Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/PiqBBXAA6we4MoLDl4MdjTFczpk.roa
File: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (raw, json)
Hash identifier: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=
Subject key identifier: 3E:2A:81:05:70:00:EB:07:B8:32:82:C3:97:83:1D:8D:31:5C:CE:99
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 01968101F17312F6C5035328AFC76017F173
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/PiqBBXAA6we4MoLDl4MdjTFczpk.roa
Signing time: Tue 29 Apr 2025 10:05:10 +0000
ROA not before: Tue 29 Apr 2025 10:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42586
IP address blocks: 77.36.128.0/17 maxlen: 24
77.36.128.0/18 maxlen: 18
77.36.128.0/19 maxlen: 19
77.36.128.0/20 maxlen: 20
77.36.144.0/20 maxlen: 20
77.36.160.0/19 maxlen: 19
77.36.160.0/20 maxlen: 20
77.36.163.0/24 maxlen: 24
77.36.164.0/24 maxlen: 24
77.36.165.0/24 maxlen: 24
77.36.166.0/24 maxlen: 24
77.36.176.0/20 maxlen: 20
77.36.192.0/18 maxlen: 18
77.36.192.0/19 maxlen: 19
77.36.192.0/20 maxlen: 20
77.36.208.0/20 maxlen: 20
77.36.224.0/19 maxlen: 19
77.36.224.0/20 maxlen: 20
77.36.240.0/20 maxlen: 20
185.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:01:f1:73:12:f6:c5:03:53:28:af:c7:60:17:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Apr 29 10:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e2a81057000eb07b83282c397831d8d315cce99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:30:2b:39:d8:4d:ff:06:77:ba:d9:86:75:
f4:ad:fe:b1:6c:c3:79:7e:61:50:4b:20:e4:c7:57:
0c:8d:fd:4f:5e:4e:17:90:69:98:b9:33:9e:a8:7e:
94:fa:0d:61:0c:96:db:38:26:36:84:2f:07:2d:91:
13:3e:20:9d:67:3c:73:c5:3e:2c:25:53:16:9b:9b:
01:2b:ea:be:d3:d7:0f:0f:2f:a8:42:93:9b:79:80:
76:10:f2:9b:57:df:f8:74:12:c3:f0:5b:a3:b7:47:
d4:10:01:cb:8c:ef:0c:30:46:0a:06:e4:d8:a7:16:
2c:75:0c:0e:d0:10:70:c5:ef:46:01:0a:91:c8:26:
78:ae:7d:42:f6:8a:c7:69:9b:8c:4c:32:f4:16:2d:
e1:e4:e9:3d:7f:ab:0d:3b:dd:69:52:27:c6:8a:49:
5a:83:12:be:51:a7:b8:eb:42:ea:ce:ec:4f:25:da:
22:a2:c4:45:d0:01:81:84:a3:7d:b2:99:63:9e:bf:
d9:b5:63:f6:3b:29:64:e4:d3:4f:e0:33:dc:aa:f4:
d9:48:d8:39:e4:67:75:11:d9:29:90:bd:b2:a8:3f:
1d:1c:40:27:d3:e5:ac:0e:d6:6b:e1:bb:fc:73:0c:
63:8b:1d:22:88:2e:e9:6f:f9:8c:aa:8f:1b:7c:f4:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:81:05:70:00:EB:07:B8:32:82:C3:97:83:1D:8D:31:5C:CE:99
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/PiqBBXAA6we4MoLDl4MdjTFczpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.128.0/17
185.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
58:92:e2:68:b9:8b:43:2a:03:30:0c:22:1c:09:08:21:1b:8b:
e3:02:69:cf:db:bf:67:6b:0d:78:cf:68:02:84:72:2c:80:65:
ee:81:05:0f:c6:46:b8:84:66:06:7e:d3:e3:1c:32:83:2d:57:
86:41:ee:f9:c7:3e:14:33:d7:a9:a1:53:e9:a7:5b:b7:51:61:
11:a5:34:9f:02:74:33:1c:f1:22:02:1a:e9:eb:23:a2:0f:45:
08:78:55:b7:f3:31:2a:fd:ed:a9:98:f3:b0:64:2b:f9:64:a9:
c0:81:75:ef:68:5a:f2:aa:2b:fa:c9:05:da:da:3f:29:e2:d8:
6e:46:dc:e9:c5:ff:3d:04:11:88:80:ab:76:8f:b9:e5:a5:6b:
ab:6b:54:b1:a3:d4:48:ef:55:8b:aa:8b:74:29:56:27:a4:c2:
85:8f:88:60:47:73:33:e9:5c:5d:2f:48:da:6d:d6:04:e2:b5:
58:86:3b:fb:4f:f7:68:61:ea:56:08:3c:1c:3a:f6:1c:d1:61:
24:69:05:d4:63:1e:26:28:40:12:16:ce:85:20:23:bc:0f:df:
93:12:1a:1a:6c:02:b6:80:66:a1:81:b9:c9:80:b5:67:28:48:
35:39:a4:8d:8f:14:ad:49:da:22:38:64:7a:1a:a2:66:9c:8d:
fc:96:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:03:52 2025 by rpki-client