Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/tN6Y02H2IthdzXGYlMBx0_9eJb4.roa
File: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (raw, json)
Hash identifier: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=
Subject key identifier: B4:DE:98:D3:61:F6:22:D8:5D:CD:71:98:94:C0:71:D3:FF:5E:25:BE
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0195CFBF84E69709911B9F66A96B7B0CA818
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/tN6Y02H2IthdzXGYlMBx0_9eJb4.roa
Signing time: Tue 25 Mar 2025 23:59:49 +0000
ROA not before: Tue 25 Mar 2025 23:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 62.8.128.0/17 maxlen: 17
62.8.168.0/21 maxlen: 21
62.8.176.0/20 maxlen: 20
62.145.0.0/19 maxlen: 19
62.206.0.0/16 maxlen: 16
62.206.164.0/24 maxlen: 24
62.206.165.0/24 maxlen: 24
62.206.166.0/24 maxlen: 24
83.236.0.0/16 maxlen: 16
83.236.0.0/20 maxlen: 20
83.236.16.0/20 maxlen: 20
83.236.32.0/21 maxlen: 21
84.245.128.0/18 maxlen: 18
85.8.132.0/22 maxlen: 22
87.193.0.0/16 maxlen: 16
87.234.0.0/16 maxlen: 16
92.193.0.0/16 maxlen: 16
92.193.0.0/17 maxlen: 17
92.193.128.0/17 maxlen: 17
92.194.0.0/15 maxlen: 15
92.194.0.0/17 maxlen: 17
92.194.128.0/17 maxlen: 17
92.195.0.0/17 maxlen: 17
92.195.128.0/17 maxlen: 17
92.196.0.0/14 maxlen: 14
92.196.0.0/19 maxlen: 19
92.196.96.0/20 maxlen: 20
92.196.112.0/20 maxlen: 20
92.196.128.0/20 maxlen: 20
92.196.144.0/20 maxlen: 20
92.196.160.0/20 maxlen: 20
92.196.176.0/20 maxlen: 20
92.196.192.0/20 maxlen: 20
92.196.208.0/20 maxlen: 20
92.196.224.0/19 maxlen: 19
92.197.130.0/24 maxlen: 24
92.198.96.0/19 maxlen: 19
92.198.144.0/20 maxlen: 20
92.198.160.0/19 maxlen: 19
92.198.192.0/20 maxlen: 20
92.198.208.0/20 maxlen: 20
92.198.224.0/20 maxlen: 20
92.198.240.0/20 maxlen: 20
92.199.16.0/20 maxlen: 20
92.199.64.0/20 maxlen: 20
92.199.96.0/20 maxlen: 20
92.199.112.0/20 maxlen: 20
92.199.128.0/20 maxlen: 20
92.199.144.0/20 maxlen: 20
92.199.176.0/20 maxlen: 20
92.199.208.0/20 maxlen: 20
185.144.188.0/22 maxlen: 22
194.9.127.0/24 maxlen: 24
194.140.96.0/20 maxlen: 20
195.32.128.0/17 maxlen: 17
195.80.192.0/19 maxlen: 19
195.90.0.0/19 maxlen: 19
195.90.8.0/21 maxlen: 21
195.158.160.0/19 maxlen: 19
212.4.160.0/19 maxlen: 19
212.4.176.0/20 maxlen: 20
212.5.0.0/19 maxlen: 19
212.5.8.0/21 maxlen: 21
212.5.16.0/20 maxlen: 20
212.60.192.0/18 maxlen: 18
212.63.32.0/19 maxlen: 19
212.84.208.0/20 maxlen: 20
212.84.224.0/19 maxlen: 19
212.105.192.0/19 maxlen: 19
212.110.192.0/19 maxlen: 19
212.202.0.0/16 maxlen: 16
212.202.0.0/19 maxlen: 19
212.202.40.0/21 maxlen: 21
212.202.48.0/20 maxlen: 20
212.202.168.0/21 maxlen: 21
212.202.176.0/20 maxlen: 20
213.148.128.0/19 maxlen: 19
213.148.128.0/24 maxlen: 24
213.148.129.0/24 maxlen: 24
213.148.130.0/24 maxlen: 24
213.148.133.0/24 maxlen: 24
213.160.0.0/19 maxlen: 19
213.160.0.0/24 maxlen: 24
213.217.64.0/18 maxlen: 18
217.146.128.0/19 maxlen: 19
2001:658::/29 maxlen: 29
2001:1a80::/29 maxlen: 29
2001:1a80:800::/48 maxlen: 48
2001:1a80:801::/48 maxlen: 48
2001:1a80:802::/48 maxlen: 48
2001:1a81:1000::/36 maxlen: 40
2001:1a81:1000::/40 maxlen: 48
2001:1a81:2000::/36 maxlen: 40
2001:1a81:2000::/40 maxlen: 48
2001:1a81:3000::/36 maxlen: 40
2001:1a81:3000::/40 maxlen: 48
2001:1a81:4000::/36 maxlen: 40
2001:1a81:4000::/40 maxlen: 48
2001:1a81:5000::/36 maxlen: 40
2001:1a81:5000::/40 maxlen: 48
2001:1a81:6000::/36 maxlen: 40
2001:1a81:6000::/40 maxlen: 48
2001:1a81:7000::/36 maxlen: 40
2001:1a81:7000::/40 maxlen: 48
2a09:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cf:bf:84:e6:97:09:91:1b:9f:66:a9:6b:7b:0c:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Mar 25 23:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4de98d361f622d85dcd719894c071d3ff5e25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:63:2c:17:39:de:ab:98:eb:e5:9d:e6:52:
57:97:61:5a:07:c6:6e:e3:a4:59:cf:e6:47:40:e7:
a1:fe:f5:71:13:38:0d:a0:1a:d0:88:d2:6e:6a:45:
a7:1d:00:ec:1c:c2:f8:a8:00:97:be:91:be:db:14:
4a:4a:c4:dd:9f:47:f8:b7:8a:ef:dd:91:8f:6f:c7:
6f:2d:e1:8f:0c:52:6e:2b:a0:cd:be:40:8b:7a:5d:
99:e6:0d:1d:01:e2:11:ae:d8:8f:93:59:a7:1d:eb:
a3:be:93:2c:c3:e5:7c:e1:09:64:61:03:ab:74:91:
fd:50:43:cc:4a:df:ca:fa:85:ae:56:47:c3:93:9d:
bd:3e:4a:d8:18:3b:e4:6b:15:2c:a5:11:51:0a:76:
8d:9f:0d:aa:85:bb:d1:03:58:37:a8:36:db:0f:7e:
7f:b5:42:66:ac:ff:57:a0:40:dd:1d:f6:e6:dd:d3:
e4:21:db:6f:8b:cd:15:07:25:c0:ca:07:2e:44:89:
47:6e:cf:4c:17:1d:7e:02:9d:2b:9b:cb:4a:bb:db:
94:72:a6:3e:2e:72:6f:5a:25:7f:0d:93:80:04:b4:
86:d6:b6:7e:56:e8:88:9a:da:4d:7c:41:34:e8:78:
b9:62:dd:c2:ce:ba:37:3f:ad:39:cc:8d:16:05:5e:
e2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:98:D3:61:F6:22:D8:5D:CD:71:98:94:C0:71:D3:FF:5E:25:BE
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/tN6Y02H2IthdzXGYlMBx0_9eJb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.8.128.0/17
62.145.0.0/19
62.206.0.0/16
83.236.0.0/16
84.245.128.0/18
85.8.132.0/22
87.193.0.0/16
87.234.0.0/16
92.193.0.0-92.199.255.255
185.144.188.0/22
194.9.127.0/24
194.140.96.0/20
195.32.128.0/17
195.80.192.0/19
195.90.0.0/19
195.158.160.0/19
212.4.160.0/19
212.5.0.0/19
212.60.192.0/18
212.63.32.0/19
212.84.208.0-212.84.255.255
212.105.192.0/19
212.110.192.0/19
212.202.0.0/16
213.148.128.0/19
213.160.0.0/19
213.217.64.0/18
217.146.128.0/19
IPv6:
2001:658::/29
2001:1a80::/29
2a09:7100::/29
Signature Algorithm: sha256WithRSAEncryption
22:03:12:c6:cc:ad:93:5f:43:49:35:f5:63:bd:dd:e9:cd:82:
e4:fb:15:c2:8c:f7:33:d2:4b:dd:1e:15:c4:c7:78:cc:7b:fa:
c4:0e:e5:9e:6b:5b:56:a3:9f:ee:a8:4c:69:d4:a2:83:cc:d4:
03:fe:45:bb:d3:28:7b:eb:88:9c:40:98:aa:4a:f7:76:39:c1:
18:fe:45:5e:b3:ae:d4:24:63:80:37:ed:85:ab:1a:a9:1f:38:
58:92:6a:58:ce:7f:6e:c2:f0:9a:5a:59:88:7d:4d:05:c1:fd:
4d:16:47:f8:35:e1:5d:93:51:43:e9:00:a8:15:0e:46:8d:fc:
08:62:b9:66:1f:d9:bd:7a:17:00:d9:e9:ed:b3:19:c8:c9:3a:
1f:03:41:4b:6a:97:42:4e:f1:78:e6:2b:cb:ce:c1:19:c1:d4:
c6:53:17:35:c3:9c:80:3e:17:1d:3d:b3:00:5e:c7:94:73:c5:
fe:70:df:75:0a:ed:d7:15:f8:51:61:18:07:de:ca:19:e7:b6:
63:53:ba:06:91:00:24:21:4b:09:4b:b7:f9:72:d8:d4:49:f1:
0f:75:61:8a:9b:39:58:23:d8:52:2d:f9:e5:e5:61:18:0e:1f:
29:9b:19:da:cf:c5:50:9a:1b:d8:78:79:2c:cf:5c:4b:1e:76:
a6:98:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:30:45 2025 by rpki-client