Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EWeiRLhEJI57K8gmPPJIXtUlXTQ.roa
File: EWeiRLhEJI57K8gmPPJIXtUlXTQ.roa (raw, json)
Hash identifier: V6Q1Y19BhqOj6d801ooVZj/aRGa/FriRIaZzEQ8469M=
Subject key identifier: 11:67:A2:44:B8:44:24:8E:7B:2B:C8:26:3C:F2:48:5E:D5:25:5D:34
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0198127E2B4DDEF04C23109A65F72E18776D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EWeiRLhEJI57K8gmPPJIXtUlXTQ.roa
Signing time: Wed 16 Jul 2025 09:08:35 +0000
ROA not before: Wed 16 Jul 2025 09:08:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 2.56.117.0/24 maxlen: 24
2.56.118.0/23 maxlen: 24
2.56.120.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/24 maxlen: 24
2.56.176.0/32 maxlen: 32
2.56.177.0/24 maxlen: 24
2.56.177.0/32 maxlen: 32
2.56.179.0/24 maxlen: 24
5.180.24.0/24 maxlen: 24
5.180.30.0/24 maxlen: 24
5.180.45.0/24 maxlen: 24
5.180.55.0/24 maxlen: 24
5.253.40.0/23 maxlen: 24
5.253.43.0/24 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.140.0/23 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.184.0/22 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/23 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.143.0/32 maxlen: 32
45.83.148.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/21 maxlen: 24
45.86.64.0/23 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/23 maxlen: 24
45.86.76.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.181.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/23 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/21 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.164.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.192.0/23 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.48.0/22 maxlen: 24
45.128.52.0/24 maxlen: 24
45.128.54.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/23 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.74.0/24 maxlen: 24
85.208.109.0/24 maxlen: 24
85.208.110.0/24 maxlen: 24
85.209.153.0/24 maxlen: 24
85.209.154.0/24 maxlen: 24
85.209.195.0/24 maxlen: 24
88.218.93.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.230.0/23 maxlen: 24
92.118.232.0/23 maxlen: 24
92.118.234.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
171.22.110.0/23 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.117.0/24 maxlen: 24
171.22.118.0/24 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.136.0/23 maxlen: 24
171.22.138.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
185.166.152.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
213.59.116.0/32 maxlen: 32
213.59.117.0/32 maxlen: 32
213.59.118.0/32 maxlen: 32
213.59.119.0/32 maxlen: 32
213.59.120.0/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:7e:2b:4d:de:f0:4c:23:10:9a:65:f7:2e:18:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 16 09:08:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1167a244b844248e7b2bc8263cf2485ed5255d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:f0:fd:ff:93:93:a5:09:ee:5b:1f:ca:22:
4c:10:ae:e2:67:ca:d1:4c:10:c7:50:40:b2:cf:e5:
86:02:ee:06:ee:d8:9f:cf:18:4c:90:75:55:dc:1f:
84:ab:40:6e:84:84:d0:24:f7:ac:46:d5:d7:7d:5c:
d7:16:ac:79:7d:b1:1c:37:a6:16:8a:18:fa:fc:48:
f7:20:ae:d6:a2:ce:7a:2b:a9:0a:f4:cc:d8:11:82:
e6:09:fd:76:67:74:f6:7f:cb:f2:64:03:91:8c:c4:
2a:db:c3:ef:4d:5d:2f:33:f2:9a:5b:1a:a8:b7:82:
70:91:07:71:a7:b2:4d:43:a6:4c:43:6f:0b:df:af:
8e:b6:7d:c5:31:12:12:ad:70:9b:ec:34:bf:a5:41:
f8:a7:70:35:21:f5:ed:ff:a3:2b:61:57:f3:25:34:
64:a0:db:f9:f7:cb:b7:69:d5:83:46:b4:db:d6:03:
43:0a:02:1b:8a:fd:b9:b8:7f:12:ad:c8:c1:b2:6a:
87:e5:e5:3a:24:fd:42:fe:42:4f:a1:24:27:51:ad:
e9:eb:42:47:7a:f4:77:7d:2e:98:5f:c1:e8:eb:63:
7e:be:99:f3:44:e1:9c:cc:0a:6a:22:62:78:1f:30:
89:5e:aa:b8:0c:04:23:6a:be:59:e5:9b:fb:bd:7d:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:A2:44:B8:44:24:8E:7B:2B:C8:26:3C:F2:48:5E:D5:25:5D:34
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EWeiRLhEJI57K8gmPPJIXtUlXTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0-2.56.177.255
2.56.179.0/24
5.180.24.0/24
5.180.30.0/24
5.180.45.0/24
5.180.55.0/24
5.253.40.0/23
5.253.43.0/24
45.9.12.0-45.9.19.255
45.12.108.0-45.12.113.255
45.12.128.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.125.0-45.15.131.255
45.15.140.0-45.15.142.255
45.15.144.0/22
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.72.255
45.86.74.0-45.86.79.255
45.88.160.0/22
45.88.168.0/22
45.88.176.0/22
45.88.181.0-45.88.183.255
45.89.96.0/24
45.89.98.0/24
45.89.105.0-45.89.111.255
45.89.196.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0-45.128.52.255
45.128.54.0-45.128.58.255
45.128.72.0/22
85.208.109.0-85.208.110.255
85.209.153.0-85.209.154.255
85.209.195.0/24
88.218.93.0/24
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.235.255
141.98.160.0/21
171.22.109.0-171.22.115.255
171.22.117.0-171.22.118.255
171.22.120.0-171.22.138.255
185.106.97.0-185.106.99.255
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
12:88:db:72:a3:c9:0a:9c:13:b9:1d:94:23:de:13:bf:17:c5:
9d:6d:2f:6f:5d:6b:89:0f:5c:f2:42:3b:45:f4:0f:25:0b:f5:
f1:03:f5:5b:0d:b9:9c:2e:87:ac:a2:f1:6c:3e:90:81:29:14:
5f:47:22:1c:7c:b0:6e:71:73:8e:8c:7d:08:0c:18:e5:93:13:
1f:8f:87:c1:81:bd:34:37:65:b1:ec:d4:46:4e:02:18:e7:f8:
2e:36:28:51:f2:e9:de:d9:c8:49:7b:23:6d:b1:38:0d:00:83:
f2:c5:85:27:d5:32:7b:3f:6c:e4:9b:c3:99:7a:06:58:6e:09:
99:b9:9d:8c:9f:a1:30:8c:74:a4:27:44:f1:1d:56:71:19:38:
49:73:b1:1b:f7:89:ac:0a:1a:36:63:49:52:1a:e2:fe:48:7d:
5c:df:60:3d:97:02:ea:19:77:27:48:7a:cc:f0:cf:17:1f:04:
33:77:8a:1e:13:8c:a2:7b:e3:c8:9e:c8:80:02:df:4f:04:ce:
5c:ad:63:a9:41:e0:15:89:13:9f:6e:09:eb:28:a3:bb:e2:d0:
81:31:0d:f9:38:6c:8a:56:94:d0:4c:f7:fd:8f:cb:d5:c4:eb:
51:a9:6d:59:d9:66:03:0c:44:35:35:76:2d:1c:96:59:24:af:
b6:1a:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:46:57 2025 by rpki-client