Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/2mOIvyxqACEFmIkGDLPkH-bc67w.roa
File: 2mOIvyxqACEFmIkGDLPkH-bc67w.roa (raw, json)
Hash identifier: a5V4lxFeCQH7YtlBbiNtuF1rDDvq1OPE/o43ZTFdAYQ=
Subject key identifier: DA:63:88:BF:2C:6A:00:21:05:98:89:06:0C:B3:E4:1F:E6:DC:EB:BC
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 0197F9064B83F43D92CEE5C10D13E02A6599
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/2mOIvyxqACEFmIkGDLPkH-bc67w.roa
Signing time: Fri 11 Jul 2025 10:27:08 +0000
ROA not before: Fri 11 Jul 2025 10:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1273
IP address blocks: 62.25.64.0/18 maxlen: 18
62.208.0.0/16 maxlen: 16
62.221.0.0/19 maxlen: 19
141.1.0.0/16 maxlen: 16
185.204.4.0/22 maxlen: 22
193.164.160.0/19 maxlen: 19
193.195.0.0/17 maxlen: 17
193.195.128.0/21 maxlen: 21
193.195.136.0/23 maxlen: 23
193.195.139.0/24 maxlen: 24
193.195.140.0/24 maxlen: 24
193.195.142.0/23 maxlen: 23
193.195.144.0/20 maxlen: 20
193.195.160.0/19 maxlen: 19
193.195.192.0/18 maxlen: 18
194.6.0.0/18 maxlen: 18
194.6.64.0/19 maxlen: 19
194.70.0.0/23 maxlen: 23
194.70.2.0/24 maxlen: 24
194.70.4.0/22 maxlen: 22
194.70.8.0/21 maxlen: 21
194.70.16.0/20 maxlen: 20
194.70.32.0/22 maxlen: 22
194.70.37.0/24 maxlen: 24
194.70.38.0/23 maxlen: 23
194.70.40.0/21 maxlen: 21
194.70.48.0/20 maxlen: 20
194.70.64.0/20 maxlen: 20
194.70.80.0/21 maxlen: 21
194.70.88.0/22 maxlen: 22
194.70.92.0/23 maxlen: 23
194.70.95.0/24 maxlen: 24
194.70.96.0/19 maxlen: 19
194.70.128.0/18 maxlen: 18
194.70.192.0/19 maxlen: 19
194.70.224.0/21 maxlen: 21
194.70.232.0/23 maxlen: 23
194.70.235.0/24 maxlen: 24
194.70.236.0/22 maxlen: 22
194.70.240.0/20 maxlen: 20
194.112.64.0/18 maxlen: 18
194.152.64.0/19 maxlen: 19
194.159.0.0/16 maxlen: 16
194.176.128.0/19 maxlen: 19
194.177.160.0/19 maxlen: 19
194.205.0.0/16 maxlen: 16
194.217.0.0/16 maxlen: 16
194.221.0.0/16 maxlen: 16
195.2.0.0/19 maxlen: 19
195.10.0.0/18 maxlen: 18
195.11.0.0/16 maxlen: 16
195.27.0.0/16 maxlen: 16
195.44.0.0/16 maxlen: 16
195.59.0.0/16 maxlen: 16
195.80.64.0/19 maxlen: 19
195.89.0.0/16 maxlen: 16
195.89.13.0/24 maxlen: 24
195.92.0.0/16 maxlen: 16
195.144.128.0/19 maxlen: 19
195.173.0.0/16 maxlen: 16
195.248.192.0/19 maxlen: 19
212.62.0.0/19 maxlen: 19
212.137.0.0/16 maxlen: 16
212.158.0.0/17 maxlen: 17
212.165.0.0/19 maxlen: 19
212.240.0.0/16 maxlen: 16
213.12.0.0/16 maxlen: 16
213.38.0.0/16 maxlen: 16
213.185.192.0/19 maxlen: 19
213.216.128.0/18 maxlen: 18
217.134.0.0/15 maxlen: 15
217.135.0.0/16 maxlen: 16
217.161.0.0/16 maxlen: 16
2001:5000::/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:06:4b:83:f4:3d:92:ce:e5:c1:0d:13:e0:2a:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Jul 11 10:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6388bf2c6a0021059889060cb3e41fe6dcebbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:e3:8a:50:7a:f2:d5:25:c3:ee:34:a8:de:
39:ab:b1:e0:5a:6a:4c:88:10:0d:92:d5:f8:29:31:
44:f2:06:b9:4e:a8:d3:d5:d3:27:88:8c:bd:d8:92:
d5:0d:67:5b:ca:11:5f:d7:15:97:b0:97:70:1a:8a:
62:0f:ef:1b:cb:5e:fe:4c:2f:b0:11:0c:a7:58:86:
03:73:cd:00:3d:1f:77:93:b7:e3:46:7f:4a:52:73:
7b:da:0e:a8:f1:ef:d8:1d:c7:19:ad:59:40:ae:14:
3e:f0:cc:9d:b9:60:d3:27:0b:93:fd:dd:dc:a9:dd:
d1:21:5a:4b:60:6e:52:86:69:2d:32:2c:b4:29:f6:
b8:be:ae:40:80:28:22:e4:ff:14:01:fd:ce:bb:de:
c8:0b:e4:bb:29:f8:08:7f:21:34:c2:df:ba:22:f6:
f5:bf:e4:61:e0:db:0b:39:c1:86:05:47:f3:a0:90:
76:14:b3:fc:c5:69:1e:1c:99:b1:42:47:2f:11:32:
77:4d:98:db:22:00:41:06:49:6a:84:9d:b0:a1:3f:
fc:bf:53:96:45:47:71:fd:3b:4b:58:5a:92:c3:27:
7a:4e:dd:48:5a:04:1a:45:c6:c1:f1:14:cb:54:09:
c6:c1:36:00:12:39:87:8c:8b:6b:6e:77:ec:34:c1:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:88:BF:2C:6A:00:21:05:98:89:06:0C:B3:E4:1F:E6:DC:EB:BC
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/2mOIvyxqACEFmIkGDLPkH-bc67w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0/18
62.208.0.0/16
62.221.0.0/19
141.1.0.0/16
185.204.4.0/22
193.164.160.0/19
193.195.0.0-193.195.137.255
193.195.139.0-193.195.140.255
193.195.142.0-193.195.255.255
194.6.0.0-194.6.95.255
194.70.0.0-194.70.2.255
194.70.4.0-194.70.35.255
194.70.37.0-194.70.93.255
194.70.95.0-194.70.233.255
194.70.235.0-194.70.255.255
194.112.64.0/18
194.152.64.0/19
194.159.0.0/16
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.217.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.11.0.0/16
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.89.0.0/16
195.92.0.0/16
195.144.128.0/19
195.173.0.0/16
195.248.192.0/19
212.62.0.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
212.240.0.0/16
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
213.216.128.0/18
217.134.0.0/15
217.161.0.0/16
IPv6:
2001:5000::/21
Signature Algorithm: sha256WithRSAEncryption
9b:bb:00:43:a0:25:9e:ce:f1:ab:8d:04:ce:7b:db:5d:d4:5c:
50:14:a4:68:4c:39:4b:1c:c8:1b:b9:5f:52:e6:09:57:a2:dd:
05:19:19:a4:92:02:cf:d0:91:b0:40:6c:aa:50:b6:c3:da:dd:
70:33:ca:bb:02:11:d0:39:d2:2b:d3:45:41:86:d7:4f:6a:d7:
06:98:b9:f7:c7:34:67:ab:76:c5:11:b7:3a:02:d6:cc:2e:72:
67:2d:3b:b2:5e:33:63:d9:c0:d3:c2:7c:1b:ad:20:20:b7:b3:
22:b1:9d:6e:61:bd:40:da:1e:35:4c:fd:f3:77:b8:b0:db:ef:
6d:4b:71:08:99:38:d3:e7:39:9e:2f:0b:98:2e:0d:c4:8e:61:
f3:9f:ad:90:73:b0:65:09:d4:4b:87:f3:c6:9e:09:f0:9c:71:
fd:b5:bd:b7:55:c5:ab:5b:42:7f:7c:64:5a:7f:9b:a1:d5:ba:
14:04:65:4c:75:90:e7:1f:ac:db:34:d5:84:9e:32:a8:3d:b3:
d0:9f:90:4a:4e:0f:38:99:81:79:81:24:72:db:20:6e:30:31:
c3:07:ab:e4:1c:a5:20:69:d0:d2:5a:fa:aa:1a:95:a5:86:ac:
23:e8:b0:72:b2:35:e3:91:e0:32:ea:a4:0a:ce:6e:67:16:bd:
a1:00:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:39 2025 by rpki-client