Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wlWEPK9oT0vDnxEjjTPAIESG9jY.roa
File: wlWEPK9oT0vDnxEjjTPAIESG9jY.roa (raw, json)
Hash identifier: y29yP0lYvsZG2rOTMLeiSb5TAQggxWphDPMDtVpzVLw=
Subject key identifier: C2:55:84:3C:AF:68:4F:4B:C3:9F:11:23:8D:33:C0:20:44:86:F6:36
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198AD947520B5C6A0BD6FD86787F0742A29
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wlWEPK9oT0vDnxEjjTPAIESG9jY.roa
Signing time: Fri 15 Aug 2025 11:54:04 +0000
ROA not before: Fri 15 Aug 2025 11:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28964
IP address blocks: 77.105.8.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.192.0/24 maxlen: 24
188.255.195.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:94:75:20:b5:c6:a0:bd:6f:d8:67:87:f0:74:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 15 11:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c255843caf684f4bc39f11238d33c0204486f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:f0:f9:bd:7e:be:de:31:cd:7a:49:e8:9a:
21:22:8f:90:56:47:32:4e:0e:89:f6:8b:33:c1:aa:
34:1b:30:da:8e:1c:7d:0e:72:9e:67:d8:d5:9a:9e:
ea:d6:e0:74:8e:d0:00:bd:f0:f5:36:a8:9e:80:a7:
67:c5:9a:76:c0:f9:62:17:36:16:11:0d:e9:1c:14:
76:cf:bf:66:05:cf:37:bd:3a:08:02:f6:7c:22:9a:
ee:35:66:f2:95:ef:3a:c7:7f:c7:77:52:ef:a4:6f:
c3:b1:25:59:0b:8a:f0:aa:c4:29:8e:32:3a:73:2d:
12:16:ac:ac:89:a1:ce:06:48:9b:53:d9:52:f2:d7:
fd:c9:d5:90:92:73:27:b7:e6:1d:f4:05:85:7b:bd:
0b:63:4c:e8:75:31:57:05:86:b6:0e:92:22:16:67:
69:ea:b0:05:d4:62:9d:0a:38:95:11:c2:c2:e2:99:
03:23:07:21:98:21:a8:6e:0e:a1:46:b3:e6:6a:55:
e4:ca:61:3e:2b:01:13:d8:20:ee:ba:49:7a:6f:0e:
fb:71:65:9f:68:ef:0c:2a:29:fc:9e:5a:07:d7:58:
e7:c7:60:66:fb:bf:a0:d5:a8:b7:e9:98:96:34:d2:
e7:1f:1e:a9:d0:86:65:79:bb:4c:b4:ca:68:6b:65:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:84:3C:AF:68:4F:4B:C3:9F:11:23:8D:33:C0:20:44:86:F6:36
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wlWEPK9oT0vDnxEjjTPAIESG9jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.39.0/24
79.175.66.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0/23
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
178.219.2.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.235.0/24
178.253.238.0/24
178.253.246.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/24
188.255.195.0-188.255.199.255
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
212.69.2.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3d:48:6a:2a:92:25:90:22:4f:74:de:ad:2e:71:b7:c5:c3:
d0:ee:22:78:ca:27:ef:6a:ee:1c:66:15:f1:ef:b0:34:35:98:
55:c0:39:9c:65:7d:71:56:4f:07:17:a6:36:b7:0a:5d:ce:cb:
1d:5c:32:3f:d8:09:72:2a:e7:0a:4b:fa:0a:91:4c:9a:02:5e:
07:bb:b3:88:39:80:71:09:a3:bc:09:4c:df:cd:5c:25:ad:08:
75:46:40:0e:bd:ef:f6:8f:6d:c3:ac:85:c4:90:9a:ca:a4:e6:
75:fe:6f:8b:6a:e2:1c:ae:0d:ab:da:e5:e6:e2:68:3c:ab:23:
c9:0b:00:d2:b5:31:b8:c2:97:51:46:19:03:15:fc:1f:69:cf:
94:bf:0d:23:af:05:02:2b:5d:d5:e0:b9:b0:fc:1e:88:e2:ce:
4e:5b:1f:c2:e4:47:f5:c9:ca:08:79:ca:66:6a:09:79:82:2b:
8c:04:86:09:30:67:eb:c6:82:28:12:e5:b5:5a:aa:6c:6c:4b:
d7:17:a3:bc:cd:20:1f:bc:58:c3:37:2a:7d:9f:2e:56:c8:6c:
2a:1b:ac:35:82:43:c7:84:50:e9:09:89:f4:88:3e:27:ca:ce:
10:ce:81:7b:48:31:70:09:cb:63:84:42:be:cc:2d:8a:73:36:
7f:29:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:23 2025 by rpki-client