Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R705-MxABrJJTDo3MPnEfVx-F7A.roa
File: R705-MxABrJJTDo3MPnEfVx-F7A.roa (raw, json)
Hash identifier: 39wnNFYCNtqRlfwuFZYLYCWYoMEUqnZohJ9bpedwtQs=
Subject key identifier: 47:BD:39:F8:CC:40:06:B2:49:4C:3A:37:30:F9:C4:7D:5C:7E:17:B0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0197E90290D004D10001F05AA8C0529FC0D1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R705-MxABrJJTDo3MPnEfVx-F7A.roa
Signing time: Tue 08 Jul 2025 07:49:08 +0000
ROA not before: Tue 08 Jul 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
194.103.240.0/21 maxlen: 21
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
194.103.252.0/22 maxlen: 22
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:02:90:d0:04:d1:00:01:f0:5a:a8:c0:52:9f:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 8 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47bd39f8cc4006b2494c3a3730f9c47d5c7e17b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:f7:c7:82:78:e2:20:c9:1e:41:d2:23:de:
63:59:1e:ee:a5:c3:9b:bb:eb:ae:8b:36:10:99:3b:
82:83:14:32:9b:d8:8b:27:c4:89:49:f6:d2:31:42:
80:b9:8a:aa:16:88:61:c7:9c:61:a4:a5:f5:0a:b6:
8c:14:9d:07:af:38:1f:48:78:65:b7:57:3f:6b:dc:
26:e9:2f:80:13:c4:5a:a5:02:28:be:3b:16:1b:6a:
62:1f:3b:dd:83:a5:86:a8:73:76:84:ca:0c:c8:f0:
9d:40:2f:00:4f:14:e4:69:db:c6:3c:4e:a0:23:4a:
dd:36:07:ce:37:4a:19:b9:de:b3:81:11:f8:80:d5:
29:06:08:9e:34:b8:43:ee:c6:bb:c7:e3:69:99:e7:
40:c7:93:12:3b:5c:81:45:07:b9:c5:4c:e6:0b:34:
f0:ed:08:8a:b9:1c:3e:80:1f:1d:de:48:31:d4:05:
e2:10:29:1a:f9:cc:ce:39:1c:40:1d:51:ee:34:f4:
0b:b5:ad:b6:6e:61:5b:52:7f:9b:2f:b9:c9:62:9c:
de:72:6f:08:82:50:5d:cf:ab:98:cb:37:04:5e:23:
85:60:e2:47:3f:77:22:bf:be:21:74:01:92:23:c0:
83:33:d1:8d:0b:f2:72:26:a8:21:1b:a2:29:1b:13:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BD:39:F8:CC:40:06:B2:49:4C:3A:37:30:F9:C4:7D:5C:7E:17:B0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R705-MxABrJJTDo3MPnEfVx-F7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.48.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
49:b5:70:b0:81:9b:fc:de:73:08:3f:7b:27:b8:9f:a5:ff:e9:
6e:9d:b1:fc:1f:54:b2:5d:f7:36:bf:9f:95:eb:ac:63:b9:ca:
28:dd:87:85:10:44:b9:62:98:7b:2c:51:0b:09:f2:9f:05:8d:
ea:74:e7:62:a8:9e:59:38:41:c3:6d:fe:87:31:63:79:b9:86:
88:e1:e5:3d:6c:df:ad:8c:72:5e:e6:4f:f5:c9:23:ca:04:32:
25:40:76:1a:5e:b4:04:5a:ce:a2:c7:87:c3:d7:f1:74:9a:88:
c4:2e:34:fa:4d:71:b0:fd:3e:11:df:da:fd:41:d1:c5:a1:95:
6f:87:28:7a:95:8c:cb:fe:76:89:3d:08:2d:d9:16:5b:69:56:
cd:e3:37:c7:de:ae:77:7b:0a:8d:df:15:97:71:69:8a:b1:f5:
98:1f:57:07:51:53:63:83:6d:18:e3:f3:55:bb:7b:71:d7:e6:
e5:c8:df:04:38:73:72:64:ef:69:1e:39:f9:de:f5:46:be:56:
c0:c8:5a:30:bc:94:22:3d:ae:34:ca:1e:12:5d:6e:5b:b0:ad:
c4:11:cb:9f:d7:cf:dc:9b:7b:ef:4f:2f:9b:0d:2a:e7:bb:45:
8b:ea:3b:94:13:df:32:81:55:35:b5:83:01:df:35:3d:af:54:
c3:03:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:17:32 2025 by rpki-client