Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cU573rnUdm_yBB1UtJxZmgP5EOs.roa
File: cU573rnUdm_yBB1UtJxZmgP5EOs.roa (raw, json)
Hash identifier: j+lvX9k1BRLVs6bAZDO8VAOWhB2fLfiZfnORwg0iB9A=
Subject key identifier: 71:4E:7B:DE:B9:D4:76:6F:F2:04:1D:54:B4:9C:59:9A:03:F9:10:EB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019735EF826CCF7D4EB5740AF2F73BFD098C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cU573rnUdm_yBB1UtJxZmgP5EOs.roa
Signing time: Tue 03 Jun 2025 13:16:18 +0000
ROA not before: Tue 03 Jun 2025 13:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
77.83.37.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:342::/32 maxlen: 32
2a09:346::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 29
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
2a11:3900::/32 maxlen: 32
2a11:d680::/32 maxlen: 32
2a12:9f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:ef:82:6c:cf:7d:4e:b5:74:0a:f2:f7:3b:fd:09:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 3 13:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=714e7bdeb9d4766ff2041d54b49c599a03f910eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:b5:12:b4:7b:43:c3:fa:17:ab:90:d3:f7:
33:4d:6a:41:57:3f:79:5f:2b:36:84:2e:cb:13:e3:
2f:12:6a:f6:e5:a1:3d:ad:23:85:b1:69:b8:ba:f5:
b6:d3:94:67:1b:92:47:a4:f7:03:99:73:b4:2f:a9:
b7:58:7c:a7:de:a1:ad:56:aa:7d:75:b7:39:60:fd:
5b:c4:f7:a0:55:10:7f:7f:af:9f:75:91:4b:60:78:
64:79:82:81:6f:ee:aa:d6:2e:cb:c1:53:0c:52:82:
d9:24:e3:3b:2a:02:32:7e:72:31:6f:c3:d6:85:4a:
d4:12:77:75:5e:3a:fb:d9:de:0d:6a:24:20:97:ca:
d3:13:bc:85:11:22:2a:16:af:61:41:18:46:15:3f:
fe:1f:b5:25:8a:2c:58:4d:51:07:3b:ce:64:55:d3:
8b:12:f3:e6:3d:fa:67:73:9f:e2:10:30:3b:e5:4f:
18:8e:87:e7:ea:e7:c1:cb:78:1f:c9:5e:47:a9:bc:
7a:5d:f7:2b:3a:ce:25:ce:8e:b0:96:2e:1b:c3:ad:
4d:a0:eb:67:6e:ea:7a:12:d6:e1:79:3e:9c:2a:79:
6b:ec:26:7b:15:9c:88:af:17:57:6e:6d:a8:43:b0:
b1:c7:25:9f:62:b3:ef:ee:1f:60:3e:03:73:65:a4:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:7B:DE:B9:D4:76:6F:F2:04:1D:54:B4:9C:59:9A:03:F9:10:EB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cU573rnUdm_yBB1UtJxZmgP5EOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.88.136.0/24
45.94.171.0/24
45.132.180.0/24
45.132.182.0/23
77.83.37.0/24
91.223.110.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:342::/32
2a09:346::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
2a11:3900::/32
2a11:d680::/32
2a12:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:63:90:3a:5b:e5:e2:b0:7f:49:ea:c9:50:b0:44:e7:0c:9d:
9e:80:64:08:57:1c:a2:50:9e:1e:c9:d4:1f:79:3a:1c:27:b6:
f6:b9:d6:a7:0e:60:f3:6a:e8:6d:d2:83:e2:97:1f:f5:7d:be:
58:f9:ac:5b:cb:0b:7b:f8:8c:e4:4a:4a:81:ba:73:38:8d:b2:
d3:dd:57:96:ae:ef:c7:3c:bb:70:12:29:cf:e7:e3:66:5d:f4:
b0:5e:d8:6c:93:2e:95:52:bf:87:12:56:4d:c9:8e:07:6d:24:
52:59:d3:d4:1a:17:59:9c:72:86:46:c2:65:1a:26:77:c8:7e:
db:b6:dd:2c:df:e7:e8:71:ef:fc:36:88:66:a3:0d:91:b2:d6:
4c:b7:b9:cf:52:de:6d:b9:df:5c:72:20:7d:7d:d8:69:11:71:
71:d0:f0:11:77:fc:bd:68:4d:55:5c:6c:30:52:fe:a4:9d:41:
97:94:49:b1:ae:c3:27:a4:e6:c7:6b:b5:b1:a5:b0:f5:0f:68:
de:8d:2d:f0:22:d0:5e:08:10:b9:0f:fa:dd:69:4d:6d:5e:e1:
85:d7:90:91:71:f2:84:89:b8:ae:53:64:04:99:6f:6f:d6:a5:
5a:ed:77:a5:3f:47:35:7b:92:88:64:8b:db:41:e6:b0:77:b0:
6e:e2:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:40 2025 by rpki-client