Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IcbUE61p6Z9bEy7uO-T5k49ye0Y.roa
File: IcbUE61p6Z9bEy7uO-T5k49ye0Y.roa (raw, json)
Hash identifier: x3J1l5napw6bu7GAjmsDEkwuhj22/YoxpaTTmpa/GEw=
Subject key identifier: 21:C6:D4:13:AD:69:E9:9F:5B:13:2E:EE:3B:E4:F9:93:8F:72:7B:46
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01960056C9E1FE0CA1D6B743948FF3C30189
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IcbUE61p6Z9bEy7uO-T5k49ye0Y.roa
Signing time: Fri 04 Apr 2025 10:26:49 +0000
ROA not before: Fri 04 Apr 2025 10:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.29.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 22
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:56:c9:e1:fe:0c:a1:d6:b7:43:94:8f:f3:c3:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Apr 4 10:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c6d413ad69e99f5b132eee3be4f9938f727b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:25:a0:92:ab:74:44:ee:5d:47:1f:aa:4c:
cd:ac:db:fa:ed:7b:60:ec:37:db:31:b8:65:e6:bd:
79:6a:ad:4d:6d:0a:3d:34:9f:ca:2f:6c:7e:2d:96:
35:ab:a1:be:2e:04:ff:0d:67:2e:7b:81:94:22:b2:
9c:e7:d6:46:11:04:e1:ac:f5:96:44:e9:7a:bb:8f:
f8:5b:03:c8:7d:3c:6e:0e:1f:eb:4e:e6:46:2e:32:
c9:36:83:73:39:b2:77:7c:13:43:1f:c5:8f:d6:43:
e7:f1:ef:80:2c:75:14:12:75:44:ec:8e:39:7a:13:
cb:53:ea:14:bf:d7:c3:70:dc:7a:33:67:6a:97:cb:
4b:fa:55:94:e7:f7:40:db:4b:6e:6f:d6:aa:bc:0c:
71:52:3f:6f:fa:16:50:bb:9a:6b:2e:8a:08:38:8c:
df:d4:43:3f:18:29:ba:02:ac:00:ba:e3:bb:ee:d8:
d0:5c:5d:63:bb:ed:06:6b:df:7f:08:57:83:6f:09:
b9:be:b7:9e:e1:b2:0d:ad:94:8f:0e:48:63:ec:3d:
b8:81:86:97:d6:9c:e2:70:6e:3c:57:ee:29:a4:f8:
bf:7b:d5:c8:24:12:4e:8a:89:ef:d0:86:6b:20:07:
5d:7c:04:76:34:56:bd:64:7e:ba:57:fe:8e:9f:18:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C6:D4:13:AD:69:E9:9F:5B:13:2E:EE:3B:E4:F9:93:8F:72:7B:46
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IcbUE61p6Z9bEy7uO-T5k49ye0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.29.0/24
193.5.36.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
99:48:a5:76:a5:81:14:fd:62:45:b7:95:69:76:fa:5c:b1:4e:
50:47:93:cd:16:45:f5:ac:3e:7d:6b:4f:cf:d9:75:47:10:7d:
94:56:91:09:a8:54:5f:8b:8c:57:c5:d5:17:82:fc:ba:6e:36:
df:b9:52:ec:8a:fb:df:1e:a9:c5:92:b5:80:b6:d1:bf:19:a2:
59:83:0c:fc:01:e5:44:66:72:0b:e7:07:e0:77:41:17:c0:39:
af:2a:e6:41:a7:54:5a:fc:4f:a0:cc:df:b5:fa:a8:01:3c:f2:
8c:d0:0e:58:a8:e5:02:c6:37:72:cd:e3:4f:5f:d2:ef:af:62:
76:d6:37:5b:14:f5:f2:89:a7:da:33:cb:1b:a9:2e:aa:8a:b2:
b1:58:bc:aa:9e:3c:f2:2e:2a:ff:53:f5:f8:74:06:72:71:57:
0a:dd:9c:fc:08:bf:d8:ee:65:fe:7f:51:ea:1e:fc:5a:5a:b5:
a2:ae:0f:16:86:f7:3f:56:d6:ee:44:cc:08:5b:d5:39:19:f4:
c8:28:53:4e:bf:d9:02:43:32:b1:8d:1d:7c:07:0a:37:5b:a6:
17:55:c0:5f:8f:11:52:e1:63:61:52:92:f5:5a:00:d2:5d:bf:
cc:10:6e:18:9a:74:87:15:8f:68:3b:4c:2e:33:68:74:01:23:
fb:71:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:48 2025 by rpki-client