Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa
File: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (raw, json)
Hash identifier: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=
Subject key identifier: 1C:3F:F9:07:93:E4:74:3E:85:8C:2E:D3:91:3D:21:83:A4:4C:A5:1E
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 0196F2AAFBBCE19F9E4EF1F193F6C845C5A1
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa
Signing time: Wed 21 May 2025 11:46:53 +0000
ROA not before: Wed 21 May 2025 11:46:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.189.0/24 maxlen: 24
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/22 maxlen: 22
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/21 maxlen: 21
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/24 maxlen: 24
46.53.221.0/24 maxlen: 24
46.53.222.0/24 maxlen: 24
46.53.223.0/24 maxlen: 24
46.53.224.0/21 maxlen: 21
46.53.224.0/24 maxlen: 24
46.53.225.0/24 maxlen: 24
46.53.226.0/24 maxlen: 24
46.53.227.0/24 maxlen: 24
46.53.228.0/24 maxlen: 24
46.53.229.0/24 maxlen: 24
46.53.230.0/24 maxlen: 24
46.53.231.0/24 maxlen: 24
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:aa:fb:bc:e1:9f:9e:4e:f1:f1:93:f6:c8:45:c5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: May 21 11:46:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c3ff90793e4743e858c2ed3913d2183a44ca51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:df:b7:e2:d3:89:b4:3d:c0:0f:10:df:1f:
f3:a7:b6:e7:61:94:49:04:ea:b3:22:ca:4c:c8:af:
2d:a5:9a:ef:8e:e2:1e:85:35:2f:36:05:5b:2e:e4:
e3:f8:d9:3b:43:a7:b9:8a:f2:1f:23:fd:7d:c8:71:
f9:f8:93:fe:bd:a5:e0:7d:b6:ae:c3:f5:a9:43:05:
c1:ae:0b:31:fd:62:ea:29:7c:40:1a:2f:b2:5b:fd:
72:a3:36:e3:1e:6b:d8:68:e6:95:72:e5:92:98:a1:
32:23:ba:a4:19:27:d3:21:9b:03:29:49:ff:11:78:
a5:62:4f:f9:3f:93:93:a6:67:0a:22:f5:f8:87:28:
be:c9:c7:5a:b1:e5:e9:2b:d2:1d:6d:90:2e:ea:38:
93:13:5f:d8:88:b2:4c:7e:ae:19:05:46:d3:cb:24:
db:38:d5:1a:4b:33:82:87:59:bc:28:6d:80:2d:8b:
08:ed:57:e5:fa:30:69:db:23:99:5d:91:a7:2d:c6:
d1:3e:54:84:7d:c2:96:25:12:ca:92:74:0e:bd:75:
0f:76:0a:bc:67:5c:1a:dd:26:93:23:b8:f1:f7:bd:
90:8e:39:19:1a:d4:d8:94:2a:eb:63:54:5b:98:46:
3a:c2:ed:2d:12:5f:d8:d1:46:d5:ea:f8:a8:76:81:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:F9:07:93:E4:74:3E:85:8C:2E:D3:91:3D:21:83:A4:4C:A5:1E
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
d3:73:13:ef:9c:76:5c:37:bb:ab:44:75:85:b2:06:33:ac:86:
9c:b8:cb:2e:76:9d:c1:84:c1:72:1d:25:e2:cc:7c:a3:87:8a:
b5:50:7e:d8:73:9b:a9:50:99:ea:60:75:4d:0e:15:f6:35:1e:
67:ca:1e:7b:17:4a:21:0a:96:65:58:85:4c:1b:27:5e:c4:4e:
86:46:40:e4:59:9b:02:17:7c:8e:93:a9:ab:03:b7:5a:fe:0b:
f1:22:c2:07:d0:25:da:fa:52:ee:8a:72:28:03:6a:83:6e:b8:
d1:21:1f:92:51:d6:7b:7a:48:1b:26:86:14:45:34:3c:8c:0b:
4d:ec:5a:0a:dc:23:a1:7f:4d:6d:cf:e9:68:c5:95:39:4b:c7:
d0:e6:20:e1:de:de:fa:db:c5:ad:d7:c2:4d:ad:a6:44:34:c2:
0d:4f:ce:39:cb:9a:f3:9a:2f:7e:16:7e:8e:f4:40:ab:1e:0f:
73:71:dc:f1:76:6b:dd:ba:bf:e8:97:13:0f:19:59:1e:45:0b:
ab:be:b6:6c:91:c2:8b:45:8c:50:8d:fd:98:06:8d:fa:0d:fa:
8b:d2:98:87:21:55:92:dc:e4:73:1d:82:bf:6e:fe:b6:98:83:
30:a0:0f:69:5e:01:5e:25:d9:57:56:e9:45:8c:8b:9a:12:17:
94:c1:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:44 2025 by rpki-client