Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JwLULNOz2X6vE_43q_0QWbais_8.roa
File: JwLULNOz2X6vE_43q_0QWbais_8.roa (raw, json)
Hash identifier: 4FcnVp6RP8ErqtSeWiwDZqk5rvJJ7rScVQRihdfbpdQ=
Subject key identifier: 27:02:D4:2C:D3:B3:D9:7E:AF:13:FE:37:AB:FD:10:59:B6:A2:B3:FF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199046D9C43608BA4DA7E6546A619ECE205
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JwLULNOz2X6vE_43q_0QWbais_8.roa
Signing time: Mon 01 Sep 2025 08:38:36 +0000
ROA not before: Mon 01 Sep 2025 08:38:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28964
IP address blocks: 77.105.8.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.192.0/24 maxlen: 24
188.255.195.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:6d:9c:43:60:8b:a4:da:7e:65:46:a6:19:ec:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 08:38:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2702d42cd3b3d97eaf13fe37abfd1059b6a2b3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:79:be:f2:31:1c:81:d8:c6:dd:57:72:54:
ce:cc:bb:d5:d0:15:b7:ca:0a:0d:e9:6a:eb:cc:0b:
58:77:45:eb:7f:76:a7:70:14:34:39:54:db:ee:84:
39:88:45:da:74:bb:45:a9:25:c7:8c:e8:97:ef:da:
4e:1a:78:41:95:e2:f5:64:c0:24:ac:4d:a7:b7:ac:
71:c4:1c:26:06:d6:5b:8e:26:dd:35:22:89:88:f3:
b2:78:14:14:e6:ac:f9:46:d6:12:fe:76:b3:d7:15:
49:e0:68:01:95:b9:30:4c:52:93:7c:14:68:e4:58:
17:43:fc:53:2c:45:6a:da:f2:d5:d3:eb:fd:0a:73:
89:dd:54:18:12:37:32:6e:3a:79:19:16:4f:ed:79:
06:09:a1:92:8c:23:fb:c0:f8:fa:96:46:dd:63:fd:
1b:31:2a:44:1d:41:11:2d:c3:fd:90:b4:3e:e5:b8:
03:e8:17:bd:41:34:9b:4e:0d:bd:be:e4:80:71:9d:
99:8c:68:77:45:cb:06:de:77:d9:71:6a:fa:d8:55:
89:5b:58:b2:17:ad:9a:29:61:ae:c0:5c:b5:59:0f:
23:39:01:46:ed:49:11:34:fc:61:ec:c8:79:04:20:
5b:b8:6d:cc:c6:49:84:3d:82:f9:8e:5c:9c:f1:cd:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:D4:2C:D3:B3:D9:7E:AF:13:FE:37:AB:FD:10:59:B6:A2:B3:FF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JwLULNOz2X6vE_43q_0QWbais_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.39.0/24
79.175.66.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0/23
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
178.219.2.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.235.0/24
178.253.238.0/24
178.253.246.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/24
188.255.195.0-188.255.199.255
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
212.69.2.0-212.69.4.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4f:e1:04:2a:5d:de:c3:fe:b8:dc:7d:96:05:24:f2:ba:60:
2d:87:0f:03:fa:59:d3:b6:8d:d9:e5:7d:a0:ff:3e:a7:58:de:
d9:8c:44:a1:f0:78:13:62:38:95:41:8b:e1:73:44:66:f5:82:
50:f0:d5:0d:42:40:cb:76:37:33:d0:67:f8:0e:b8:26:17:53:
5d:a7:ec:8c:7d:c0:5d:ad:2b:73:65:d3:36:7b:86:2a:97:c2:
1c:21:61:94:d9:62:52:a0:cc:bf:d8:ff:f8:15:7a:20:5c:b5:
6f:3c:0b:06:2a:5f:b4:8d:4c:7d:5a:d8:7e:4c:23:03:4e:5b:
41:81:f1:8d:a3:11:58:e4:42:e4:a7:18:cc:6a:eb:e2:3a:08:
d5:4a:7a:81:fe:63:73:38:2d:15:c9:87:39:44:c3:4e:eb:54:
b5:2f:3b:54:18:b3:19:ac:21:b3:ca:19:09:35:63:bd:0a:8e:
8a:97:f2:3f:67:f8:b7:40:50:1d:42:e1:38:c5:c7:57:6c:07:
fa:f5:44:cf:52:60:c2:63:4b:cc:90:96:e0:35:07:42:ef:41:
40:6f:12:4e:c7:56:81:fe:4b:dd:ad:c3:fa:53:83:d7:d6:c1:
a8:b7:fa:fb:a6:fc:db:25:f8:86:a4:92:38:3b:16:ed:08:d1:
73:50:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:12:03 2025 by rpki-client