Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/S8d1_v9Bjhd0Wii1GxZfjqlNzms.roa
File: S8d1_v9Bjhd0Wii1GxZfjqlNzms.roa (raw, json)
Hash identifier: 0NIygiOpLM7VToWCw1lunVv0mIXwkhzwioRzjoeJw18=
Subject key identifier: 4B:C7:75:FE:FF:41:8E:17:74:5A:28:B5:1B:16:5F:8E:A9:4D:CE:6B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0198178ABF5BCEA66C476A154C50B6A0DEA9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/S8d1_v9Bjhd0Wii1GxZfjqlNzms.roa
Signing time: Thu 17 Jul 2025 08:40:25 +0000
ROA not before: Thu 17 Jul 2025 08:40:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.9.0/24 maxlen: 24
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.149.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:8a:bf:5b:ce:a6:6c:47:6a:15:4c:50:b6:a0:de:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 17 08:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bc775feff418e17745a28b51b165f8ea94dce6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:8a:eb:37:78:00:ec:c0:64:8d:95:66:1e:
74:aa:1c:09:73:de:6b:18:6d:72:91:cd:6e:ed:4e:
bb:ef:ed:0f:2a:c9:3d:d0:50:fa:1d:8b:d3:65:a1:
7e:37:14:62:dc:e5:af:d8:f2:30:2b:51:db:d3:6d:
56:f9:cb:ee:eb:d3:36:d3:ed:37:3f:21:0e:f2:64:
69:45:71:2d:b5:06:6d:b3:d9:63:b3:b8:5c:64:14:
23:36:b7:86:09:8c:a6:3f:f5:cc:56:93:d1:92:03:
32:77:22:44:56:b4:40:85:73:78:4d:a7:60:8f:2f:
1c:f6:d1:78:43:68:49:bb:4a:8d:5a:95:26:8e:55:
d8:34:c2:11:c5:dd:5a:7d:ba:62:f9:e8:d7:9c:a0:
c9:0f:03:8e:d0:4f:06:00:2c:27:91:d2:c3:8d:73:
db:7d:53:cd:92:1e:90:e2:e5:ef:9f:01:4d:cb:1b:
7a:67:b5:14:e7:6a:60:cb:8d:14:a0:56:95:78:2f:
f9:87:84:9a:fc:a9:4c:96:55:41:cb:d3:3c:fa:46:
58:31:f4:8a:88:0b:c7:da:45:09:5e:b6:ff:40:d4:
e2:06:3a:8f:5c:10:e9:12:9c:20:a8:f1:11:0c:c1:
08:74:40:de:aa:1c:5d:61:ad:55:37:c7:93:82:7a:
6d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:75:FE:FF:41:8E:17:74:5A:28:B5:1B:16:5F:8E:A9:4D:CE:6B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/S8d1_v9Bjhd0Wii1GxZfjqlNzms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.9.0/24
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.149.0/24
91.148.160.0/24
91.148.168.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
b8:3a:d6:2b:d6:56:ca:8e:97:ed:14:98:36:c8:89:11:86:8a:
45:d0:fb:a6:d4:ae:8a:2c:d2:6e:c4:a6:b7:bd:bf:67:27:77:
82:2c:7e:30:88:c3:c2:cc:dc:7e:c8:8b:17:3c:bf:77:23:7d:
23:ff:90:fb:da:26:63:6f:07:87:de:05:e6:ed:f9:ca:5d:62:
c0:a1:1d:ef:e5:f2:85:ce:7c:f6:90:0e:02:ff:4c:52:55:a0:
27:5f:76:34:e2:19:43:31:b5:95:ca:51:b3:5d:c5:77:9c:2b:
6c:60:9a:f6:e2:5b:51:44:19:b2:ea:88:c6:95:d2:bf:f0:3a:
49:af:44:b6:20:9d:6d:17:21:d6:0d:54:38:ab:be:29:b7:da:
fb:c1:4e:32:b5:33:fc:1e:33:6a:8e:41:77:8c:8c:09:42:b8:
fb:35:63:d3:b7:f6:a5:5d:e6:94:1a:77:88:53:7f:e6:7d:38:
b3:1a:62:3d:ee:b2:3b:e1:90:a6:15:83:04:87:be:5b:cb:2a:
07:24:76:3a:53:2d:e3:d4:b6:84:d7:cc:df:bb:a1:d1:c3:38:
2f:5d:b5:0c:f0:16:e6:18:56:8d:6d:1e:8e:03:dc:d4:85:4f:
0c:8b:e0:5d:27:58:35:aa:1a:52:58:03:d5:1b:5e:4c:96:06:
1c:5d:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:33 2025 by rpki-client