8:7B:83:41:87:C8:73:D3:49
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SXjoKnORCjVLPnLoe4NBh8hz00k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.9.0/24
82.118.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:37:9a:02:2c:7d:fa:c4:71:ba:1b:03:c8:69:42:3e:ed:72:
26:f1:9b:04:73:f4:a8:88:f0:34:5d:8f:4a:a7:30:de:ff:23:
96:6b:c7:16:83:11:da:fc:9d:a9:0d:6b:ee:34:df:f4:02:41:
f7:36:98:65:f1:1d:ea:1b:07:39:04:dd:cd:fc:38:f5:1f:8c:
d8:d2:a9:77:2c:3b:18:2b:6e:22:29:30:95:30:ea:41:12:0f:
bd:3e:b7:83:f1:2b:76:c2:d9:d0:08:3b:df:53:2a:6c:fe:85:
2a:57:3a:e0:8b:75:bf:0c:8e:a5:a4:04:f3:f9:76:29:e1:b4:
9d:20:f3:b3:3f:d0:37:84:15:ed:17:d9:51:b5:6f:44:9e:b0:
99:97:b7:bf:fc:ce:d4:1f:c3:9f:c2:ba:3e:6f:fe:65:c9:a7:
e6:a3:61:58:7a:d0:ec:2e:b1:22:4c:da:60:29:f4:b0:f7:3d:
3b:80:03:c6:71:10:71:34:88:c1:06:6e:46:b9:f2:c8:3c:a0:
76:9c:dc:fd:bb:0a:12:8f:46:79:c2:e9:a9:d5:b6:b1:2b:16:
d2:ef:36:79:1c:6e:5c:9f:23:6f:7d:7d:34:fa:4c:3e:0e:9b:
ec:88:57:58:a2:69:7d:b2:f7:7c:07:48:c2:6e:ae:a0:48:95:
ba:df:af:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZeMcs5kah3737XiqXvRJ6iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwNjIwMDgyNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTc4ZTgyYTczOTEwYTM1NGIzZTcyZTg3YjgzNDE4N2M4NzNkMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMXqPFlYKjk2GFv4M1FrZp3flkXt
T+aiNlR09J4Fnue8Y6ZqVSiFETcU9/sTUZPeQ2fgFOtmGsCs/7lvQg4AEmP8mfjL
1SR3DSKQBUytropRlMi1DkW+k3HKao8/93Me4lnKzilzlFzw8AEWltBAGf7ygZpt
YvGVGgF5QqlUa6wMxZTjO2C7e6ohabwkllx3rxu4KunCs91vhi1Q0m2LN86ZhAJE
uozpr/x4znR9YzbYtsc7Xl4XK0ubNay0mbwLUbNPJ1oD/MYQ30l9LbmorOS0eW0P
VO9KRoYjh2dl+bJqp6xM7KLCn2cDQCQ1W85/S0qIu4VlPL4eKT/AIzoPNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEl46CpzkQo1Sz5y6HuDQYfIc9NJMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvU1hqb0tuT1JDalZMUG5Mb2U0TkJoOGh6MDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUwJAwQA
UnbkMA0GCSqGSIb3DQEBCwUAA4IBAQCrN5oCLH36xHG6GwPIaUI+7XIm8ZsEc/So
iPA0XY9KpzDe/yOWa8cWgxHa/J2pDWvuNN/0AkH3Nphl8R3qGwc5BN3N/Dj1H4zY
0ql3LDsYK24iKTCVMOpBEg+9PreD8St2wtnQCDvfUyps/oUqVzrgi3W/DI6lpATz
+XYp4bSdIPOzP9A3hBXtF9lRtW9EnrCZl7e//M7UH8Ofwro+b/5lyafmo2FYetDs
LrEiTNpgKfSw9z07gAPGcRBxNIjBBm5GufLIPKB2nNz9uwoSj0Z5wump1baxKxbS
7zZ5HG5cnyNvfX00+kw+DpvsiFdYoml9svd8B0jCbq6gSJW6368x
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:37:40 2025 by rpki-client