Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/exrTmGvOj2xClhDCfcsldQif4Z4.roa
File: exrTmGvOj2xClhDCfcsldQif4Z4.roa (raw, json)
Hash identifier: 3LtdjnhF9ISRLFDfrOGup/m3oOMZq8ll2E/u+2tZH4g=
Subject key identifier: 7B:1A:D3:98:6B:CE:8F:6C:42:96:10:C2:7D:CB:25:75:08:9F:E1:9E
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019938C5DEA1A7590E81BDE9AA858CF47B70
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/exrTmGvOj2xClhDCfcsldQif4Z4.roa
Signing time: Thu 11 Sep 2025 12:35:15 +0000
ROA not before: Thu 11 Sep 2025 12:35:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34602
IP address blocks: 77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 24
77.50.192.0/18 maxlen: 24
77.233.192.0/19 maxlen: 19
77.233.192.0/20 maxlen: 20
77.233.208.0/22 maxlen: 22
77.233.216.0/22 maxlen: 22
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 24
81.17.144.0/21 maxlen: 21
81.17.155.0/24 maxlen: 24
81.17.156.0/23 maxlen: 23
91.204.128.0/23 maxlen: 23
91.204.130.0/24 maxlen: 24
94.141.162.0/23 maxlen: 23
94.141.163.0/24 maxlen: 24
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/24 maxlen: 24
2a00:e78::/31 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:c5:de:a1:a7:59:0e:81:bd:e9:aa:85:8c:f4:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Sep 11 12:35:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b1ad3986bce8f6c429610c27dcb2575089fe19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:8c:fe:da:3e:95:53:c7:e6:23:a2:51:b5:
26:9f:ac:ee:30:b4:69:e8:ec:01:a4:dd:29:ad:28:
59:28:9d:c0:e7:33:26:8f:e5:11:22:ef:9d:64:8c:
7d:5c:7d:d5:ec:8f:8a:55:f4:b6:91:7d:5c:23:e2:
70:ec:2b:79:ef:eb:4d:34:9e:14:15:30:78:65:66:
ea:9e:dc:df:6e:a2:78:00:75:07:09:39:0c:d9:05:
b1:e9:2c:a7:6a:09:72:74:69:b9:69:73:c3:4f:9d:
e5:2a:9c:35:25:d7:25:4b:13:17:86:d3:39:93:bf:
d7:d3:78:65:30:21:c8:4b:80:5c:07:2c:4a:4f:3a:
e9:be:4f:11:a9:eb:b1:63:41:e3:79:5f:7c:f2:e7:
93:59:81:41:0c:2e:e2:41:50:f3:e7:e0:57:36:9a:
f9:4d:86:7f:ad:c2:00:c3:e7:90:d4:e6:2e:7e:80:
61:e1:02:56:d7:ee:fc:cc:9c:dd:87:e1:82:12:60:
ca:c0:2b:71:53:bd:e2:2d:ff:d0:5d:7c:c1:3e:ab:
aa:d7:74:32:82:f9:10:3a:ff:1f:82:0b:57:a0:92:
f5:87:18:97:1b:c0:d6:eb:4e:3c:72:5c:1b:eb:54:
93:44:ca:8b:34:d1:f7:07:9e:a1:22:dc:31:77:4f:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:D3:98:6B:CE:8F:6C:42:96:10:C2:7D:CB:25:75:08:9F:E1:9E
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/exrTmGvOj2xClhDCfcsldQif4Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0-91.204.130.255
94.141.162.0-94.141.191.255
185.185.140.0/24
IPv6:
2a00:e78::/31
Signature Algorithm: sha256WithRSAEncryption
bb:15:7d:bb:d5:09:f9:e6:34:76:4e:5c:11:d8:91:45:87:9b:
4c:94:3b:4b:2e:f8:3f:ba:e6:53:0c:97:1e:0e:f4:9f:5a:70:
ad:1f:94:41:ee:54:c5:09:f2:d9:a5:d0:9f:89:16:97:b5:5c:
11:c4:e5:13:95:dc:21:fe:9d:35:fd:db:b0:69:4a:e7:87:83:
7a:a8:43:a9:da:0a:49:78:84:17:2d:50:42:84:06:8b:91:d1:
e2:67:2d:71:e4:6e:64:c6:4b:61:47:c9:6f:d9:ad:3b:e0:85:
93:b5:c9:d4:47:d7:f9:31:3d:95:71:e9:05:29:b8:03:68:f1:
dd:73:5f:51:6d:a8:c1:43:01:9f:49:5d:8b:05:77:64:d9:3a:
56:2d:cb:72:70:28:e8:99:6e:76:72:07:07:58:f4:9d:0a:50:
0d:cc:57:a2:5a:83:0d:18:d2:94:ca:59:fb:66:ca:12:dd:24:
94:9f:ac:bc:f1:91:15:63:b4:d4:14:dd:35:f4:90:f5:81:26:
8a:00:b8:30:b9:12:12:94:e3:6c:0c:01:c4:25:af:d3:25:18:
c9:a2:40:28:ec:54:ea:31:dc:dd:8e:ed:ff:a9:e9:68:49:ca:
46:c1:85:c1:d4:be:4a:2b:69:bc:6a:94:42:99:63:47:a4:94:
19:6d:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:08 2025 by rpki-client