Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/fxLVOtxbdEZY_Ccn6zMREPPjZRE.roa
File: fxLVOtxbdEZY_Ccn6zMREPPjZRE.roa (raw, json)
Hash identifier: M+/2IpBj+tzWJPCLsoNsEgw9yALeS53u+bYWq4zQbpg=
Subject key identifier: 7F:12:D5:3A:DC:5B:74:46:58:FC:27:27:EB:33:11:10:F3:E3:65:11
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 019914C1B90E1D1153EBDB5804F3410C8B53
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/fxLVOtxbdEZY_Ccn6zMREPPjZRE.roa
Signing time: Thu 04 Sep 2025 12:44:24 +0000
ROA not before: Thu 04 Sep 2025 12:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 5.226.0.0/21 maxlen: 24
31.7.248.0/21 maxlen: 24
31.172.160.0/22 maxlen: 24
31.172.232.0/21 maxlen: 24
37.26.184.0/21 maxlen: 24
37.61.240.0/21 maxlen: 24
37.110.192.0/21 maxlen: 24
37.156.226.0/24 maxlen: 24
46.22.192.0/20 maxlen: 24
46.102.116.0/24 maxlen: 24
46.231.216.0/21 maxlen: 24
46.247.128.0/22 maxlen: 24
46.255.200.0/21 maxlen: 24
77.72.88.0/21 maxlen: 24
77.246.80.0/20 maxlen: 24
78.153.224.0/19 maxlen: 24
82.96.128.0/18 maxlen: 24
82.163.36.0/22 maxlen: 24
82.196.24.0/21 maxlen: 24
85.31.192.0/19 maxlen: 24
87.121.136.0/21 maxlen: 24
88.212.144.0/21 maxlen: 24
89.37.106.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
89.44.210.0/24 maxlen: 24
91.224.162.0/23 maxlen: 24
91.226.193.0/24 maxlen: 24
91.250.244.0/24 maxlen: 24
94.100.160.0/20 maxlen: 24
95.143.64.0/20 maxlen: 24
149.232.160.0/20 maxlen: 24
176.241.120.0/21 maxlen: 24
185.4.60.0/23 maxlen: 24
185.4.62.0/24 maxlen: 24
185.15.140.0/22 maxlen: 24
185.53.80.0/22 maxlen: 24
185.61.184.0/21 maxlen: 24
185.62.184.0/22 maxlen: 24
185.65.79.0/24 maxlen: 24
185.78.156.0/22 maxlen: 24
185.91.224.0/22 maxlen: 24
185.92.36.0/22 maxlen: 24
185.114.100.0/22 maxlen: 24
185.116.63.0/24 maxlen: 24
185.209.52.0/22 maxlen: 24
193.39.119.0/24 maxlen: 24
193.151.84.0/22 maxlen: 24
193.151.84.0/24 maxlen: 24
193.151.87.0/24 maxlen: 24
193.189.124.0/23 maxlen: 24
194.42.100.0/23 maxlen: 24
194.116.142.0/23 maxlen: 24
195.128.147.0/24 maxlen: 24
195.189.186.0/23 maxlen: 24
195.234.35.0/24 maxlen: 24
212.18.240.0/21 maxlen: 24
212.85.229.0/24 maxlen: 24
212.85.230.0/23 maxlen: 24
2a00:68c0::/32 maxlen: 48
2a00:78c0::/29 maxlen: 48
2a01:240::/32 maxlen: 48
2a01:290::/32 maxlen: 48
2a02:398::/32 maxlen: 48
2a03:bdc0::/32 maxlen: 48
2a04:cc00::/29 maxlen: 48
2a0b:41c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:c1:b9:0e:1d:11:53:eb:db:58:04:f3:41:0c:8b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Sep 4 12:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f12d53adc5b744658fc2727eb331110f3e36511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:dd:ec:4d:7a:18:df:ec:dd:f1:49:3f:cc:
b5:71:1a:7a:6d:d5:91:0e:d8:45:f5:6f:1d:54:9e:
4f:95:cb:06:71:75:f8:1d:e7:71:8b:23:df:a9:61:
ec:95:a1:d0:ec:0a:7b:52:c3:9b:66:38:b6:c2:9b:
7f:a1:ff:e6:e0:b9:6f:79:8f:e2:90:0e:ae:2a:1f:
4e:68:ea:79:c0:cb:8c:1f:15:3d:cb:4b:72:3d:cc:
bf:33:eb:41:6e:8d:2d:23:b4:55:52:d2:42:e1:9c:
99:69:a3:57:08:3d:dc:1d:2f:fa:ec:ab:0d:3b:fe:
f7:56:b9:e9:f5:fd:c7:cc:1e:79:ea:2b:c0:5e:a3:
da:5c:f8:29:66:cb:09:13:eb:62:50:69:af:c9:44:
0f:9d:50:e4:72:44:1b:6d:ac:66:d6:22:f8:0b:84:
36:cb:e4:f5:e7:da:0a:20:5d:73:1f:74:04:c3:14:
30:ae:92:f9:c7:10:6b:be:55:92:db:2a:32:e4:af:
d6:bd:56:32:36:1c:39:56:be:f5:89:63:7b:59:62:
db:e5:a8:8e:b0:31:93:81:a0:39:25:d6:44:4c:d4:
f7:0e:14:03:08:90:15:ca:03:48:c6:43:c3:98:04:
1c:06:31:df:7f:49:44:e3:1c:55:9f:43:03:ea:e7:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:D5:3A:DC:5B:74:46:58:FC:27:27:EB:33:11:10:F3:E3:65:11
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/fxLVOtxbdEZY_Ccn6zMREPPjZRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.0.0/21
31.7.248.0/21
31.172.160.0/22
31.172.232.0/21
37.26.184.0/21
37.61.240.0/21
37.110.192.0/21
37.156.226.0/24
46.22.192.0/20
46.102.116.0/24
46.231.216.0/21
46.247.128.0/22
46.255.200.0/21
77.72.88.0/21
77.246.80.0/20
78.153.224.0/19
82.96.128.0/18
82.163.36.0/22
82.196.24.0/21
85.31.192.0/19
87.121.136.0/21
88.212.144.0/21
89.37.106.0/24
89.44.77.0/24
89.44.210.0/24
91.224.162.0/23
91.226.193.0/24
91.250.244.0/24
94.100.160.0/20
95.143.64.0/20
149.232.160.0/20
176.241.120.0/21
185.4.60.0-185.4.62.255
185.15.140.0/22
185.53.80.0/22
185.61.184.0/21
185.62.184.0/22
185.65.79.0/24
185.78.156.0/22
185.91.224.0/22
185.92.36.0/22
185.114.100.0/22
185.116.63.0/24
185.209.52.0/22
193.39.119.0/24
193.151.84.0/22
193.189.124.0/23
194.42.100.0/23
194.116.142.0/23
195.128.147.0/24
195.189.186.0/23
195.234.35.0/24
212.18.240.0/21
212.85.229.0-212.85.231.255
IPv6:
2a00:68c0::/32
2a00:78c0::/29
2a01:240::/32
2a01:290::/32
2a02:398::/32
2a03:bdc0::/32
2a04:cc00::/29
2a0b:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:00:e3:76:0c:4c:f8:07:c6:be:94:85:73:bf:02:dd:b5:b4:
c3:e3:5c:c2:b4:5f:31:1f:f0:84:1e:df:99:21:b2:67:4f:61:
41:9d:8a:4a:c6:03:5f:7d:78:4d:1b:a2:89:64:70:c6:e3:74:
5d:ff:1a:8a:c2:22:78:52:c7:75:ee:02:d6:e7:d2:17:44:23:
bb:09:c8:95:7a:f9:a1:63:73:85:68:af:08:f0:d6:55:6f:4d:
9c:c5:bd:4c:ac:db:55:4a:fe:fc:66:43:b6:a6:a8:01:5a:34:
9a:8f:27:36:87:0e:77:a6:89:3b:33:fa:d5:83:ad:4c:8a:6b:
0b:3d:6c:cd:61:b1:1d:86:36:f2:25:aa:85:e8:fd:1a:ae:ca:
8c:76:ba:25:67:a1:13:ef:8e:3f:68:43:16:12:64:ef:c9:82:
7c:52:0f:87:fe:0d:af:48:41:2d:f6:72:e4:dc:f0:42:ef:ac:
3f:f6:74:95:ab:19:47:d5:b3:f9:07:b8:07:1a:f3:6e:e3:d7:
9e:c9:bc:28:6d:7c:5a:74:1d:9d:15:28:ae:92:28:9a:9c:44:
91:48:e2:86:d2:3e:9f:5e:88:12:e1:0e:9f:20:ad:1b:09:1f:
35:05:ca:12:b1:7c:2d:71:4b:3e:06:bc:63:01:2f:96:80:cc:
5e:22:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:22 2025 by rpki-client