Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7FVoee-DSc64SX_mgHJzG_LH9YE.roa
File: 7FVoee-DSc64SX_mgHJzG_LH9YE.roa (raw, json)
Hash identifier: mubcu17Vh5KbUOGyuh8NuBJXVOt7Bu50E3mP2qzkNF0=
Subject key identifier: EC:55:68:79:EF:83:49:CE:B8:49:7F:E6:80:72:73:1B:F2:C7:F5:81
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019840531BA21CFC495D24C9100A92B32478
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7FVoee-DSc64SX_mgHJzG_LH9YE.roa
Signing time: Fri 25 Jul 2025 06:44:05 +0000
ROA not before: Fri 25 Jul 2025 06:44:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
62.197.48.0/23 maxlen: 23
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:53:1b:a2:1c:fc:49:5d:24:c9:10:0a:92:b3:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 25 06:44:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec556879ef8349ceb8497fe68072731bf2c7f581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:a3:e3:e3:6a:6c:25:22:91:6d:06:6a:01:
9b:c4:b8:c1:03:9f:0f:a1:97:ef:d6:02:1b:dc:f0:
dc:09:fc:b3:f6:a7:77:91:24:9f:4b:08:88:04:91:
0b:23:fb:ad:0f:d3:a4:5e:31:28:10:b4:58:2a:c1:
2b:c9:79:e2:b0:bf:db:5c:e1:e0:9e:e4:d0:c9:28:
63:da:cf:e0:8d:1f:3f:b4:61:0d:d6:28:db:fc:77:
6d:d4:22:31:08:c5:74:fe:c1:f1:66:a2:60:13:c7:
d3:71:28:f8:c4:54:b9:0d:a6:e9:27:b2:69:ed:0f:
6b:3d:4e:af:c5:40:f3:00:54:2a:33:e1:f0:01:74:
c1:3a:45:24:5c:60:b6:dd:c0:9c:89:03:21:04:ee:
ad:b0:16:95:9b:5e:c1:31:70:4e:b7:5a:fc:1c:04:
51:04:95:1b:29:0b:34:1e:bf:02:a2:3f:c6:ab:b4:
44:79:87:9b:7f:3a:5a:41:be:f1:5e:9f:9a:b2:5b:
02:ef:da:b4:11:af:e3:35:01:cd:5b:e5:aa:a4:a2:
48:d2:aa:12:83:71:82:91:d9:64:0f:b2:1a:a6:e4:
a2:9b:eb:1e:26:71:60:87:e3:9f:b8:d0:de:5f:93:
13:81:2a:23:fc:75:d6:5b:b9:83:ec:95:ef:40:51:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:68:79:EF:83:49:CE:B8:49:7F:E6:80:72:73:1B:F2:C7:F5:81
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7FVoee-DSc64SX_mgHJzG_LH9YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
45.137.212.0/22
46.102.106.0/24
62.197.45.0/24
62.197.48.0/23
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
92.63.224.0/24
176.97.79.0/24
176.98.40.0/24
185.109.48.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
97:2d:12:37:63:be:cc:6b:46:9a:da:a9:5d:35:a9:c5:d9:8c:
db:cc:1e:15:08:b1:24:ba:47:ae:40:0b:2f:a7:35:1c:71:32:
c3:cc:47:05:ae:20:96:42:30:15:b7:d3:31:48:28:27:6c:ee:
dd:62:22:9c:d6:0c:88:61:dc:37:cb:7f:e6:ca:4a:2d:25:84:
bb:a6:60:de:c8:8d:4d:08:e4:ba:f9:da:e4:9f:b9:eb:65:f0:
8f:17:8e:9d:95:73:9b:a9:7e:08:67:c4:5e:19:49:5e:5a:58:
10:8a:2f:93:68:ca:64:19:9e:bb:6a:c1:96:7a:3d:71:2c:f6:
95:97:cb:a4:7b:41:43:e7:0f:62:b1:00:8b:6b:ef:f7:39:99:
b0:80:e1:1f:0b:92:7c:9e:b2:97:99:da:80:13:e8:67:b4:e1:
27:e6:7e:cc:64:99:ed:6a:33:8a:c2:a4:fd:60:16:1d:91:69:
68:ec:a4:dc:25:8b:e2:a7:c8:a8:57:0d:99:09:f1:ed:94:08:
77:94:3e:21:f3:4e:21:08:fb:20:f1:d6:b1:7f:d8:26:c7:ab:
a9:b8:1a:b8:30:f6:d2:09:2c:ca:c8:56:a9:ed:4c:6f:86:86:
1c:d4:28:2b:78:b9:9a:e8:b3:5b:7b:a8:b0:f2:26:57:91:9d:
d2:c0:63:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:20:23 2025 by rpki-client