Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/zOEcpqc4Lmql0YgdzvWYJWByYls.roa
File: zOEcpqc4Lmql0YgdzvWYJWByYls.roa (raw, json)
Hash identifier: vPKZMRU6d6wwmA0Kz8rV4xNxNMM+TmRV1+QZn0m8hZI=
Subject key identifier: CC:E1:1C:A6:A7:38:2E:6A:A5:D1:88:1D:CE:F5:98:25:60:72:62:5B
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01973F6D4FB24CE53485531B13E30C206CE6
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/zOEcpqc4Lmql0YgdzvWYJWByYls.roa
Signing time: Thu 05 Jun 2025 09:30:17 +0000
ROA not before: Thu 05 Jun 2025 09:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.187.33.0/24 maxlen: 24
37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.151.73.0/24 maxlen: 24
45.151.74.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.136.0/24 maxlen: 24
83.172.138.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.159.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
93.113.99.0/24 maxlen: 24
93.113.215.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:46::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:6d:4f:b2:4c:e5:34:85:53:1b:13:e3:0c:20:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 5 09:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cce11ca6a7382e6aa5d1881dcef598256072625b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:72:29:3d:11:85:31:59:8f:0c:49:ff:08:
01:be:50:e5:43:15:28:25:4c:e4:5e:a7:ec:f6:6e:
ac:a2:b7:be:50:91:71:c1:4b:32:ef:a0:2e:b0:37:
3f:b1:0f:b0:eb:9f:41:5e:4b:b9:6a:2a:f2:b1:47:
f4:95:62:44:9d:17:f3:73:c6:4b:a1:bf:cd:9a:11:
ad:73:88:0b:ef:b8:59:4d:96:a6:85:08:74:b3:d4:
76:83:76:11:0a:b4:5d:9e:f8:e4:3b:d0:1f:71:30:
90:76:45:94:ab:77:e3:a8:de:fd:e1:41:f8:be:fc:
9d:97:e0:54:a7:f1:cf:46:59:c2:f8:fc:03:4c:66:
08:62:33:93:1f:0a:ee:31:30:23:e6:4d:11:c0:25:
a1:c7:47:2b:8b:94:2b:8e:1b:11:56:37:c7:8f:4a:
d4:66:cd:53:04:57:be:45:e0:1e:a6:42:44:e7:a9:
50:14:7a:46:62:5b:11:fa:4f:ef:2d:4f:fa:16:15:
26:f3:09:cc:b2:85:1b:bc:66:4a:6c:78:44:12:43:
56:3c:86:d5:79:1e:d2:fa:08:4c:ea:3b:30:70:aa:
58:dd:9e:d2:20:95:36:ba:8f:4e:1b:51:50:77:91:
a4:dd:0d:50:4a:b0:d5:2d:55:08:3c:4c:e3:bb:f1:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:1C:A6:A7:38:2E:6A:A5:D1:88:1D:CE:F5:98:25:60:72:62:5B
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/zOEcpqc4Lmql0YgdzvWYJWByYls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.33.0/24
37.235.48.0/24
37.235.51.0/24
45.151.73.0-45.151.74.255
45.153.127.0/24
46.183.187.0/24
83.172.134.0-83.172.136.255
83.172.138.0/24
83.172.150.0/24
83.172.159.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.40.105.0/24
89.46.232.0-89.46.236.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
93.113.99.0/24
93.113.215.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.122.187.0/24
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.214.32.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:358::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
17:54:7c:bf:f6:ac:19:11:9e:6f:85:fe:ac:50:6d:e1:b5:45:
c0:57:de:24:f5:80:a6:8d:eb:f4:22:ef:c4:c9:e3:53:78:6f:
f5:f8:57:7b:bd:69:46:41:41:df:fb:1f:a8:74:d0:5d:bc:ff:
8d:a8:dc:53:30:78:19:40:a2:2a:56:32:26:d6:75:d3:24:6a:
c4:96:e2:9b:c2:82:2f:05:ac:7e:bf:27:6d:c8:6f:b8:bb:33:
69:1f:68:00:2a:45:34:46:93:08:d6:12:eb:e2:30:ac:c7:0c:
73:97:61:a1:fa:9e:b5:52:a0:7b:96:1c:49:62:84:38:f1:9f:
e1:6d:97:be:69:6e:ae:0c:9b:08:da:93:6d:20:7c:6e:38:21:
2c:d7:bd:9f:de:78:6b:82:e2:d9:a4:69:42:05:e9:14:09:3a:
ee:ae:2d:33:5c:7b:4a:22:95:5f:65:8e:36:f5:1e:5f:c7:18:
2b:03:f4:7d:e9:34:23:53:51:0b:3a:cf:f9:cc:c2:33:f3:d6:
46:5c:a4:51:2b:9e:49:27:ab:a1:5c:be:d8:76:9f:0c:f8:f0:
7d:79:0c:ec:a8:ea:64:60:9a:66:bd:6c:19:c6:1d:1f:ea:18:
5c:95:ed:a8:45:87:ee:07:7f:2a:4e:1f:8a:fa:4b:be:1c:23:
d1:17:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:07:37 2025 by rpki-client