Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/p9BoBQcHvWcnfK5Z-dzz9tIRMIc.roa
File: p9BoBQcHvWcnfK5Z-dzz9tIRMIc.roa (raw, json)
Hash identifier: kfZyqesNLF5uUfEX65NwLN/N1UO4kuNU59afntzdAO0=
Subject key identifier: A7:D0:68:05:07:07:BD:67:27:7C:AE:59:F9:DC:F3:F6:D2:11:30:87
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019938370C69466B208A170C5AC3F98A51E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/p9BoBQcHvWcnfK5Z-dzz9tIRMIc.roa
Signing time: Thu 11 Sep 2025 09:59:15 +0000
ROA not before: Thu 11 Sep 2025 09:59:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28964
IP address blocks: 77.105.8.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.192.0/24 maxlen: 24
188.255.195.0/24 maxlen: 24
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:37:0c:69:46:6b:20:8a:17:0c:5a:c3:f9:8a:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 11 09:59:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d068050707bd67277cae59f9dcf3f6d2113087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:85:09:7f:02:4e:60:da:8f:b7:af:64:c5:
b6:d3:4d:d0:12:1a:c9:52:10:62:c2:10:9e:e6:cb:
65:51:f9:9d:c5:5e:7c:b2:25:dc:e5:8b:d9:71:e5:
32:dc:c3:54:19:fc:7d:c7:56:fc:14:e0:0c:86:49:
46:78:f2:a5:8a:1f:40:3e:93:81:9d:a2:ac:ba:bf:
90:ff:a0:af:6f:9d:f9:9f:39:a8:71:39:99:ea:03:
79:82:09:f8:16:8c:65:a9:17:bb:4b:d2:32:e3:6c:
9c:d5:32:87:2a:4f:6c:d6:dc:f9:7b:b0:69:9e:42:
48:86:86:07:71:31:b7:e9:dc:8f:31:90:71:71:12:
86:9d:9a:9b:10:57:25:08:9c:32:e9:fc:0b:53:80:
9e:bd:d8:32:99:69:78:ac:f7:19:68:63:01:97:d7:
da:cb:64:aa:c3:10:80:ae:28:d2:98:a3:fb:e6:d3:
15:33:b6:78:60:5d:4d:37:70:82:ef:19:c1:87:fc:
7f:b6:45:4b:1f:b2:a1:84:39:84:34:05:c1:ef:aa:
90:10:55:2e:d7:4e:14:a0:e3:8d:20:7a:71:44:cf:
77:18:e8:b8:a2:b2:53:7c:69:9b:32:54:99:25:53:
b6:63:39:c0:7b:1a:61:7a:c8:d9:f2:29:dd:25:0b:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:68:05:07:07:BD:67:27:7C:AE:59:F9:DC:F3:F6:D2:11:30:87
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/p9BoBQcHvWcnfK5Z-dzz9tIRMIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.39.0/24
79.175.66.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0/23
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
178.219.2.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.235.0/24
178.253.238.0/24
178.253.246.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/24
188.255.195.0/24
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
212.69.2.0-212.69.4.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:79:29:f7:f8:df:cd:4a:c7:f6:4e:74:e4:df:79:3e:8d:23:
42:00:97:58:1b:dc:27:66:df:f3:49:af:a0:85:77:42:d7:c2:
63:be:34:f9:6e:2e:41:d8:b8:8c:fb:32:d5:d5:20:52:ac:c2:
41:de:2b:98:63:76:d5:61:cb:bc:26:94:83:45:5a:e4:a4:47:
f3:0e:32:a6:dd:5d:ca:c4:d3:36:8f:38:1c:d3:dc:9e:4c:cc:
ec:72:2a:4a:f8:8a:46:32:2a:f0:3c:53:b5:88:07:31:68:00:
50:7e:8f:3f:37:0a:a6:d6:8a:3a:de:87:2d:3d:12:f4:0f:1a:
63:e1:0c:42:59:35:8d:21:8d:56:35:46:58:1e:eb:69:cb:16:
37:5a:59:8c:4c:e6:6e:c8:d9:bb:6a:cf:f9:f7:b0:73:cf:fd:
e8:77:e4:b0:e3:1c:c4:cc:c2:59:1f:16:d4:36:ed:76:e5:4e:
af:fd:fc:06:0b:37:eb:ae:7b:5f:3b:74:61:ab:40:fe:fa:d8:
c6:9a:bc:c3:9e:bf:43:9c:3a:6c:3a:f7:14:7a:90:95:e5:ad:
ac:53:fa:07:ae:93:ff:f4:0b:66:f4:a8:61:bc:51:3c:4d:4b:
a4:2c:85:1b:ef:28:6e:27:7e:56:e8:46:4a:65:7a:5e:79:db:
f4:6e:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:54 2025 by rpki-client