Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/wcJ_wqjkpF90dh4pnsLUh2A6UA8.roa
File: wcJ_wqjkpF90dh4pnsLUh2A6UA8.roa (raw, json)
Hash identifier: Vle/iazgF/KeRcK8urw8Nfb/AAf+CLF6fd+SxsYrWz8=
Subject key identifier: C1:C2:7F:C2:A8:E4:A4:5F:74:76:1E:29:9E:C2:D4:87:60:3A:50:0F
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0198078897D08D42DB7246B41552ADFCA68D
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/wcJ_wqjkpF90dh4pnsLUh2A6UA8.roa
Signing time: Mon 14 Jul 2025 06:04:08 +0000
ROA not before: Mon 14 Jul 2025 06:04:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
46.235.88.0/23 maxlen: 23
46.235.90.0/23 maxlen: 23
46.235.91.0/24 maxlen: 24
46.235.92.0/23 maxlen: 23
46.235.94.0/23 maxlen: 23
46.235.94.0/24 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
88.85.224.0/21 maxlen: 21
88.85.224.0/23 maxlen: 23
88.85.226.0/23 maxlen: 23
88.85.228.0/23 maxlen: 23
88.85.228.0/24 maxlen: 24
88.85.230.0/23 maxlen: 23
88.85.231.0/24 maxlen: 24
88.85.232.0/21 maxlen: 21
88.85.232.0/24 maxlen: 24
88.85.235.0/24 maxlen: 24
88.85.236.0/24 maxlen: 24
88.85.237.0/24 maxlen: 24
88.85.238.0/23 maxlen: 23
88.85.238.0/24 maxlen: 24
88.85.239.0/24 maxlen: 24
88.85.240.0/21 maxlen: 21
88.85.240.0/23 maxlen: 23
88.85.242.0/24 maxlen: 24
88.85.244.0/24 maxlen: 24
88.85.245.0/24 maxlen: 24
88.85.246.0/23 maxlen: 23
88.85.247.0/24 maxlen: 24
88.85.248.0/21 maxlen: 21
88.85.248.0/23 maxlen: 23
88.85.250.0/23 maxlen: 23
88.85.250.0/24 maxlen: 24
88.85.252.0/23 maxlen: 23
88.85.254.0/24 maxlen: 24
88.85.255.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.32.0/24 maxlen: 24
176.98.33.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.34.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
176.241.184.0/23 maxlen: 23
176.241.186.0/23 maxlen: 23
176.241.188.0/24 maxlen: 24
176.241.189.0/24 maxlen: 24
176.241.190.0/24 maxlen: 24
176.241.191.0/24 maxlen: 24
178.20.144.0/21 maxlen: 24
178.20.144.0/23 maxlen: 23
178.20.146.0/23 maxlen: 23
178.20.148.0/23 maxlen: 23
178.20.150.0/23 maxlen: 23
185.10.112.0/22 maxlen: 24
185.10.112.0/24 maxlen: 24
185.10.113.0/24 maxlen: 24
185.10.114.0/23 maxlen: 23
185.10.114.0/24 maxlen: 24
185.10.115.0/24 maxlen: 24
185.72.102.0/24 maxlen: 24
185.149.193.0/24 maxlen: 24
185.224.252.0/22 maxlen: 24
185.224.252.0/23 maxlen: 23
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/23 maxlen: 23
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.160.0/23 maxlen: 23
212.12.160.0/24 maxlen: 24
212.12.161.0/24 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.162.0/24 maxlen: 24
212.12.163.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.164.0/24 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.167.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.168.0/24 maxlen: 24
212.12.169.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.170.0/24 maxlen: 24
212.12.171.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.174.0/23 maxlen: 23
212.12.175.0/24 maxlen: 24
212.12.176.0/20 maxlen: 20
212.12.176.0/23 maxlen: 23
212.12.178.0/23 maxlen: 23
212.12.180.0/23 maxlen: 23
212.12.182.0/23 maxlen: 23
212.12.182.0/24 maxlen: 24
212.12.183.0/24 maxlen: 24
212.12.184.0/23 maxlen: 23
212.12.185.0/24 maxlen: 24
212.12.186.0/23 maxlen: 23
212.12.187.0/24 maxlen: 24
212.12.188.0/23 maxlen: 23
212.12.189.0/24 maxlen: 24
212.12.190.0/23 maxlen: 23
212.108.85.0/24 maxlen: 24
2a00:1560::/32 maxlen: 32
2a00:1560:4::/47 maxlen: 47
2a00:1560:5::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
2a00:1560:17::/48 maxlen: 48
2a00:1560:18::/48 maxlen: 48
2a00:1560:20::/48 maxlen: 48
2a00:1560:21::/48 maxlen: 48
2a00:1560:24::/48 maxlen: 48
2a00:1560:60::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:88:97:d0:8d:42:db:72:46:b4:15:52:ad:fc:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jul 14 06:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c27fc2a8e4a45f74761e299ec2d487603a500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:3b:6c:2b:9f:fb:8c:03:03:11:66:50:77:
df:82:03:cb:b9:c1:a5:4b:f6:ac:70:c6:8a:1f:5f:
aa:0e:82:a7:ce:58:fe:f4:bb:76:25:99:25:68:ee:
51:42:12:9e:7e:1d:46:20:bd:81:43:3e:a4:31:68:
07:58:b5:a1:a3:c4:bd:00:98:3d:a1:63:26:59:cf:
c0:14:f8:b7:54:69:cc:ed:09:bc:e6:a5:85:e8:2c:
e2:4d:ef:af:ac:a8:51:c9:6d:41:a1:26:19:71:5c:
45:ff:bf:da:7b:cc:91:c1:56:2e:06:0f:fd:22:21:
0f:cf:85:fc:78:6d:bb:c2:e0:81:50:58:34:37:0f:
83:de:66:40:9e:e9:d1:45:f0:a2:12:0a:4d:86:f1:
35:01:88:2c:fa:74:26:0b:7e:ef:f3:43:83:c0:91:
32:ec:42:88:96:b9:9f:86:93:37:9c:c8:8c:b8:d2:
ae:a3:20:02:3c:4b:23:e6:79:da:20:19:68:62:1e:
b2:35:f3:b2:14:1b:10:77:61:6c:36:5c:2e:dc:f8:
29:9a:6a:3a:0d:13:97:ae:97:dd:20:12:0c:88:04:
75:82:49:d9:8c:64:94:df:19:2c:d8:c1:df:c1:92:
78:b0:60:33:a9:a6:75:c1:86:91:5f:c8:a1:ff:24:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:7F:C2:A8:E4:A4:5F:74:76:1E:29:9E:C2:D4:87:60:3A:50:0F
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/wcJ_wqjkpF90dh4pnsLUh2A6UA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.72.102.0/24
185.149.193.0/24
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
212.108.85.0/24
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
14:6c:d2:db:9c:bb:40:79:a9:db:b1:fc:a5:19:73:a6:56:3a:
36:ca:6c:ca:a0:f5:cb:e9:3b:5f:e9:d6:f6:43:d3:09:08:ce:
2d:6d:b6:3f:0a:dc:df:dd:a2:b6:42:d0:16:59:2c:ad:74:f1:
31:cb:e9:19:c8:21:60:33:6e:56:0c:8e:1e:25:a5:46:a3:82:
82:a4:0e:db:53:55:c8:c0:8f:15:34:2d:c8:a4:b2:8a:8c:16:
44:6e:43:90:de:5b:93:fb:d6:56:42:cb:5b:cd:a6:14:dd:cb:
9a:df:9b:6c:e7:70:dd:a4:ef:f1:d2:74:59:c5:83:f3:4c:01:
fb:4a:68:49:c6:16:cd:34:5b:c3:0e:aa:9c:61:70:77:ed:4c:
6e:ea:1b:85:d4:0f:fa:a6:1b:97:3a:1c:be:b5:8a:06:40:01:
34:9b:12:a2:01:19:53:68:b1:72:14:14:b5:c1:26:65:4b:08:
90:32:5e:75:89:55:2e:b4:c9:27:9a:44:df:2e:5a:a6:d8:47:
87:ca:a1:07:b9:d4:a8:90:8a:8b:7d:1c:bc:fa:2d:e5:97:77:
ee:91:ef:9c:de:85:86:0e:3b:53:d7:62:f6:0e:9b:6b:83:dc:
6b:54:54:cc:70:5e:ac:1b:f4:82:8b:4a:42:66:15:ec:3d:f3:
51:e0:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:37 2025 by rpki-client