Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa
File: Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa (raw, json)
Hash identifier: 7Jrxd3qwLriiBdyBMLT8U/Q6YrwgSz/r4ZzkDOjpxzQ=
Subject key identifier: 2D:DC:F6:15:CC:72:DA:52:11:D0:3F:8B:73:DB:88:57:09:F5:B1:58
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA01EF4F3CF34B376A3DC1F581D3BB
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa
Signing time: Thu 02 Jan 2025 11:50:08 +0000
ROA not before: Thu 02 Jan 2025 11:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.122.184.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f82:abcd::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:01:ef:4f:3c:f3:4b:37:6a:3d:c1:f5:81:d3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ddcf615cc72da5211d03f8b73db885709f5b158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:b9:e3:92:8f:a6:a1:4c:c9:2a:ec:9e:98:
48:df:4b:3b:e7:f6:7d:c1:0c:82:79:25:2e:fb:02:
67:36:14:a2:67:30:73:d1:db:d6:15:09:4c:5e:0c:
f9:ee:72:a2:6b:89:cf:b7:a1:f7:4d:57:7a:40:7f:
91:6b:1e:33:e2:7b:b8:2e:2a:d1:c4:cb:34:a4:61:
ee:55:bc:62:a7:8f:b9:fc:30:0f:9a:98:44:33:2c:
09:26:bf:a7:26:19:f7:25:87:4a:5d:76:a3:d3:e7:
03:a0:b0:b7:8e:a8:21:4f:2b:ee:76:f4:41:1e:6d:
06:6d:85:06:ac:65:e3:f7:9d:fa:61:a5:9b:4b:0c:
63:e6:4a:ae:34:61:5b:f8:6d:a1:cb:b6:50:b7:e3:
66:8a:b2:9a:ad:e1:a4:d6:e2:1f:58:cb:54:87:50:
2c:02:15:15:56:24:6e:61:f6:22:9f:ca:e4:ce:88:
d3:8a:3f:f5:29:51:71:cd:e8:07:8f:b6:10:82:24:
d6:eb:f1:14:87:92:0b:f8:c4:8c:96:6e:e6:34:27:
d6:d4:6b:b3:f7:df:ba:4d:a8:fa:fa:72:f6:24:d2:
16:f9:32:cf:29:f9:26:da:1f:9f:7d:af:f7:4a:1c:
2a:f2:a3:4e:67:58:92:57:4c:a9:32:62:0d:d6:97:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:F6:15:CC:72:DA:52:11:D0:3F:8B:73:DB:88:57:09:F5:B1:58
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
45.153.125.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
95.156.205.0/24
103.57.250.0/24
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
185.122.184.0/24
185.193.51.0/24
185.195.65.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::/48
2a03:f80:56::/47
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::/48
2a03:f80:359::/48
2a03:f80:370::/47
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f82:abcd::/48
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
28:93:e9:c8:a8:6e:ba:15:f0:ff:46:00:ed:19:ae:cd:d8:0d:
59:de:1a:01:f7:4d:06:d1:a6:72:ac:f6:48:46:f3:ff:3a:eb:
a9:21:3e:46:f0:1e:8a:8b:e4:f8:6c:28:95:2b:25:bf:dc:d3:
42:78:0b:03:83:db:bc:9c:e1:d0:9f:1a:8d:58:6c:6e:3b:63:
ba:b6:fb:7a:ea:50:d0:27:ec:9d:20:b8:1c:c6:cb:9a:fe:5f:
3c:76:d7:fd:0d:f9:d9:9a:b6:0f:60:ac:01:11:54:73:4c:4c:
5f:94:87:4f:d8:8e:d0:eb:17:b4:ba:b2:36:ac:ce:d2:8f:55:
74:19:8a:ef:96:57:92:01:cf:7c:e1:88:8f:1f:11:f7:4c:01:
00:24:32:3e:90:c6:a4:d3:f9:86:62:13:3d:b1:d1:66:30:2e:
77:97:e1:9f:8f:0d:7e:7f:c9:64:94:9b:ab:48:e7:56:50:5a:
9f:69:c5:61:9f:22:be:10:03:dd:fe:95:be:71:de:32:e7:8a:
1b:c2:0f:df:12:8f:3f:ad:72:5b:38:6a:71:b6:72:e9:8c:de:
98:e7:db:db:ac:3c:31:26:78:0e:4c:79:ac:4a:1a:d0:cf:44:
0f:7b:eb:1f:7b:a6:75:d6:71:f3:0c:90:bd:c5:96:c6:f1:f2:
20:ff:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:46 2025 by rpki-client