Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_ReC9z9rQOJUCcANn0IZrIl6ANw.roa
File: _ReC9z9rQOJUCcANn0IZrIl6ANw.roa (raw, json)
Hash identifier: Xf4fzrnh550hy1ZmJGxCM/x6aq1+qXmCmBuVUOZuiz0=
Subject key identifier: FD:17:82:F7:3F:6B:40:E2:54:09:C0:0D:9F:42:19:AC:89:7A:00:DC
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0195ED08C5FF4E30AC05C81B09EDAAAD168B
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_ReC9z9rQOJUCcANn0IZrIl6ANw.roa
Signing time: Mon 31 Mar 2025 16:28:49 +0000
ROA not before: Mon 31 Mar 2025 16:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 5.158.208.0/21 maxlen: 21
5.158.208.0/23 maxlen: 24
5.158.210.0/24 maxlen: 24
5.158.211.0/24 maxlen: 24
5.158.212.0/24 maxlen: 24
5.158.214.0/24 maxlen: 24
5.158.215.0/24 maxlen: 24
62.73.160.0/19 maxlen: 19
62.73.160.0/24 maxlen: 29
62.73.161.0/24 maxlen: 24
62.73.162.0/23 maxlen: 23
62.73.165.0/24 maxlen: 29
62.73.166.0/24 maxlen: 29
62.73.167.0/24 maxlen: 24
62.73.168.0/24 maxlen: 24
62.73.169.0/24 maxlen: 30
62.73.170.0/24 maxlen: 29
62.73.171.0/24 maxlen: 24
62.73.172.0/23 maxlen: 23
62.73.174.0/24 maxlen: 24
62.73.175.0/24 maxlen: 29
62.73.176.0/23 maxlen: 23
62.73.178.0/24 maxlen: 29
62.73.179.0/24 maxlen: 29
62.73.180.0/24 maxlen: 24
62.73.181.0/24 maxlen: 24
62.73.182.0/24 maxlen: 24
62.73.183.0/24 maxlen: 29
62.73.184.0/24 maxlen: 29
62.73.185.0/24 maxlen: 24
62.73.188.0/24 maxlen: 29
62.73.189.0/24 maxlen: 29
62.73.191.0/24 maxlen: 24
81.19.96.0/20 maxlen: 20
81.20.64.0/20 maxlen: 20
81.20.66.0/25 maxlen: 25
81.20.70.128/25 maxlen: 25
81.25.192.0/20 maxlen: 20
81.93.176.0/20 maxlen: 20
81.93.176.0/24 maxlen: 24
81.93.178.0/23 maxlen: 23
81.93.180.0/24 maxlen: 24
81.93.181.0/27 maxlen: 27
81.93.182.0/24 maxlen: 24
81.93.183.0/24 maxlen: 24
81.93.185.128/26 maxlen: 26
81.93.185.192/27 maxlen: 27
81.93.185.224/28 maxlen: 28
81.93.186.0/23 maxlen: 23
81.93.188.0/24 maxlen: 24
81.93.189.0/24 maxlen: 24
81.93.190.0/24 maxlen: 24
81.93.208.0/20 maxlen: 20
81.93.208.64/27 maxlen: 27
81.93.208.96/27 maxlen: 27
82.112.96.0/19 maxlen: 19
82.112.98.0/27 maxlen: 27
82.112.99.0/24 maxlen: 24
82.112.100.0/24 maxlen: 24
82.112.101.16/28 maxlen: 28
82.112.101.128/26 maxlen: 26
82.112.101.192/29 maxlen: 29
82.112.101.224/27 maxlen: 27
82.112.102.0/27 maxlen: 27
82.112.102.32/29 maxlen: 29
82.112.102.40/29 maxlen: 29
82.112.102.48/28 maxlen: 28
82.112.102.64/27 maxlen: 27
82.112.102.96/28 maxlen: 28
82.112.102.120/29 maxlen: 29
82.112.102.128/26 maxlen: 26
82.112.102.192/26 maxlen: 26
82.112.103.0/24 maxlen: 24
82.112.104.0/27 maxlen: 27
82.112.104.32/27 maxlen: 27
82.112.104.64/26 maxlen: 26
82.112.104.128/25 maxlen: 25
82.112.105.0/24 maxlen: 24
82.112.107.24/30 maxlen: 30
82.112.107.28/30 maxlen: 30
82.112.107.32/30 maxlen: 30
82.112.107.36/30 maxlen: 30
82.112.107.40/30 maxlen: 30
82.112.107.112/28 maxlen: 28
82.112.108.0/23 maxlen: 23
82.112.110.0/23 maxlen: 24
82.112.112.0/23 maxlen: 24
82.112.114.0/24 maxlen: 24
82.112.116.0/23 maxlen: 24
82.112.120.0/23 maxlen: 24
82.112.123.64/28 maxlen: 28
82.112.123.208/28 maxlen: 28
82.112.124.0/23 maxlen: 24
82.112.126.0/24 maxlen: 24
82.112.127.0/24 maxlen: 24
83.217.224.0/19 maxlen: 19
83.217.224.0/23 maxlen: 23
83.217.228.0/23 maxlen: 24
83.217.230.0/24 maxlen: 24
83.217.234.0/23 maxlen: 24
83.217.236.0/23 maxlen: 24
83.217.237.32/28 maxlen: 28
83.217.239.0/27 maxlen: 27
83.217.239.32/27 maxlen: 27
83.217.239.64/26 maxlen: 26
83.217.239.128/28 maxlen: 28
83.217.240.0/24 maxlen: 24
83.217.241.0/27 maxlen: 27
83.217.241.128/25 maxlen: 25
83.217.242.0/23 maxlen: 24
83.217.244.0/23 maxlen: 24
83.217.246.0/23 maxlen: 24
83.217.248.0/23 maxlen: 24
83.217.250.0/24 maxlen: 24
83.217.251.0/24 maxlen: 24
83.217.251.160/27 maxlen: 27
83.231.128.0/17 maxlen: 17
83.231.183.64/27 maxlen: 27
83.231.233.240/28 maxlen: 28
91.186.160.0/19 maxlen: 19
91.186.176.0/24 maxlen: 24
91.186.176.208/28 maxlen: 28
91.186.177.0/24 maxlen: 24
91.186.177.176/29 maxlen: 29
91.186.177.184/29 maxlen: 29
91.186.178.0/24 maxlen: 24
91.186.179.0/24 maxlen: 24
91.186.180.0/23 maxlen: 24
91.186.182.0/24 maxlen: 24
91.186.183.0/24 maxlen: 24
91.186.186.0/23 maxlen: 23
91.186.188.0/23 maxlen: 24
91.186.190.0/25 maxlen: 25
91.186.190.128/25 maxlen: 25
91.186.191.0/24 maxlen: 24
158.181.56.0/21 maxlen: 21
185.84.16.0/22 maxlen: 22
212.119.0.0/19 maxlen: 19
213.130.32.0/19 maxlen: 19
213.198.0.0/17 maxlen: 17
213.198.0.0/24 maxlen: 24
213.198.1.0/27 maxlen: 27
213.198.1.32/27 maxlen: 27
213.198.2.0/24 maxlen: 24
213.198.3.0/24 maxlen: 24
213.198.4.0/24 maxlen: 24
213.198.8.0/23 maxlen: 24
213.198.26.0/29 maxlen: 29
213.198.26.8/29 maxlen: 29
213.198.26.16/29 maxlen: 29
213.198.28.0/24 maxlen: 24
213.198.30.0/24 maxlen: 24
213.198.31.0/24 maxlen: 24
213.198.54.0/23 maxlen: 24
213.198.65.0/24 maxlen: 24
213.198.70.0/24 maxlen: 24
213.198.71.0/24 maxlen: 24
213.198.74.0/24 maxlen: 24
213.198.75.0/24 maxlen: 24
213.198.78.0/24 maxlen: 24
213.198.79.0/24 maxlen: 24
213.198.82.0/25 maxlen: 25
213.198.83.0/25 maxlen: 25
213.198.84.0/24 maxlen: 24
213.198.85.0/24 maxlen: 24
213.198.86.0/26 maxlen: 26
213.198.86.64/26 maxlen: 26
213.198.86.128/27 maxlen: 27
213.198.86.160/27 maxlen: 27
213.198.86.192/26 maxlen: 26
213.198.88.0/24 maxlen: 24
213.198.90.0/24 maxlen: 24
213.198.91.0/24 maxlen: 24
213.198.93.0/24 maxlen: 24
213.198.94.96/27 maxlen: 27
213.198.95.64/26 maxlen: 26
213.198.97.0/24 maxlen: 24
213.198.98.0/24 maxlen: 24
213.198.99.0/24 maxlen: 24
2001:728::/32 maxlen: 32
2001:728:c00::/38 maxlen: 64
2001:728:1010:300::/56 maxlen: 64
2001:728:2400::/38 maxlen: 64
2001:728:2806::/48 maxlen: 64
2001:728:2807::/48 maxlen: 64
2001:728:2808::/48 maxlen: 64
2001:728:2809::/48 maxlen: 64
2001:728:2c00::/38 maxlen: 64
2001:728:4000::/38 maxlen: 64
2001:728:4400::/38 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:08:c5:ff:4e:30:ac:05:c8:1b:09:ed:aa:ad:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Mar 31 16:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd1782f73f6b40e25409c00d9f4219ac897a00dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:84:5a:18:68:68:db:9c:8e:51:07:3e:c9:
aa:79:93:8e:1f:1c:ed:62:b9:65:bf:09:a0:e0:57:
b8:6b:69:89:1b:16:2d:05:cf:c6:63:72:a7:42:f9:
b3:f8:d0:8e:a9:1d:dc:d7:26:d6:24:80:92:28:8f:
a7:14:1f:da:4b:9a:0a:b0:43:dc:0e:0d:aa:c2:09:
de:25:99:64:5e:12:68:39:b4:f1:60:69:45:d9:e6:
c0:e6:7e:32:21:59:67:d1:4c:f8:64:2c:97:31:bc:
39:61:91:d3:46:01:f0:84:df:57:65:21:f0:18:81:
13:2d:25:4d:f2:3f:9f:39:d9:c5:19:0f:dc:9f:0d:
02:35:50:49:15:56:41:43:a7:83:79:49:77:b6:f0:
ed:56:6e:9d:73:b3:2f:7b:bb:16:50:2a:97:1c:06:
a1:8d:1a:df:32:69:de:02:ba:de:57:a2:47:68:47:
a9:8c:fe:80:b5:b6:54:4d:72:c4:08:d0:01:7d:16:
c9:41:bc:44:58:2e:f8:d3:99:92:5e:20:33:12:0e:
33:bc:8e:49:ee:53:57:b3:ce:58:e0:c5:d3:b4:9d:
66:fe:4a:3d:18:d9:ab:34:59:7b:22:7e:13:b9:d7:
47:7b:e6:a2:f9:8e:a2:9c:ad:89:a8:1d:2f:70:7e:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:17:82:F7:3F:6B:40:E2:54:09:C0:0D:9F:42:19:AC:89:7A:00:DC
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_ReC9z9rQOJUCcANn0IZrIl6ANw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.208.0/21
62.73.160.0/19
81.19.96.0/20
81.20.64.0/20
81.25.192.0/20
81.93.176.0/20
81.93.208.0/20
82.112.96.0/19
83.217.224.0/19
83.231.128.0/17
91.186.160.0/19
158.181.56.0/21
185.84.16.0/22
212.119.0.0/19
213.130.32.0/19
213.198.0.0/17
IPv6:
2001:728::/32
Signature Algorithm: sha256WithRSAEncryption
6a:2c:07:3e:be:c2:81:e4:1f:3c:a2:d5:38:df:af:07:6b:18:
83:5e:af:c4:35:13:a0:7a:33:d3:01:84:d3:f8:cf:0f:22:f9:
3f:38:9f:be:92:4e:58:c9:b9:c2:fc:d8:1c:fe:ba:ac:b3:0a:
72:cb:e0:6e:6a:78:8a:14:2e:ab:e1:21:82:25:31:12:0b:ec:
97:77:eb:98:17:a7:50:83:ea:0d:e2:a9:3e:3a:39:42:86:3b:
2c:6b:53:87:f0:43:fb:30:e2:3a:37:f0:92:ee:77:7a:64:7a:
24:0c:bb:f9:92:cd:b4:60:ab:e6:7c:23:b3:1e:c5:4b:a1:71:
f4:f2:4d:72:b4:85:9a:be:d5:98:95:bc:43:81:85:cb:d0:a6:
e7:39:bc:3b:2c:71:84:6c:6b:e4:fd:c4:bb:35:2a:b7:01:f5:
2c:08:38:27:9c:df:f2:53:96:14:71:08:fa:d4:71:f7:65:2a:
fa:ea:bf:c3:f8:9b:cd:c1:c0:95:bd:9e:50:96:77:48:28:f4:
21:5d:54:51:34:46:24:ce:dc:e0:87:f6:e5:17:d7:30:80:05:
bc:55:4e:e8:f3:df:41:b6:e9:6b:fe:bd:69:f3:8e:1c:4c:75:
6a:b8:20:5c:bd:c1:4d:d6:f0:ac:ed:06:87:65:52:76:0c:ad:
82:af:05:67
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgISAZXtCMX/TjCsBcgbCe2qrRaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjUwMzMxMTYyODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDE3ODJmNzNmNmI0MGUyNTQwOWMwMGQ5ZjQyMTlhYzg5N2EwMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNSEWhhoaNucjlEHPsmqeZOOHxzt
Yrllvwmg4Fe4a2mJGxYtBc/GY3KnQvmz+NCOqR3c1ybWJICSKI+nFB/aS5oKsEPc
Dg2qwgneJZlkXhJoObTxYGlF2ebA5n4yIVln0Uz4ZCyXMbw5YZHTRgHwhN9XZSHw
GIETLSVN8j+fOdnFGQ/cnw0CNVBJFVZBQ6eDeUl3tvDtVm6dc7Mve7sWUCqXHAah
jRrfMmneArreV6JHaEepjP6AtbZUTXLECNABfRbJQbxEWC7405mSXiAzEg4zvI5J
7lNXs85Y4MXTtJ1m/ko9GNmrNFl7In4TuddHe+ai+Y6inK2JqB0vcH6GwQIDAQAB
o4ICczCCAm8wHQYDVR0OBBYEFP0Xgvc/a0DiVAnADZ9CGayJegDcMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvX1JlQzl6OXJRT0pVQ2NBTm4wSVpySWw2QU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAwWe0AME
BT5JoAMEBFETYAMEBFEUQAMEBFEZwAMEBFFdsAMEBFFd0AMEBVJwYAMEBVPZ4AME
B1PngAMEBVu6oAMEA561OAMEArlUEAMEBdR3AAMEBdWCIAMEB9XGADANBAIAAjAH
AwUAIAEHKDANBgkqhkiG9w0BAQsFAAOCAQEAaiwHPr7CgeQfPKLVON+vB2sYg16v
xDUToHoz0wGE0/jPDyL5PzifvpJOWMm5wvzYHP66rLMKcsvgbmp4ihQuq+EhgiUx
Egvsl3frmBenUIPqDeKpPjo5QoY7LGtTh/BD+zDiOjfwku53emR6JAy7+ZLNtGCr
5nwjsx7FS6Fx9PJNcrSFmr7VmJW8Q4GFy9Cm5zm8OyxxhGxr5P3EuzUqtwH1LAg4
J5zf8lOWFHEI+tRx92Uq+uq/w/ibzcHAlb2eUJZ3SCj0IV1UUTRGJM7c4If25RfX
MIAFvFVO6PPfQbbpa/69afOOHEx1arggXL3BTdbwrO0Gh2VSdgytgq8FZw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:52 2025 by rpki-client