Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/GiBFfe4wMOt5FVR__K7Vh9-5m8M.roa
File: GiBFfe4wMOt5FVR__K7Vh9-5m8M.roa (raw, json)
Hash identifier: jd3cy8QdD+tOhCBy6mXJ1heHnpRPnrULr+qJMNnjjZM=
Subject key identifier: 1A:20:45:7D:EE:30:30:EB:79:15:54:7F:FC:AE:D5:87:DF:B9:9B:C3
Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial: 0196C96B8A6376D6F6649CBDF25BB828D804
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/GiBFfe4wMOt5FVR__K7Vh9-5m8M.roa
Signing time: Tue 13 May 2025 11:33:10 +0000
ROA not before: Tue 13 May 2025 11:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 77.237.64.0/19 maxlen: 19
77.237.65.0/24 maxlen: 24
77.237.68.0/24 maxlen: 24
77.237.69.0/24 maxlen: 24
77.237.70.0/24 maxlen: 24
77.237.72.0/24 maxlen: 24
77.237.74.0/24 maxlen: 24
77.237.75.0/24 maxlen: 24
77.237.76.0/24 maxlen: 24
77.237.77.0/24 maxlen: 24
77.237.78.0/23 maxlen: 23
77.237.78.0/24 maxlen: 24
77.237.79.0/24 maxlen: 24
77.237.80.0/20 maxlen: 20
77.237.80.0/24 maxlen: 24
77.237.81.0/24 maxlen: 24
77.237.82.0/24 maxlen: 24
77.237.83.0/24 maxlen: 24
77.237.84.0/23 maxlen: 24
77.237.84.0/24 maxlen: 24
77.237.85.0/24 maxlen: 24
77.237.87.0/24 maxlen: 24
77.237.88.0/24 maxlen: 24
77.237.89.0/24 maxlen: 24
77.237.91.0/24 maxlen: 24
77.237.94.0/24 maxlen: 24
77.237.95.0/24 maxlen: 24
92.242.192.0/19 maxlen: 19
92.242.192.0/23 maxlen: 23
92.242.192.0/24 maxlen: 24
92.242.193.0/24 maxlen: 24
92.242.194.0/24 maxlen: 24
92.242.195.0/24 maxlen: 24
92.242.198.0/24 maxlen: 24
92.242.200.0/21 maxlen: 21
92.242.202.0/23 maxlen: 23
92.242.202.0/24 maxlen: 24
92.242.203.0/24 maxlen: 24
92.242.204.0/24 maxlen: 24
92.242.205.0/24 maxlen: 24
92.242.206.0/24 maxlen: 24
92.242.207.0/24 maxlen: 24
92.242.208.0/20 maxlen: 20
92.242.208.0/24 maxlen: 24
92.242.210.0/23 maxlen: 23
92.242.210.0/24 maxlen: 24
92.242.211.0/24 maxlen: 24
92.242.212.0/22 maxlen: 22
92.242.214.0/24 maxlen: 24
92.242.215.0/24 maxlen: 24
92.242.220.0/24 maxlen: 24
92.242.223.0/24 maxlen: 24
185.14.160.0/22 maxlen: 22
185.14.160.0/24 maxlen: 24
185.14.163.0/24 maxlen: 24
185.225.240.0/24 maxlen: 24
185.225.241.0/24 maxlen: 24
185.225.242.0/23 maxlen: 23
185.225.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:6b:8a:63:76:d6:f6:64:9c:bd:f2:5b:b8:28:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Validity
Not Before: May 13 11:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a20457dee3030eb7915547ffcaed587dfb99bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:9e:d5:91:64:5a:a7:e6:3d:54:a6:39:66:
60:36:3d:17:93:c6:37:8e:13:97:3b:a3:a7:5d:60:
5b:3d:13:ca:f7:c5:28:c7:38:f1:d5:a5:69:06:c3:
a7:a9:8d:b8:7b:69:07:60:29:8c:59:ef:63:b6:39:
50:ce:d7:6b:2b:3c:e0:99:5f:2c:90:32:44:db:55:
e0:89:06:91:37:88:ae:fa:8c:b0:f3:d1:02:98:68:
43:59:c0:86:35:a4:a6:2b:88:cc:99:7a:6b:3b:dd:
55:7c:9c:eb:4f:bf:38:5e:d4:cb:a9:de:20:ee:23:
24:cf:f8:4a:e4:3a:70:7b:95:48:67:49:d3:db:78:
d4:5d:26:20:68:26:e9:6e:c0:ac:8c:4b:c5:5a:7c:
ac:f8:9f:41:2f:db:3a:49:95:62:02:a0:50:2a:74:
91:3c:d1:94:f6:09:2f:61:bc:2b:32:5a:47:98:09:
1a:12:67:d0:ad:b3:33:b1:bb:6e:89:e5:4b:31:88:
0a:74:82:fb:d1:2c:6d:6c:c2:a3:bc:b9:60:6a:11:
5f:ce:16:32:2e:5f:9d:da:a8:6a:4b:9e:3f:63:4d:
02:13:b2:ca:1e:ad:f5:cf:58:59:3b:5f:c3:60:3c:
ee:c0:c3:25:f3:4b:f9:a3:f1:75:70:fd:a7:84:b1:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:45:7D:EE:30:30:EB:79:15:54:7F:FC:AE:D5:87:DF:B9:9B:C3
X509v3 Authority Key Identifier:
keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/GiBFfe4wMOt5FVR__K7Vh9-5m8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.64.0/19
92.242.192.0/19
185.14.160.0/22
185.225.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:8f:d0:8d:f0:5f:d4:70:a8:c6:32:c6:bc:ae:62:4d:30:78:
f3:5a:da:63:86:43:60:6e:27:d4:b2:38:2a:c3:e7:ac:53:a7:
db:a8:89:d7:fe:fe:f2:dc:0e:80:fd:fb:7f:cf:84:a2:fc:a0:
ad:b5:61:11:35:e0:c5:30:ea:14:77:fe:d3:13:1e:02:8f:aa:
27:db:91:f7:f8:98:5c:99:b4:13:fe:c6:6d:df:de:3e:84:30:
8c:8d:5b:b8:ce:31:3f:d7:75:d0:20:22:ab:e5:db:2e:cb:32:
c1:50:da:53:2f:4a:95:46:0c:d3:ce:bc:50:bc:8d:d9:e2:c9:
8f:34:6d:ed:e4:15:fd:07:57:c0:d1:ec:07:d6:63:06:db:04:
4b:d9:af:2a:36:26:58:bc:80:8d:ea:d1:8d:42:ab:5a:ce:b4:
26:d1:40:5c:84:b7:c7:94:9a:34:c5:4a:5e:d0:43:76:f7:60:
55:16:44:42:b5:e7:dc:84:fa:bc:43:c6:1a:04:2b:8d:a2:19:
fb:3a:1d:87:7e:35:d4:46:64:aa:bf:ed:0e:0b:ce:db:5b:78:
e5:d0:f4:32:12:50:17:8a:bb:a8:33:6f:63:84:c8:ae:98:fd:
d2:37:52:43:2f:46:3a:1e:38:f9:c2:42:ad:2f:f7:85:bd:8a:
d4:7f:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:21:16 2025 by rpki-client