Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/29jUCUzkQlWvUPKQZcPv2XQJD2M.roa
File: 29jUCUzkQlWvUPKQZcPv2XQJD2M.roa (raw, json)
Hash identifier: EB00zymFKGFBbV5yFGhFwDDZ1buEnFzqXS6CYRkLCLY=
Subject key identifier: DB:D8:D4:09:4C:E4:42:55:AF:50:F2:90:65:C3:EF:D9:74:09:0F:63
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198B9CBE60C6195435C8875A7F9D14AECE3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/29jUCUzkQlWvUPKQZcPv2XQJD2M.roa
Signing time: Sun 17 Aug 2025 20:50:04 +0000
ROA not before: Sun 17 Aug 2025 20:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.105.61.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
178.253.221.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.222.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:cb:e6:0c:61:95:43:5c:88:75:a7:f9:d1:4a:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 17 20:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbd8d4094ce44255af50f29065c3efd974090f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:a7:04:e2:58:bf:fd:e5:59:8b:d3:ec:cb:
80:40:f4:e5:01:1e:0a:1f:c9:00:4c:b8:35:80:96:
f5:17:ed:6e:e3:e2:2a:7b:f1:c9:bf:e5:96:2a:ea:
0a:81:95:2c:30:31:60:9b:30:ff:b0:08:b3:39:a5:
f3:01:72:9d:09:37:3d:ad:c7:79:27:ff:08:8c:b2:
21:bc:ea:0c:ed:3c:d1:45:7e:ba:d2:63:f8:df:cc:
37:84:06:e6:66:3a:79:10:cb:7e:16:40:19:b8:03:
6e:ef:31:62:89:73:0a:24:a2:c3:0b:ec:35:cc:51:
95:d8:d5:76:37:89:d8:62:a9:c7:55:40:59:2e:3d:
b2:92:10:7d:34:d2:b7:27:b3:91:8a:26:9f:8f:19:
3d:85:bf:ea:6d:13:b2:a2:ba:03:5b:02:2f:25:86:
51:7f:a2:1b:08:2b:d7:ac:0c:fe:08:82:10:63:a9:
83:04:b2:6a:64:ef:68:c2:e4:e4:e5:8c:25:b8:32:
b2:12:32:4e:98:e8:d8:88:09:c7:59:38:f8:30:bd:
12:27:c3:d5:0d:ca:81:38:3d:99:da:4e:67:69:d1:
cc:94:38:49:2d:93:22:01:3d:5c:ed:38:db:b4:7c:
ba:87:08:1f:0e:ff:0e:aa:63:ec:55:4d:08:0d:e0:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:D4:09:4C:E4:42:55:AF:50:F2:90:65:C3:EF:D9:74:09:0F:63
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/29jUCUzkQlWvUPKQZcPv2XQJD2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.61.0/24
79.175.93.0/24
81.18.48.0/24
109.121.33.0/24
109.121.37.0/24
109.121.39.0/24
109.121.42.0/24
109.121.45.0/24
109.121.47.0/24
178.253.221.0/24
188.255.148.0/24
188.255.222.0/24
188.255.236.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8a:81:6d:5c:74:6b:7e:bb:4c:43:7e:b3:c4:c5:aa:71:80:
3c:29:b0:b7:b8:4a:1e:96:c1:ac:d7:46:f1:20:dd:52:6b:a8:
e9:6b:67:a9:81:74:6f:d2:98:1b:1e:14:9c:2c:b2:45:07:2b:
6d:1c:d1:b9:b1:5e:11:9a:6c:f2:ff:11:28:d6:93:45:95:43:
4b:60:80:c9:b7:f7:99:fd:f5:06:f7:03:c9:42:05:f7:dd:f1:
d6:c1:cb:89:a8:2b:65:f8:6e:48:66:ac:c7:95:ca:9e:75:73:
18:b9:2d:16:00:2c:3e:ae:ae:ad:83:2e:c8:6b:fd:13:1e:d3:
ae:45:3f:fa:9a:34:0f:c4:82:dd:fa:bc:85:9c:87:ec:24:c4:
41:4d:74:e6:48:e1:d2:58:a2:a7:e8:ab:32:8c:5c:dd:92:6e:
58:de:29:0e:5f:48:43:06:07:27:e6:66:15:4e:fd:5e:8b:42:
b3:93:87:9a:ab:b5:aa:df:ef:9e:18:3b:04:92:a2:e0:55:8f:
d6:41:01:78:05:36:48:aa:f9:b4:5d:fe:04:32:9d:44:77:ef:
7d:fb:ab:0e:c6:43:43:bd:51:70:da:5d:10:de:55:32:90:e7:
c0:55:3b:56:2b:3c:10:38:86:b7:23:e1:df:3d:7b:38:d5:d8:
a3:26:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:22 2025 by rpki-client