Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w8J-75C32xvXkSz5WijhXC1OSko.roa
File: w8J-75C32xvXkSz5WijhXC1OSko.roa (raw, json)
Hash identifier: m3pGMRPqlRljWba6Q8zEoS0PnVTWcZqWHqek/sDGl/A=
Subject key identifier: C3:C2:7E:EF:90:B7:DB:1B:D7:91:2C:F9:5A:28:E1:5C:2D:4E:4A:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0197C77859E90305327C79E4A4924D33A9F5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w8J-75C32xvXkSz5WijhXC1OSko.roa
Signing time: Tue 01 Jul 2025 19:30:42 +0000
ROA not before: Tue 01 Jul 2025 19:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.239.96.0/24 maxlen: 24
77.239.97.0/24 maxlen: 24
77.239.98.0/24 maxlen: 24
77.239.99.0/24 maxlen: 24
77.239.100.0/24 maxlen: 24
77.239.101.0/24 maxlen: 24
77.239.102.0/24 maxlen: 24
77.239.103.0/24 maxlen: 24
77.239.112.0/24 maxlen: 24
77.239.113.0/24 maxlen: 24
77.239.114.0/24 maxlen: 24
77.239.115.0/24 maxlen: 24
77.239.116.0/24 maxlen: 24
77.239.117.0/24 maxlen: 24
77.239.118.0/24 maxlen: 24
77.239.119.0/24 maxlen: 24
77.239.120.0/24 maxlen: 24
77.239.121.0/24 maxlen: 24
77.239.122.0/24 maxlen: 24
77.239.123.0/24 maxlen: 24
77.239.124.0/24 maxlen: 24
77.239.125.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.66.0/24 maxlen: 24
150.241.67.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.78.0/24 maxlen: 24
150.241.79.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
150.241.81.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.84.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.88.0/24 maxlen: 24
150.241.89.0/24 maxlen: 24
150.241.90.0/24 maxlen: 24
150.241.91.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
150.241.95.0/24 maxlen: 24
150.241.96.0/24 maxlen: 24
150.241.97.0/24 maxlen: 24
150.241.98.0/24 maxlen: 24
150.241.99.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:78:59:e9:03:05:32:7c:79:e4:a4:92:4d:33:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 19:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c27eef90b7db1bd7912cf95a28e15c2d4e4a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:74:a4:0a:7f:ed:1d:12:57:c1:0b:03:ae:
17:78:c6:31:61:36:28:e6:e5:46:0c:61:81:c7:aa:
35:a3:85:09:0c:14:fc:ca:51:3e:3d:0e:dc:6a:7f:
12:ed:3e:05:94:e0:e2:88:3d:49:5f:72:5d:39:31:
fe:eb:d8:e7:8d:07:3f:ce:45:b1:6b:c9:44:41:92:
57:60:be:93:a0:f1:44:30:09:48:59:00:e1:ed:1d:
b4:b0:bc:90:b1:9a:1a:04:d5:e0:81:fd:ae:20:ae:
cd:24:04:b9:bb:97:07:59:7a:37:54:da:7f:61:a2:
68:70:02:aa:51:90:51:cc:90:79:28:0b:e3:2d:a2:
73:d4:5f:71:66:86:74:e9:be:f9:93:27:30:f8:3f:
9c:4b:6d:26:b2:67:07:cc:e5:00:ca:89:0f:d0:9c:
ae:82:91:ae:41:d6:a8:cf:78:f8:d8:22:ee:50:05:
7c:61:54:7c:fd:14:cf:2b:f8:be:7b:42:ef:9c:60:
7d:23:30:b8:31:f4:35:a7:30:50:19:4e:4b:5a:99:
52:e1:bb:f6:f3:74:1c:72:1c:99:b0:f8:3c:97:26:
57:82:0f:7a:c9:67:22:ad:fe:fb:59:f4:75:0a:20:
da:80:ef:c2:a6:b8:6b:b5:6d:3a:16:1b:f3:06:bb:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:7E:EF:90:B7:DB:1B:D7:91:2C:F9:5A:28:E1:5C:2D:4E:4A:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w8J-75C32xvXkSz5WijhXC1OSko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.96.0/21
77.239.112.0-77.239.125.255
150.241.64.0-150.241.103.255
Signature Algorithm: sha256WithRSAEncryption
7b:b4:18:9a:62:8d:61:37:bb:2b:35:49:89:b7:6f:f3:43:a8:
16:57:5f:3c:77:ab:1a:76:55:52:77:29:bb:1b:1e:1d:c5:d0:
ac:ca:88:8c:6f:05:eb:86:eb:0e:d3:81:2e:e1:ff:20:dd:d8:
b6:02:b7:d0:fc:46:25:41:f9:a2:78:62:5c:78:71:eb:a3:11:
77:44:c7:71:3a:e5:ec:51:2c:b0:29:54:2f:ae:09:b4:78:d0:
55:49:3d:1c:2e:64:86:bb:01:a5:8e:3f:da:5f:b1:1a:35:2f:
26:0e:0f:3d:bd:88:c5:e3:dd:d1:c3:d7:7f:41:1c:cb:b2:14:
8f:69:6d:5b:f9:91:16:15:23:99:09:18:78:c9:0f:86:e5:54:
36:4b:24:d9:45:0f:41:2a:1a:91:cf:3d:42:72:0e:9d:4b:df:
15:78:61:38:ba:82:04:8c:29:4a:51:8e:f9:41:75:ee:0c:23:
46:32:29:4c:74:3b:94:eb:40:fd:2c:58:17:b4:da:03:03:1e:
8d:ee:4f:c7:ab:0d:49:0a:d9:62:56:51:5b:8e:01:51:2a:c0:
6f:12:40:d1:4e:a3:a3:bb:e7:e2:a7:e9:9e:17:0b:86:7a:08:
2e:4e:f9:b1:ae:20:bd:64:be:99:7e:e4:d7:e1:0a:27:5f:56:
db:14:85:0c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZfHeFnpAwUyfHnkpJJNM6n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNzAxMTkzMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2MyN2VlZjkwYjdkYjFiZDc5MTJjZjk1YTI4ZTE1YzJkNGU0YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6V0pAp/7R0SV8ELA64XeMYxYTYo
5uVGDGGBx6o1o4UJDBT8ylE+PQ7can8S7T4FlODiiD1JX3JdOTH+69jnjQc/zkWx
a8lEQZJXYL6ToPFEMAlIWQDh7R20sLyQsZoaBNXggf2uIK7NJAS5u5cHWXo3VNp/
YaJocAKqUZBRzJB5KAvjLaJz1F9xZoZ06b75kycw+D+cS20msmcHzOUAyokP0Jyu
gpGuQdaoz3j42CLuUAV8YVR8/RTPK/i+e0LvnGB9IzC4MfQ1pzBQGU5LWplS4bv2
83QcchyZsPg8lyZXgg96yWcirf77WfR1CiDagO/CprhrtW06FhvzBrvD3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMPCfu+Qt9sb15Es+Voo4VwtTkpKMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdzhKLTc1QzMyeHZYa1N6NVdpamhYQzFPU2tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQDTe9gMAwD
BARN73ADBAFN73wwDAMEBpbxQAMEA5bxYDANBgkqhkiG9w0BAQsFAAOCAQEAe7QY
mmKNYTe7KzVJibdv80OoFldfPHerGnZVUncpuxseHcXQrMqIjG8F64brDtOBLuH/
IN3YtgK30PxGJUH5onhiXHhx66MRd0THcTrl7FEssClUL64JtHjQVUk9HC5khrsB
pY4/2l+xGjUvJg4PPb2IxePd0cPXf0Ecy7IUj2ltW/mRFhUjmQkYeMkPhuVUNksk
2UUPQSoakc89QnIOnUvfFXhhOLqCBIwpSlGO+UF17gwjRjIpTHQ7lOtA/SxYF7Ta
AwMeje5Px6sNSQrZYlZRW44BUSrAbxJA0U6jo7vn4qfpnhcLhnoILk75sa4gvWS+
mX7k1+EKJ19W2xSFDA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:17:49 2025 by rpki-client