Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa
File: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (raw, json)
Hash identifier: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=
Subject key identifier: DA:59:F4:E1:28:3D:0E:2B:F0:23:14:F8:26:FF:3B:60:B4:3A:55:E2
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 01984381EDE76D41E5BC60CF48FF647A5F46
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa
Signing time: Fri 25 Jul 2025 21:34:05 +0000
ROA not before: Fri 25 Jul 2025 21:34:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29687
IP address blocks: 77.71.0.0/20 maxlen: 20
77.71.0.0/22 maxlen: 22
77.71.0.0/23 maxlen: 23
77.71.0.0/24 maxlen: 24
77.71.1.0/24 maxlen: 24
77.71.2.0/23 maxlen: 23
77.71.2.0/24 maxlen: 24
77.71.3.0/24 maxlen: 24
77.71.4.0/22 maxlen: 22
77.71.4.0/23 maxlen: 23
77.71.4.0/24 maxlen: 24
77.71.5.0/24 maxlen: 24
77.71.6.0/23 maxlen: 23
77.71.6.0/24 maxlen: 24
77.71.7.0/24 maxlen: 24
77.71.8.0/22 maxlen: 22
77.71.8.0/23 maxlen: 23
77.71.8.0/24 maxlen: 24
77.71.9.0/24 maxlen: 24
77.71.10.0/23 maxlen: 23
77.71.10.0/24 maxlen: 24
77.71.11.0/24 maxlen: 24
77.71.12.0/22 maxlen: 22
77.71.12.0/23 maxlen: 23
77.71.12.0/24 maxlen: 24
77.71.13.0/24 maxlen: 24
77.71.14.0/23 maxlen: 23
77.71.14.0/24 maxlen: 24
77.71.15.0/24 maxlen: 24
77.71.16.0/20 maxlen: 20
77.71.16.0/21 maxlen: 21
77.71.16.0/22 maxlen: 22
77.71.16.0/23 maxlen: 23
77.71.18.0/23 maxlen: 23
77.71.20.0/22 maxlen: 22
77.71.20.0/23 maxlen: 23
77.71.22.0/23 maxlen: 23
77.71.24.0/21 maxlen: 21
77.71.24.0/22 maxlen: 22
77.71.24.0/23 maxlen: 23
77.71.26.0/23 maxlen: 23
77.71.28.0/22 maxlen: 22
77.71.28.0/23 maxlen: 23
77.71.30.0/23 maxlen: 23
77.71.32.0/20 maxlen: 20
77.71.32.0/21 maxlen: 21
77.71.32.0/22 maxlen: 22
77.71.32.0/24 maxlen: 24
77.71.33.0/24 maxlen: 24
77.71.34.0/24 maxlen: 24
77.71.35.0/24 maxlen: 24
77.71.36.0/22 maxlen: 22
77.71.36.0/24 maxlen: 24
77.71.37.0/24 maxlen: 24
77.71.38.0/24 maxlen: 24
77.71.39.0/24 maxlen: 24
77.71.40.0/21 maxlen: 21
77.71.40.0/22 maxlen: 22
77.71.40.0/24 maxlen: 24
77.71.41.0/24 maxlen: 24
77.71.42.0/24 maxlen: 24
77.71.43.0/24 maxlen: 24
77.71.44.0/22 maxlen: 22
77.71.44.0/24 maxlen: 24
77.71.45.0/24 maxlen: 24
77.71.46.0/24 maxlen: 24
77.71.47.0/24 maxlen: 24
77.71.48.0/21 maxlen: 21
77.71.48.0/22 maxlen: 22
77.71.48.0/24 maxlen: 24
77.71.49.0/24 maxlen: 24
77.71.50.0/24 maxlen: 24
77.71.51.0/24 maxlen: 24
77.71.52.0/22 maxlen: 22
77.71.52.0/24 maxlen: 24
77.71.53.0/24 maxlen: 24
77.71.54.0/24 maxlen: 24
77.71.55.0/24 maxlen: 24
77.71.56.0/21 maxlen: 21
77.71.56.0/22 maxlen: 22
77.71.56.0/24 maxlen: 24
77.71.57.0/24 maxlen: 24
77.71.58.0/24 maxlen: 24
77.71.59.0/24 maxlen: 24
77.71.60.0/22 maxlen: 22
77.71.60.0/24 maxlen: 24
77.71.61.0/24 maxlen: 24
77.71.62.0/24 maxlen: 24
77.71.63.0/24 maxlen: 24
77.71.64.0/21 maxlen: 21
77.71.64.0/22 maxlen: 22
77.71.64.0/24 maxlen: 24
77.71.65.0/24 maxlen: 24
77.71.66.0/24 maxlen: 24
77.71.67.0/24 maxlen: 24
77.71.68.0/22 maxlen: 22
77.71.68.0/24 maxlen: 24
77.71.69.0/24 maxlen: 24
77.71.70.0/24 maxlen: 24
77.71.71.0/24 maxlen: 24
77.71.72.0/22 maxlen: 22
77.71.72.0/23 maxlen: 23
77.71.72.0/24 maxlen: 24
77.71.73.0/24 maxlen: 24
77.71.74.0/23 maxlen: 23
77.71.74.0/24 maxlen: 24
77.71.75.0/24 maxlen: 24
77.71.76.0/22 maxlen: 22
77.71.76.0/23 maxlen: 23
77.71.76.0/24 maxlen: 24
77.71.77.0/24 maxlen: 24
77.71.78.0/23 maxlen: 23
77.71.78.0/24 maxlen: 24
77.71.79.0/24 maxlen: 24
77.71.80.0/22 maxlen: 22
77.71.80.0/23 maxlen: 23
77.71.82.0/23 maxlen: 23
77.71.82.0/24 maxlen: 24
77.71.83.0/24 maxlen: 24
77.71.84.0/22 maxlen: 22
77.71.84.0/23 maxlen: 23
77.71.84.0/24 maxlen: 24
77.71.85.0/24 maxlen: 24
77.71.86.0/23 maxlen: 23
77.71.86.0/24 maxlen: 24
77.71.87.0/24 maxlen: 24
77.71.88.0/21 maxlen: 21
77.71.88.0/22 maxlen: 22
77.71.88.0/23 maxlen: 23
77.71.90.0/23 maxlen: 23
77.71.92.0/22 maxlen: 22
77.71.92.0/23 maxlen: 23
77.71.94.0/24 maxlen: 24
77.71.95.0/24 maxlen: 24
77.71.96.0/24 maxlen: 24
77.71.97.0/24 maxlen: 24
77.71.98.0/23 maxlen: 23
77.71.98.0/24 maxlen: 24
77.71.99.0/24 maxlen: 24
77.71.100.0/22 maxlen: 22
77.71.100.0/23 maxlen: 23
77.71.100.0/24 maxlen: 24
77.71.101.0/24 maxlen: 24
77.71.102.0/23 maxlen: 23
77.71.102.0/24 maxlen: 24
77.71.103.0/24 maxlen: 24
77.71.104.0/21 maxlen: 21
77.71.104.0/22 maxlen: 22
77.71.104.0/23 maxlen: 23
77.71.104.0/24 maxlen: 24
77.71.105.0/24 maxlen: 24
77.71.106.0/23 maxlen: 23
77.71.106.0/24 maxlen: 24
77.71.107.0/24 maxlen: 24
77.71.108.0/22 maxlen: 22
77.71.108.0/23 maxlen: 23
77.71.108.0/24 maxlen: 24
77.71.109.0/24 maxlen: 24
77.71.110.0/23 maxlen: 23
77.71.110.0/24 maxlen: 24
77.71.111.0/24 maxlen: 24
77.71.116.0/23 maxlen: 23
77.71.116.0/24 maxlen: 24
77.71.117.0/24 maxlen: 24
77.71.118.0/23 maxlen: 23
77.71.118.0/24 maxlen: 24
77.71.119.0/24 maxlen: 24
77.71.120.0/23 maxlen: 23
77.71.120.0/24 maxlen: 24
77.71.121.0/24 maxlen: 24
77.71.122.0/23 maxlen: 23
77.71.122.0/24 maxlen: 24
77.71.123.0/24 maxlen: 24
77.71.124.0/23 maxlen: 23
77.71.124.0/24 maxlen: 24
77.71.125.0/24 maxlen: 24
77.71.126.0/23 maxlen: 23
77.71.126.0/24 maxlen: 24
77.71.127.0/24 maxlen: 24
185.186.136.0/22 maxlen: 22
185.186.136.0/23 maxlen: 23
185.186.136.0/24 maxlen: 24
185.186.137.0/24 maxlen: 24
185.186.138.0/23 maxlen: 23
185.186.138.0/24 maxlen: 24
185.186.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:81:ed:e7:6d:41:e5:bc:60:cf:48:ff:64:7a:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Jul 25 21:34:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da59f4e1283d0e2bf02314f826ff3b60b43a55e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:83:6b:66:b4:28:72:97:bd:e1:ea:90:02:
65:f3:87:db:09:66:f6:a6:23:ae:30:98:65:12:62:
eb:c8:a9:ad:77:4b:8f:32:5a:33:b0:de:79:4b:48:
7b:6f:22:6b:60:02:ce:f7:b1:22:10:80:da:41:e4:
6e:e2:20:a4:d0:4b:da:c2:98:d4:82:78:47:2f:06:
dc:c9:68:40:84:61:62:f5:b7:1d:c9:89:ed:ae:3b:
45:a2:37:cf:41:a9:10:2f:f2:e9:cc:1b:14:e8:66:
b7:19:9e:57:6b:c3:99:78:10:e9:3c:89:44:ce:2c:
22:63:ba:a4:06:71:9c:ce:1b:f6:e3:2f:fc:ed:ed:
9f:3c:fa:33:3e:12:9c:fc:fb:dc:e6:c1:86:2d:f5:
34:82:f9:c2:b0:a0:6c:41:0e:6a:cb:04:64:aa:75:
f1:35:dd:53:4f:63:b1:0f:2a:19:d6:a3:dc:14:15:
84:69:bd:f8:c4:84:f8:99:ea:40:29:dc:f8:b2:dc:
8b:11:9d:9c:c0:a0:6a:97:bb:cc:24:3f:e9:50:47:
4b:0d:77:61:fc:d0:5e:ca:a0:a5:b9:2d:77:d6:d1:
bb:e8:4b:55:12:a9:4a:9d:a4:c4:c2:bb:bd:28:b3:
95:55:0e:70:7e:8a:ec:44:3c:30:e4:c5:a6:6b:6c:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:F4:E1:28:3D:0E:2B:F0:23:14:F8:26:FF:3B:60:B4:3A:55:E2
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0-77.71.111.255
77.71.116.0-77.71.127.255
185.186.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:dc:11:a7:b5:6f:97:e7:27:53:23:db:ff:fb:28:35:90:63:
ac:d2:d4:a7:dd:fb:23:69:fe:6f:25:32:5f:e9:3b:ab:fc:42:
fe:27:d8:6b:f6:d8:14:97:92:5c:cf:a4:fc:01:7f:e3:40:57:
9a:9b:8e:5f:3f:91:45:d8:b7:a5:23:f1:65:b2:2f:0e:ac:42:
26:69:39:ba:68:74:40:98:0b:2d:77:2c:c3:7b:67:eb:e3:1e:
98:9f:1f:75:82:6b:20:60:48:ab:a6:96:e0:9e:0a:34:f8:8e:
f7:d7:91:48:8b:6c:19:ad:be:50:80:83:dc:16:fc:c0:d7:83:
21:6a:54:07:26:f5:2f:5a:be:6d:ed:05:8d:2e:76:b2:2b:95:
77:ef:0f:e2:cb:ea:f6:c5:cd:d4:7d:54:88:36:ba:2c:f2:db:
f0:aa:38:47:da:bc:7a:1e:68:eb:1d:2f:d8:3f:15:ce:c2:83:
4a:93:52:55:0f:3c:89:32:2b:3f:2f:56:20:b8:46:87:33:85:
23:60:e2:4a:e1:02:4b:76:5e:21:d6:c9:ab:5f:35:18:d0:7f:
94:a6:51:5c:e5:37:c7:39:7a:11:8c:a2:98:14:ff:38:e2:9c:
01:62:5f:73:7b:7d:16:3b:9f:5b:be:a5:44:a3:cf:fa:c1:7a:
07:72:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:58:45 2025 by rpki-client