Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa
File: lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa (raw, json)
Hash identifier: dffK8bAdzimKqM78J5WELOoe3Fs3GVSJCzE2DHH3tkw=
Subject key identifier: 97:0A:53:35:2E:1B:E2:A9:9D:E7:13:DC:65:54:13:3E:7E:05:31:F8
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 019746B4117A50E8BB4B4AB67DB0149250FF
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa
Signing time: Fri 06 Jun 2025 19:24:55 +0000
ROA not before: Fri 06 Jun 2025 19:24:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 5.158.208.0/21 maxlen: 21
5.158.208.0/23 maxlen: 24
5.158.210.0/24 maxlen: 24
5.158.211.0/24 maxlen: 24
5.158.212.0/24 maxlen: 24
5.158.214.0/24 maxlen: 24
5.158.215.0/24 maxlen: 24
62.73.160.0/19 maxlen: 19
62.73.160.0/24 maxlen: 29
62.73.161.0/24 maxlen: 24
62.73.162.0/23 maxlen: 23
62.73.165.0/24 maxlen: 29
62.73.166.0/24 maxlen: 29
62.73.167.0/24 maxlen: 24
62.73.168.0/24 maxlen: 24
62.73.169.0/24 maxlen: 30
62.73.170.0/24 maxlen: 29
62.73.171.0/24 maxlen: 24
62.73.172.0/23 maxlen: 23
62.73.174.0/24 maxlen: 24
62.73.175.0/24 maxlen: 29
62.73.176.0/23 maxlen: 23
62.73.178.0/24 maxlen: 29
62.73.179.0/24 maxlen: 29
62.73.180.0/24 maxlen: 24
62.73.181.0/24 maxlen: 24
62.73.182.0/24 maxlen: 24
62.73.183.0/24 maxlen: 29
62.73.184.0/24 maxlen: 29
62.73.185.0/24 maxlen: 24
62.73.188.0/24 maxlen: 29
62.73.189.0/24 maxlen: 29
62.73.191.0/24 maxlen: 24
81.19.96.0/20 maxlen: 20
81.20.64.0/20 maxlen: 20
81.20.66.0/25 maxlen: 25
81.20.70.128/25 maxlen: 25
81.25.192.0/20 maxlen: 20
81.93.176.0/20 maxlen: 20
81.93.176.0/24 maxlen: 24
81.93.178.0/23 maxlen: 23
81.93.180.0/24 maxlen: 24
81.93.181.0/27 maxlen: 27
81.93.182.0/24 maxlen: 24
81.93.183.0/24 maxlen: 24
81.93.185.128/26 maxlen: 26
81.93.185.192/27 maxlen: 27
81.93.185.224/28 maxlen: 28
81.93.186.0/23 maxlen: 23
81.93.188.0/24 maxlen: 24
81.93.189.0/24 maxlen: 24
81.93.190.0/24 maxlen: 24
81.93.208.0/20 maxlen: 20
81.93.208.64/27 maxlen: 27
81.93.208.96/27 maxlen: 27
82.112.96.0/19 maxlen: 19
82.112.98.0/27 maxlen: 27
82.112.99.0/24 maxlen: 24
82.112.100.0/24 maxlen: 24
82.112.101.16/28 maxlen: 28
82.112.101.128/26 maxlen: 26
82.112.101.192/29 maxlen: 29
82.112.101.224/27 maxlen: 27
82.112.102.0/27 maxlen: 27
82.112.102.32/29 maxlen: 29
82.112.102.40/29 maxlen: 29
82.112.102.48/28 maxlen: 28
82.112.102.64/27 maxlen: 27
82.112.102.96/28 maxlen: 28
82.112.102.120/29 maxlen: 29
82.112.102.128/26 maxlen: 26
82.112.102.192/26 maxlen: 26
82.112.103.0/24 maxlen: 24
82.112.104.0/27 maxlen: 27
82.112.104.32/27 maxlen: 27
82.112.104.64/26 maxlen: 26
82.112.104.128/25 maxlen: 25
82.112.105.0/24 maxlen: 24
82.112.107.24/30 maxlen: 30
82.112.107.28/30 maxlen: 30
82.112.107.32/30 maxlen: 30
82.112.107.36/30 maxlen: 30
82.112.107.40/30 maxlen: 30
82.112.107.112/28 maxlen: 28
82.112.108.0/23 maxlen: 23
82.112.110.0/23 maxlen: 24
82.112.112.0/23 maxlen: 24
82.112.114.0/24 maxlen: 24
82.112.116.0/23 maxlen: 24
82.112.120.0/23 maxlen: 24
82.112.123.64/28 maxlen: 28
82.112.123.208/28 maxlen: 28
82.112.124.0/23 maxlen: 24
82.112.126.0/24 maxlen: 24
82.112.127.0/24 maxlen: 24
83.217.224.0/19 maxlen: 19
83.217.224.0/23 maxlen: 23
83.217.228.0/23 maxlen: 24
83.217.230.0/24 maxlen: 24
83.217.234.0/23 maxlen: 24
83.217.236.0/23 maxlen: 24
83.217.237.32/28 maxlen: 28
83.217.239.0/27 maxlen: 27
83.217.239.32/27 maxlen: 27
83.217.239.64/26 maxlen: 26
83.217.239.128/28 maxlen: 28
83.217.241.0/27 maxlen: 27
83.217.241.128/25 maxlen: 25
83.217.242.0/23 maxlen: 24
83.217.244.0/23 maxlen: 24
83.217.246.0/23 maxlen: 24
83.217.248.0/23 maxlen: 24
83.217.251.0/24 maxlen: 24
83.217.251.160/27 maxlen: 27
83.231.128.0/17 maxlen: 17
83.231.183.64/27 maxlen: 27
83.231.233.240/28 maxlen: 28
91.186.160.0/19 maxlen: 19
91.186.176.0/24 maxlen: 24
91.186.176.208/28 maxlen: 28
91.186.177.0/24 maxlen: 24
91.186.177.176/29 maxlen: 29
91.186.177.184/29 maxlen: 29
91.186.178.0/24 maxlen: 24
91.186.179.0/24 maxlen: 24
91.186.180.0/23 maxlen: 24
91.186.182.0/24 maxlen: 24
91.186.183.0/24 maxlen: 24
91.186.186.0/23 maxlen: 23
91.186.188.0/23 maxlen: 24
91.186.190.0/25 maxlen: 25
91.186.190.128/25 maxlen: 25
91.186.191.0/24 maxlen: 24
158.181.56.0/21 maxlen: 21
185.84.16.0/22 maxlen: 22
212.119.0.0/19 maxlen: 19
213.130.32.0/19 maxlen: 19
213.198.0.0/17 maxlen: 17
213.198.0.0/24 maxlen: 24
213.198.1.0/27 maxlen: 27
213.198.1.32/27 maxlen: 27
213.198.2.0/24 maxlen: 24
213.198.3.0/24 maxlen: 24
213.198.4.0/24 maxlen: 24
213.198.8.0/23 maxlen: 24
213.198.26.0/29 maxlen: 29
213.198.26.8/29 maxlen: 29
213.198.26.16/29 maxlen: 29
213.198.28.0/24 maxlen: 24
213.198.30.0/24 maxlen: 24
213.198.31.0/24 maxlen: 24
213.198.54.0/23 maxlen: 24
213.198.65.0/24 maxlen: 24
213.198.70.0/24 maxlen: 24
213.198.71.0/24 maxlen: 24
213.198.74.0/24 maxlen: 24
213.198.75.0/24 maxlen: 24
213.198.78.0/24 maxlen: 24
213.198.79.0/24 maxlen: 24
213.198.82.0/25 maxlen: 25
213.198.83.0/25 maxlen: 25
213.198.84.0/24 maxlen: 24
213.198.85.0/24 maxlen: 24
213.198.86.0/26 maxlen: 26
213.198.86.64/26 maxlen: 26
213.198.86.128/27 maxlen: 27
213.198.86.160/27 maxlen: 27
213.198.86.192/26 maxlen: 26
213.198.88.0/24 maxlen: 24
213.198.90.0/24 maxlen: 24
213.198.91.0/24 maxlen: 24
213.198.93.0/24 maxlen: 24
213.198.94.96/27 maxlen: 27
213.198.95.64/26 maxlen: 26
213.198.97.0/24 maxlen: 24
213.198.98.0/24 maxlen: 24
213.198.99.0/24 maxlen: 24
2001:728::/32 maxlen: 32
2001:728:c00::/38 maxlen: 64
2001:728:1010:300::/56 maxlen: 64
2001:728:2400::/38 maxlen: 64
2001:728:2806::/48 maxlen: 64
2001:728:2807::/48 maxlen: 64
2001:728:2808::/48 maxlen: 64
2001:728:2809::/48 maxlen: 64
2001:728:2c00::/38 maxlen: 64
2001:728:4000::/38 maxlen: 64
2001:728:4400::/38 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:b4:11:7a:50:e8:bb:4b:4a:b6:7d:b0:14:92:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jun 6 19:24:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=970a53352e1be2a99de713dc6554133e7e0531f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:90:44:8f:4b:55:4c:c7:50:12:be:35:4b:
fc:d6:7e:80:08:f5:e6:37:c4:73:5f:f6:24:40:59:
da:60:6f:96:c1:7f:1f:82:b5:de:43:ba:ea:3e:3b:
55:39:02:e2:4e:f3:80:ac:67:6c:60:be:e1:5c:bb:
5b:3e:26:e8:a8:5e:78:33:87:b5:6f:0d:6d:75:f3:
a8:59:cc:53:7f:37:4f:ed:78:99:78:d0:39:42:49:
6e:04:05:03:65:3d:ee:3e:d5:50:ad:19:d4:92:54:
9b:a3:18:d9:be:de:71:66:b0:fd:ac:5e:8d:7b:58:
c9:4f:6e:85:5c:68:9d:17:4a:2a:b5:22:11:13:fa:
be:37:a4:29:03:1b:a1:c1:53:3e:73:b2:99:94:c0:
95:bf:5b:8e:de:93:4a:55:f3:1a:61:f5:6f:79:0a:
37:a6:1a:37:14:a7:bd:ae:33:43:d0:4a:43:2c:9c:
71:8f:02:31:44:2a:5e:16:9b:55:71:e6:b7:11:0f:
4a:49:4d:df:15:be:97:e9:0a:13:72:5c:c0:81:d1:
a1:3a:28:c9:52:c1:e3:ea:48:ec:1e:c6:e8:28:e8:
9d:d8:c6:eb:7a:4b:14:eb:e4:91:bc:ea:df:8e:4e:
46:30:25:5b:fc:04:3f:e2:5f:08:8f:16:9d:b1:43:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:53:35:2E:1B:E2:A9:9D:E7:13:DC:65:54:13:3E:7E:05:31:F8
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.208.0/21
62.73.160.0/19
81.19.96.0/20
81.20.64.0/20
81.25.192.0/20
81.93.176.0/20
81.93.208.0/20
82.112.96.0/19
83.217.224.0/19
83.231.128.0/17
91.186.160.0/19
158.181.56.0/21
185.84.16.0/22
212.119.0.0/19
213.130.32.0/19
213.198.0.0/17
IPv6:
2001:728::/32
Signature Algorithm: sha256WithRSAEncryption
44:51:dc:2e:ae:58:8d:ef:6c:6a:75:e8:91:fe:5d:fe:f0:39:
91:90:46:ba:d8:3b:66:ce:f4:57:f5:82:50:a8:54:48:3e:ce:
73:dd:6c:7d:af:10:01:46:fe:ee:84:6c:5b:48:67:53:7a:c0:
f3:08:40:a9:46:29:a4:3d:44:37:9a:31:af:17:34:9d:6f:03:
2d:88:47:ac:ef:a4:a3:7c:38:c4:ea:52:7d:7d:d2:b1:dc:cf:
c7:2f:6e:7a:16:cd:63:4f:b9:85:8b:68:05:fc:e4:34:8d:66:
95:c1:62:8e:94:19:3a:a5:db:35:e0:ce:74:42:87:1b:dd:77:
40:31:b5:c1:8f:f6:69:01:57:10:ec:51:ab:a7:2b:82:b3:60:
65:18:f1:22:cf:a3:55:15:a7:b0:a2:9e:02:6d:06:07:14:09:
24:6f:e1:21:48:4d:48:30:c9:39:a3:bd:1b:a4:35:ab:14:b9:
87:a2:9c:84:01:fd:84:70:6f:a4:a5:8d:82:ee:24:01:cf:6e:
a9:52:b2:60:b5:29:e6:07:e4:1f:2b:b8:59:94:14:77:7e:e4:
f3:7b:94:ce:8f:47:e2:a4:9d:ab:a2:fd:4b:7e:63:ab:59:71:
8d:4a:53:0d:c6:0f:51:b2:3a:23:4d:b5:fa:e6:f0:2d:25:e3:
f3:01:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:47:27 2025 by rpki-client