Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/92Awmcv8ZPdmaixahFHiYBYtwf4.roa
File: 92Awmcv8ZPdmaixahFHiYBYtwf4.roa (raw, json)
Hash identifier: LeUDI3rPwTsYzdeS7C4hTsG150qDHDzC03ly6n1VUQ0=
Subject key identifier: F7:60:30:99:CB:FC:64:F7:66:6A:2C:5A:84:51:E2:60:16:2D:C1:FE
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199FBD3657BEEC03F47A84516610321EA13
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/92Awmcv8ZPdmaixahFHiYBYtwf4.roa
Signing time: Sun 19 Oct 2025 09:35:59 +0000
ROA not before: Sun 19 Oct 2025 09:35:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.105.61.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
178.253.221.0/24 maxlen: 24
178.253.224.0/24 maxlen: 24
178.253.229.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.222.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.242.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:d3:65:7b:ee:c0:3f:47:a8:45:16:61:03:21:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 19 09:35:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7603099cbfc64f7666a2c5a8451e260162dc1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:4c:de:ea:93:72:28:b7:8b:a2:a8:98:c5:
f0:f5:dc:cf:19:f4:c1:9a:4d:39:47:85:36:fb:80:
d2:d0:04:c7:fc:59:ba:a6:68:51:2a:f7:d1:ed:1d:
8a:b6:5c:08:a2:ad:82:f0:9d:53:e2:09:20:c9:6b:
7b:0c:e5:95:fe:fc:d0:1b:1e:3f:5d:fd:6e:7c:ca:
84:ed:73:c1:b3:6a:2a:b1:86:43:68:52:af:3c:fc:
c7:45:cb:2d:74:52:ac:4a:34:4b:c3:0f:71:56:1f:
29:8f:99:51:18:18:b4:71:ba:5e:3a:e8:69:37:43:
d1:ad:e2:f9:c1:74:bb:2a:06:ea:74:63:35:74:86:
8c:e0:62:5d:af:41:ec:c2:a5:9f:0c:93:8d:4d:d4:
64:33:63:97:21:f1:3e:6e:c1:19:12:34:38:b6:e7:
60:e9:f6:56:4f:df:06:ff:65:62:19:c9:c4:a5:1e:
5b:89:38:ae:53:a3:e0:17:51:d4:b1:7f:fc:65:22:
10:5d:c3:4e:b8:42:ff:54:e3:7d:2d:d6:a5:b5:cf:
32:71:3a:01:8c:42:c4:d2:a5:1e:d1:24:f9:84:35:
fc:c6:85:1f:b2:e9:b0:ea:74:8e:78:13:25:57:05:
10:18:d3:58:93:a9:82:b9:70:6f:8d:a3:1c:15:fc:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:30:99:CB:FC:64:F7:66:6A:2C:5A:84:51:E2:60:16:2D:C1:FE
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/92Awmcv8ZPdmaixahFHiYBYtwf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.61.0/24
79.175.93.0/24
79.175.103.0/24
81.18.48.0/24
81.18.60.0/24
109.121.33.0/24
178.253.221.0/24
178.253.224.0/24
178.253.229.0/24
188.255.148.0/24
188.255.222.0/24
188.255.236.0/24
188.255.242.0/24
188.255.247.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9f:fb:85:35:5c:ea:48:58:23:58:6d:ca:0a:34:dd:6c:07:
44:32:91:c5:95:6e:4b:47:9a:7f:4a:9b:2a:96:b0:75:ba:40:
1e:20:13:3c:5e:ad:c1:cd:6d:08:8f:a6:24:4a:c9:e4:93:ef:
92:a3:89:08:fa:4f:57:c5:b3:04:77:f8:55:b3:1a:08:18:b7:
1c:37:81:6a:79:23:78:5a:f7:49:6c:13:e8:76:31:4b:a8:e2:
d7:b3:c9:4f:ab:fe:ef:da:2d:50:48:dc:f2:21:f5:46:64:62:
59:a3:c9:21:0d:a5:0c:24:06:74:44:67:e8:f2:50:2e:85:7a:
1e:e1:4d:4c:98:f6:07:ed:f6:e7:fb:2f:df:da:a6:39:66:54:
ba:41:d2:8d:75:84:17:db:a9:49:06:82:8a:21:df:80:a7:57:
4d:49:df:4d:89:c6:70:17:67:26:b9:eb:9f:70:37:59:e1:f3:
25:7e:13:0a:b2:a4:de:1d:9f:0f:95:10:68:ec:ca:61:3d:8e:
9b:66:b0:1f:81:85:16:97:fb:84:97:5b:99:7b:51:0c:a6:82:
93:da:f3:98:bf:21:83:f1:46:38:e8:6f:0d:3f:a0:e2:85:bf:
79:1b:9b:48:64:de:1d:66:28:c7:7a:74:49:39:46:e1:1c:bd:
2d:bc:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:11 2025 by rpki-client