Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/DPsq0OHf8MVPtjf1meByn-PM7Q0.roa
File: DPsq0OHf8MVPtjf1meByn-PM7Q0.roa (raw, json)
Hash identifier: oRmxnthJtArJCnDUTkrTLD5StLSleGnIBmGT013Rl5I=
Subject key identifier: 0C:FB:2A:D0:E1:DF:F0:C5:4F:B6:37:F5:99:E0:72:9F:E3:CC:ED:0D
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 0199B977CE61FB4A329A4446A4585F65C53E
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/DPsq0OHf8MVPtjf1meByn-PM7Q0.roa
Signing time: Mon 06 Oct 2025 12:21:00 +0000
ROA not before: Mon 06 Oct 2025 12:21:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202366
IP address blocks: 37.77.64.0/20 maxlen: 20
37.77.64.0/21 maxlen: 21
37.77.64.0/22 maxlen: 22
37.77.64.0/23 maxlen: 23
37.77.64.0/24 maxlen: 24
37.77.65.0/24 maxlen: 24
37.77.66.0/23 maxlen: 23
37.77.66.0/24 maxlen: 24
37.77.67.0/24 maxlen: 24
37.77.68.0/22 maxlen: 22
37.77.68.0/23 maxlen: 23
37.77.68.0/24 maxlen: 24
37.77.69.0/24 maxlen: 24
37.77.70.0/23 maxlen: 23
37.77.70.0/24 maxlen: 24
37.77.71.0/24 maxlen: 24
37.77.72.0/21 maxlen: 21
37.77.72.0/22 maxlen: 22
37.77.72.0/23 maxlen: 23
37.77.72.0/24 maxlen: 24
37.77.73.0/24 maxlen: 24
37.77.74.0/23 maxlen: 23
37.77.74.0/24 maxlen: 24
37.77.75.0/24 maxlen: 24
37.77.76.0/22 maxlen: 22
37.77.76.0/23 maxlen: 23
37.77.76.0/24 maxlen: 24
37.77.77.0/24 maxlen: 24
37.77.78.0/23 maxlen: 23
37.77.78.0/24 maxlen: 24
37.77.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:77:ce:61:fb:4a:32:9a:44:46:a4:58:5f:65:c5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Oct 6 12:21:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cfb2ad0e1dff0c54fb637f599e0729fe3cced0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:69:ef:69:54:da:c5:45:af:4a:97:71:f4:
6d:b8:db:c3:9f:62:b4:92:4e:d9:e4:5c:93:b7:c2:
bf:74:7f:df:53:ef:35:fb:bf:7e:2b:1b:ac:30:d8:
d7:8f:ad:ec:5f:ca:c8:7f:9a:b7:fe:41:0d:ff:c7:
44:bc:be:48:c7:e3:6f:93:9f:8d:14:2f:5b:0c:b5:
42:1f:80:a2:d9:01:06:6e:85:fc:7c:eb:bb:48:82:
9e:42:0a:c8:80:d2:f2:c6:73:52:ce:6d:ec:37:69:
31:df:6d:2c:e7:34:64:45:03:6b:44:2e:08:b6:70:
f2:aa:cc:bb:a4:e8:5f:f2:74:8c:0a:81:94:1c:02:
30:28:6f:98:e1:b5:37:77:fa:5e:48:89:28:5f:32:
36:4f:f1:4f:0c:e4:ea:2a:be:f8:19:21:24:e4:51:
dc:a1:4c:94:97:be:b3:b1:88:b4:b1:d0:2d:09:3c:
f5:34:a7:9d:88:62:8a:e9:9c:26:6e:67:6b:23:33:
dc:14:40:3f:b9:29:ed:5d:f9:7d:06:69:58:f8:0d:
6c:42:d4:62:bb:9e:4f:ef:4a:8a:15:7f:dd:ad:28:
c7:09:82:7b:4d:1f:6a:21:0c:67:97:60:98:ca:e4:
e6:31:56:30:a4:ab:9f:be:b1:a9:85:2c:62:1b:bc:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FB:2A:D0:E1:DF:F0:C5:4F:B6:37:F5:99:E0:72:9F:E3:CC:ED:0D
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/DPsq0OHf8MVPtjf1meByn-PM7Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.64.0/20
Signature Algorithm: sha256WithRSAEncryption
79:eb:18:fc:68:d9:57:08:3a:5d:a0:0d:de:d9:79:35:7a:3b:
6d:9b:eb:71:ff:c2:89:46:d7:c5:be:d1:ee:d7:a3:3a:76:46:
b1:3e:69:ed:87:21:17:a8:df:07:c5:94:d8:f8:40:ee:e4:a0:
8b:fe:fe:d6:90:7e:04:69:78:dc:c9:67:c8:a5:03:71:6a:ec:
51:eb:0c:b6:b1:38:2f:6d:7c:ef:2f:60:1a:93:70:de:3b:60:
c5:9d:f4:de:11:8c:47:9d:8f:c8:dc:e5:74:66:78:25:35:ab:
a3:f6:e4:90:d1:1e:2a:82:36:09:c5:58:0a:f1:68:11:b7:46:
82:cd:04:d5:a3:4a:fe:02:ae:59:b2:2a:ee:c9:73:8b:23:cb:
11:c5:fd:a2:3b:bb:bc:54:a4:1d:39:59:45:8b:92:ef:4b:3a:
98:1c:0c:0e:32:51:35:25:9c:c3:72:d8:65:92:35:e9:9d:c6:
3c:42:95:d0:79:18:75:67:10:e2:4e:d6:45:7b:07:4a:19:9f:
56:9d:a3:ed:54:1e:61:6e:16:74:23:24:5e:68:54:4c:d8:a9:
ac:d9:e5:e5:33:53:d0:70:bd:49:fa:70:63:88:e0:75:3e:ae:
80:33:f6:95:d7:cf:2a:97:db:38:c1:40:68:02:be:75:84:84:
bb:95:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:35:28 2025 by rpki-client