Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/dhD00UV1S2BU603uHMfKxDb_KNs.roa
File: dhD00UV1S2BU603uHMfKxDb_KNs.roa (raw, json)
Hash identifier: SHt2tijz4Xw2rzyKaUjp8oStHmr3L0LwZ5qN+4ol07o=
Subject key identifier: 76:10:F4:D1:45:75:4B:60:54:EB:4D:EE:1C:C7:CA:C4:36:FF:28:DB
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 0198A72AB765BA7C54B91FBAA44C583E45A6
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/dhD00UV1S2BU603uHMfKxDb_KNs.roa
Signing time: Thu 14 Aug 2025 06:00:51 +0000
ROA not before: Thu 14 Aug 2025 06:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39505
IP address blocks: 78.40.136.0/24 maxlen: 24
78.40.137.0/24 maxlen: 24
78.40.138.0/24 maxlen: 24
87.247.248.0/24 maxlen: 24
87.247.249.0/24 maxlen: 24
87.247.250.0/24 maxlen: 24
87.247.252.0/24 maxlen: 24
87.247.254.0/24 maxlen: 24
87.247.255.0/24 maxlen: 24
93.93.8.0/24 maxlen: 24
93.93.9.0/24 maxlen: 24
93.93.12.0/24 maxlen: 24
93.93.13.0/24 maxlen: 24
178.249.170.0/24 maxlen: 24
185.75.48.0/24 maxlen: 24
2a00:6580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:2a:b7:65:ba:7c:54:b9:1f:ba:a4:4c:58:3e:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Aug 14 06:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7610f4d145754b6054eb4dee1cc7cac436ff28db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:1f:fe:20:2b:08:bb:fc:d2:95:14:3d:f6:
7a:d7:51:d2:b7:ff:b5:60:56:bf:11:48:e1:68:9f:
f5:4e:12:c7:46:9f:47:45:d6:2a:f9:f9:1a:a0:e7:
0e:17:7e:4a:90:a9:c9:a5:07:bb:8f:75:6d:bc:c2:
ab:e0:ce:4f:8b:90:43:30:7f:30:35:fa:86:78:6d:
99:3d:e1:ff:3f:96:5c:a1:68:39:1e:9e:14:9f:25:
0f:e2:5d:ce:54:6f:0b:37:96:38:47:73:66:f7:4e:
10:cc:3e:8b:80:31:7a:60:f9:76:97:26:ad:05:19:
2a:29:23:2a:11:18:4c:eb:70:a5:ad:e0:fb:e1:0c:
69:36:7b:78:6c:5e:f9:e3:e9:be:00:d4:ed:c7:3f:
0a:bd:37:b4:e5:06:da:58:1b:e8:de:43:e9:a7:e5:
2d:7f:ef:48:32:f3:83:6e:f8:4b:f4:94:a6:19:ef:
72:75:f5:3d:8c:5b:16:63:57:1f:80:1f:f7:f3:a2:
71:10:6c:90:c5:70:5e:f4:00:03:42:88:ec:c8:7d:
14:d6:ac:f0:e6:57:d3:64:58:ad:d3:29:a1:a1:32:
63:8b:53:e7:c2:89:16:14:8f:6c:2f:e5:84:d9:32:
63:ab:8b:54:0e:c5:48:c1:d4:44:ba:97:ce:e9:2d:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:F4:D1:45:75:4B:60:54:EB:4D:EE:1C:C7:CA:C4:36:FF:28:DB
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/dhD00UV1S2BU603uHMfKxDb_KNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.136.0-78.40.138.255
87.247.248.0-87.247.250.255
87.247.252.0/24
87.247.254.0/23
93.93.8.0/23
93.93.12.0/23
178.249.170.0/24
185.75.48.0/24
IPv6:
2a00:6580::/32
Signature Algorithm: sha256WithRSAEncryption
a9:c2:d4:af:5f:83:67:9e:1b:8d:33:60:83:77:c4:19:5c:ef:
3a:4e:ea:7f:c3:87:8a:ad:f6:0e:24:86:95:5b:ef:d1:9d:32:
77:14:73:92:c2:71:2b:73:2b:6a:c7:63:db:90:45:9a:f0:c2:
5d:e3:4b:70:2a:ec:7f:9e:a7:ec:77:39:00:c7:77:3a:a9:23:
72:a2:51:67:8c:14:79:39:82:3a:36:01:6a:f5:4c:b6:6c:9e:
a0:42:3a:69:36:6e:d0:75:a1:63:8e:f4:14:d8:1a:00:dd:b6:
08:28:56:68:b7:e1:07:c9:28:6e:5c:a1:3b:03:aa:32:8e:76:
d4:c8:f6:5d:21:ad:e4:2a:31:d2:a9:c8:06:a1:06:aa:df:1c:
b7:74:ac:68:0e:32:90:2a:f1:42:a6:d4:02:08:0e:65:8b:fd:
06:15:19:79:e5:e1:b7:70:02:bc:4f:5c:21:2a:b2:c5:4f:b2:
06:de:d4:c6:4f:0c:66:ed:e1:bf:e0:a5:75:38:7c:c2:5c:63:
f7:0b:a6:8b:13:76:9b:84:98:1d:46:01:ce:15:9b:45:ec:47:
b7:21:66:10:17:a2:67:f1:28:5f:5c:4d:ad:e1:6b:a2:b0:0c:
ff:c7:dd:33:8c:d3:d1:8c:96:f2:86:f7:2b:10:d5:98:4b:25:
d7:44:42:b6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZinKrdlunxUuR+6pExYPkWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh
ODJlZDUwHhcNMjUwODE0MDYwMDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjEwZjRkMTQ1NzU0YjYwNTRlYjRkZWUxY2M3Y2FjNDM2ZmYyOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHUf/iArCLv80pUUPfZ611HSt/+1
YFa/EUjhaJ/1ThLHRp9HRdYq+fkaoOcOF35KkKnJpQe7j3VtvMKr4M5Pi5BDMH8w
NfqGeG2ZPeH/P5ZcoWg5Hp4UnyUP4l3OVG8LN5Y4R3Nm904QzD6LgDF6YPl2lyat
BRkqKSMqERhM63ClreD74QxpNnt4bF754+m+ANTtxz8KvTe05QbaWBvo3kPpp+Ut
f+9IMvODbvhL9JSmGe9ydfU9jFsWY1cfgB/386JxEGyQxXBe9AADQojsyH0U1qzw
5lfTZFit0ymhoTJji1PnwokWFI9sL+WE2TJjq4tUDsVIwdREupfO6S1OpQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFHYQ9NFFdUtgVOtN7hzHysQ2/yjbMB8GA1UdIwQY
MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt
NWEzN2FmNDM5MDRjLzEvZGhEMDBVVjFTMkJVNjAzdUhNZkt4RGJfS05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj
LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAMAwDBANOKIgD
BABOKIowDAMEA1f3+AMEAFf3+gMEAFf3/AMEAVf3/gMEAV1dCAMEAV1dDAMEALL5
qgMEALlLMDANBAIAAjAHAwUAKgBlgDANBgkqhkiG9w0BAQsFAAOCAQEAqcLUr1+D
Z54bjTNgg3fEGVzvOk7qf8OHiq32DiSGlVvv0Z0ydxRzksJxK3Mrasdj25BFmvDC
XeNLcCrsf56n7Hc5AMd3OqkjcqJRZ4wUeTmCOjYBavVMtmyeoEI6aTZu0HWhY470
FNgaAN22CChWaLfhB8koblyhOwOqMo521Mj2XSGt5Cox0qnIBqEGqt8ct3SsaA4y
kCrxQqbUAggOZYv9BhUZeeXht3ACvE9cISqyxU+yBt7Uxk8MZu3hv+CldTh8wlxj
9wumixN2m4SYHUYBzhWbRexHtyFmEBeiZ/EoX1xNreFrorAM/8fdM4zT0YyW8ob3
KxDVmEsl10RCtg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:16 2025 by rpki-client