Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NyHJJYZDTwZZmeIot6SdEsIdX_4.roa
File: NyHJJYZDTwZZmeIot6SdEsIdX_4.roa (raw, json)
Hash identifier: GHg3UIr5T3WVKzRS+VHat/S8DDlmOajYIXetnJ8rm7g=
Subject key identifier: 37:21:C9:25:86:43:4F:06:59:99:E2:28:B7:A4:9D:12:C2:1D:5F:FE
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01973B65843769601C5143D9BEF69020FA05
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NyHJJYZDTwZZmeIot6SdEsIdX_4.roa
Signing time: Wed 04 Jun 2025 14:43:18 +0000
ROA not before: Wed 04 Jun 2025 14:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:65:84:37:69:60:1c:51:43:d9:be:f6:90:20:fa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 4 14:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3721c92586434f065999e228b7a49d12c21d5ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:74:86:f2:42:96:35:dd:19:b5:92:21:e1:
82:ba:d0:e6:26:b9:d9:9f:33:23:74:dd:e8:e5:de:
67:f5:b6:df:62:1d:55:7a:c4:4f:8f:b0:62:a4:c1:
5c:f6:ea:72:09:e9:39:6f:da:40:43:49:0b:98:3b:
99:c9:63:16:a5:2e:da:54:ed:b8:dc:00:56:6f:c5:
e1:50:a8:51:e6:fd:44:8b:af:52:83:aa:91:aa:f3:
e2:1d:53:52:59:f1:9a:9a:cc:de:34:1c:2e:76:e0:
74:d7:dd:5c:da:03:0e:c2:d4:76:d8:1f:1f:cb:48:
2d:a2:8d:10:ae:a0:06:6f:8a:64:29:9c:98:8e:8b:
71:31:7c:74:40:fe:91:21:da:33:14:8d:63:1a:bb:
ad:17:d3:9a:88:ce:c3:ab:c9:21:85:c9:11:17:39:
e5:82:6b:7a:55:2f:e1:c8:d0:65:c7:f5:12:57:cf:
a0:d5:41:d1:35:f3:82:d7:05:45:fb:7e:5e:37:49:
fb:9f:9e:2e:fa:3c:23:de:e3:7a:1c:b7:58:25:19:
c8:c8:1f:5a:71:56:c4:40:f2:3c:24:94:5e:5c:d3:
75:19:0c:32:0f:b3:0e:bc:48:52:3a:7b:63:96:b2:
d6:8f:69:a7:e6:3a:46:95:e6:ca:55:df:f6:7a:92:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:C9:25:86:43:4F:06:59:99:E2:28:B7:A4:9D:12:C2:1D:5F:FE
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NyHJJYZDTwZZmeIot6SdEsIdX_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0/24
185.47.90.0/24
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.244.0/22
188.255.252.0/24
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:9a:b1:1f:15:2b:8f:6b:b2:f3:1f:9a:35:8f:1b:28:d2:
89:61:9c:e0:66:76:32:08:fd:90:40:45:bf:65:58:a9:af:86:
6e:93:11:1c:c6:d3:41:9c:3c:13:08:61:44:6b:ca:01:7c:df:
b6:8d:12:2d:35:12:c5:25:1a:06:96:33:b9:83:d5:c4:4b:39:
af:15:bc:16:a7:97:7b:00:da:dc:ec:a5:0f:6e:d0:ed:bc:cb:
be:5f:79:19:61:0f:4a:c6:78:37:ed:f1:a2:7e:c2:fb:b0:43:
f7:fd:49:bf:81:b1:54:41:d7:ea:5c:08:61:29:91:90:84:32:
bf:2e:81:d7:1b:1c:26:3f:ae:9b:a7:9b:96:70:6d:c8:5d:1f:
6c:6a:1c:a6:19:0f:be:b9:02:5e:3f:45:91:56:ae:a4:4a:bf:
62:c5:48:02:9a:44:78:46:da:47:2a:04:08:c4:9f:a2:46:ae:
ad:44:db:20:4e:d6:0b:61:48:4e:7f:1d:ca:5e:51:40:66:3e:
1a:50:c3:e3:74:3b:e2:e9:04:b0:1f:79:47:7b:dc:85:b9:c6:
ac:14:24:f3:db:9d:8c:0e:50:e9:75:7e:2b:ff:6d:a2:71:b1:
62:b8:b9:a5:99:96:b3:0c:81:ad:b8:85:ab:c3:b8:10:a8:c5:
70:03:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:06 2025 by rpki-client