Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/58DWe-1QkmdAAqPP4rIPqHcvLEQ.roa
File: 58DWe-1QkmdAAqPP4rIPqHcvLEQ.roa (raw, json)
Hash identifier: DoGggoOx/JhNet5jvaMZxZ4j9WBmZq4GGjQzfQbuj24=
Subject key identifier: E7:C0:D6:7B:ED:50:92:67:40:02:A3:CF:E2:B2:0F:A8:77:2F:2C:44
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0197F0006B27BB9B342D16E23AB7FE0DF265
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/58DWe-1QkmdAAqPP4rIPqHcvLEQ.roa
Signing time: Wed 09 Jul 2025 16:24:08 +0000
ROA not before: Wed 09 Jul 2025 16:24:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 22
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
137.59.60.0/22 maxlen: 22
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:00:6b:27:bb:9b:34:2d:16:e2:3a:b7:fe:0d:f2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 9 16:24:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c0d67bed5092674002a3cfe2b20fa8772f2c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:d4:37:70:0e:6d:97:34:61:a9:69:62:e0:
1c:33:61:21:30:e2:9f:cb:eb:af:3d:48:d7:05:bf:
b4:42:20:76:9f:99:6e:43:db:fe:90:59:92:f8:49:
55:1f:cd:5f:8f:82:72:d4:f2:5d:56:65:47:18:bc:
98:12:be:c9:d8:49:c9:d0:cf:40:4c:0b:af:c5:95:
ce:40:25:95:37:5d:2f:af:bb:64:ef:ce:20:92:73:
3c:72:52:0e:fc:29:6d:e8:75:49:60:9f:57:5b:5e:
78:67:f4:83:52:66:df:b3:d4:44:f5:f5:8a:07:ef:
7b:d4:b4:c9:1b:0b:51:3a:ba:0a:6e:b7:c6:3b:18:
be:14:c6:4e:65:7d:a7:a4:34:80:37:4b:14:16:d6:
23:f8:bb:26:28:d5:95:a4:4f:72:82:3b:6c:c5:1a:
08:1f:99:60:96:f2:3d:36:bd:97:39:4b:b2:05:49:
82:72:78:0f:4c:89:3d:9b:a7:d7:f2:da:28:e9:5d:
b5:33:de:8f:83:96:81:a6:25:c2:ae:01:c0:56:1c:
7d:e1:ea:be:bf:85:8a:09:e3:07:18:10:4f:af:b0:
6f:f1:88:fa:25:02:40:7c:e8:cb:87:2b:48:23:c3:
17:ef:f5:c7:b1:45:34:69:6f:76:49:56:b8:1c:02:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:D6:7B:ED:50:92:67:40:02:A3:CF:E2:B2:0F:A8:77:2F:2C:44
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/58DWe-1QkmdAAqPP4rIPqHcvLEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.204.222.0/23
103.251.26.0/23
104.36.50.0/24
137.59.60.0/22
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
a0:51:2e:6a:8b:e6:5f:1e:7c:2c:5f:64:8a:f4:55:0b:15:d3:
48:07:4b:c1:44:94:8c:29:7e:0b:9f:07:cf:e5:3f:de:29:0c:
0c:31:fa:44:39:cf:cc:54:b9:4a:12:4c:0d:40:04:50:e2:f0:
76:37:90:6b:06:ab:69:85:c9:72:02:9a:f2:b2:b4:e8:38:1b:
a4:cf:74:c6:5d:c9:7e:4d:41:c9:1b:18:20:95:6b:df:be:ba:
55:b0:14:69:da:69:f8:ee:4a:13:94:26:aa:ca:f4:01:06:33:
4f:0d:8a:27:d8:8b:eb:73:02:c1:a1:7d:96:98:a5:7b:05:d0:
9e:3e:e7:e5:32:29:46:ca:66:63:9e:6b:3f:40:ca:f8:0f:f4:
50:76:84:02:68:38:16:a2:5a:da:0c:ac:b9:65:db:90:4e:e6:
0d:d0:8e:53:bf:23:e9:4d:cf:b4:23:e6:c1:e4:05:80:f9:ee:
60:d1:70:f4:ab:f9:c5:88:55:65:4e:ab:f2:9a:7e:ef:83:7a:
76:d6:af:db:b1:bb:f4:c3:51:b2:55:1b:bf:1e:de:8a:46:e9:
05:40:63:31:dc:57:24:ba:68:c8:ed:a1:ce:42:d2:6e:29:fa:
18:ac:ac:1a:38:87:0c:0d:d4:c3:f2:b7:b4:9f:f1:1f:ac:40:
3c:41:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:24:01 2025 by rpki-client