
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pma951-fcX5jiVn9YitaIzqrAj8.roa
File: Pma951-fcX5jiVn9YitaIzqrAj8.roa (raw, json)
Hash identifier: 0/AGrcLuUyyDlI1hxz3Umwj3aZC17s9562wzTDbO9go=
Subject key identifier: 3E:66:BD:E7:5F:9F:71:7E:63:89:59:FD:62:2B:5A:23:3A:AB:02:3F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019860757D1A25650A535559781089CDD560
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pma951-fcX5jiVn9YitaIzqrAj8.roa
Signing time: Thu 31 Jul 2025 12:29:29 +0000
ROA not before: Thu 31 Jul 2025 12:29:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28964
IP address blocks: 77.105.8.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.192.0/24 maxlen: 24
188.255.195.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:75:7d:1a:25:65:0a:53:55:59:78:10:89:cd:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 31 12:29:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e66bde75f9f717e638959fd622b5a233aab023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:52:10:ed:05:4c:5c:e1:71:13:bd:93:9c:
c6:f4:2d:e6:b1:88:8e:83:a5:0e:ca:1c:9b:26:93:
51:33:8d:56:19:65:b1:f2:9d:a9:21:fb:27:5a:22:
73:c8:04:4b:83:2e:be:eb:0c:3d:f8:82:dc:cc:61:
18:96:55:9d:ad:b3:4a:9a:a7:f7:cc:94:64:8a:cd:
11:28:91:14:84:78:81:10:c8:c4:f6:5c:d1:56:f7:
11:e4:06:f6:c8:7d:4d:de:33:f7:e5:83:e5:7a:13:
c6:9d:ac:18:b6:bb:4e:db:6a:2f:26:7b:78:fd:b9:
11:a1:1a:d0:8b:8d:79:79:fb:45:9f:eb:09:7e:d5:
a8:af:a8:a1:bc:e2:c5:a9:3c:85:d9:94:84:e9:f4:
31:c7:ee:f2:a1:6a:5f:1b:75:5a:8c:63:03:9e:8c:
75:7f:72:f2:0d:61:53:0f:83:99:cb:d8:06:11:9e:
3b:ea:d0:78:ba:e5:03:6e:e5:6b:26:45:1e:89:3c:
ee:8e:27:3b:3c:2c:d2:22:83:6d:21:68:5d:d0:9a:
77:8e:93:c6:fc:0b:c9:5b:37:e1:aa:ea:f7:66:ef:
b2:6d:54:8c:1d:26:6a:63:4b:f2:77:a4:01:60:f2:
5f:0a:52:6c:a4:3b:d1:5b:5d:ca:cb:6f:16:fc:bc:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:BD:E7:5F:9F:71:7E:63:89:59:FD:62:2B:5A:23:3A:AB:02:3F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pma951-fcX5jiVn9YitaIzqrAj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.39.0/24
79.175.66.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
178.219.2.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.235.0/24
178.253.238.0/24
178.253.245.0-178.253.246.255
188.255.179.0/24
188.255.190.0/24
188.255.192.0/24
188.255.195.0-188.255.199.255
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
212.69.2.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bf:d3:b4:61:1a:1b:d6:cc:8f:99:21:a7:83:3e:1a:95:14:
bb:14:a6:b1:57:a1:33:b4:d9:84:30:ec:9f:86:dc:67:62:91:
52:b0:2f:c4:4c:ce:61:50:16:ac:e4:7f:d3:35:82:4a:8f:8a:
80:0b:5b:83:f1:6d:f8:0b:95:6d:81:cd:cb:3e:b5:09:c6:9e:
99:c8:7b:f0:67:b6:e8:44:ec:e6:a3:86:f0:5f:f5:a8:8d:93:
a9:64:08:9f:68:f7:2f:32:7b:33:14:27:08:f3:03:fa:a5:3e:
28:9d:ad:d3:5c:ca:d4:3d:04:e2:a4:ee:91:90:f9:07:ab:82:
d9:50:f5:0e:28:79:56:1f:15:e1:de:c7:03:de:fc:61:cf:be:
b0:9a:03:f9:30:51:4a:09:98:ef:9f:f7:44:4c:77:e2:34:7d:
36:34:62:01:2f:3d:73:89:f7:2c:25:70:58:c2:ce:0a:19:eb:
e5:67:3c:aa:c5:01:a0:85:c1:04:89:88:a2:35:dc:d3:1e:5c:
52:3c:4e:2a:5d:a0:83:eb:4f:84:c1:7f:2a:a8:61:ce:17:64:
ce:2e:be:46:85:ab:62:b4:3e:b6:4f:eb:32:0d:7f:f1:9b:8c:
2f:f4:65:c8:f7:6e:10:77:4e:40:bf:94:0f:28:f9:6b:24:72:
31:c1:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:37 2025 by rpki-client