Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sp3Gfnb8xZullhD4vhFuqqrlw9Q.roa
File: sp3Gfnb8xZullhD4vhFuqqrlw9Q.roa (raw, json)
Hash identifier: ApVVWAeRcf+LROuw5h28ZwzaD+4RK+y3GCe9BVW9+OM=
Subject key identifier: B2:9D:C6:7E:76:FC:C5:9B:A5:96:10:F8:BE:11:6E:AA:AA:E5:C3:D4
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0198E70C12A919F44828D0643223ED958670
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sp3Gfnb8xZullhD4vhFuqqrlw9Q.roa
Signing time: Tue 26 Aug 2025 15:43:04 +0000
ROA not before: Tue 26 Aug 2025 15:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.29.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 22
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.244.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91a::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e7:0c:12:a9:19:f4:48:28:d0:64:32:23:ed:95:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Aug 26 15:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29dc67e76fcc59ba59610f8be116eaaaae5c3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:b9:c0:68:3c:ff:cb:a9:51:b2:05:0b:d1:
b6:a3:5a:20:cd:20:18:e2:76:cc:b4:38:bd:03:f2:
ff:a4:d1:38:0e:f8:df:61:7b:37:1a:8f:e3:54:fb:
a4:c3:a8:2b:c2:4e:83:31:cc:56:17:65:1c:10:17:
ee:64:45:8d:54:aa:28:e0:56:05:25:2d:61:c3:83:
25:5b:8f:7c:6a:64:a8:e0:70:e4:e2:b5:33:f4:d7:
84:e9:34:bb:18:ab:d7:95:da:68:88:58:9d:16:c9:
92:95:7a:7b:4a:2b:82:9b:da:79:92:44:67:3f:ad:
08:72:da:6f:df:5d:a1:68:74:02:2e:a0:59:f4:01:
8a:7b:b8:70:7c:51:e9:c0:c3:a5:58:0f:b8:92:1e:
c7:02:ea:7a:ac:cc:df:db:f6:d1:9e:15:74:5c:e3:
59:51:74:6b:7b:7c:81:b5:c3:7d:41:34:ed:13:2a:
ce:fb:35:16:a6:c7:71:47:0d:f2:81:55:db:2d:35:
44:08:4c:f9:d7:5f:8f:ec:53:c1:e8:44:b2:4f:1e:
69:1e:db:97:58:90:79:4c:30:a7:7b:12:5a:d5:c2:
16:2f:a9:c5:51:cb:fd:76:f5:a6:07:fa:e1:2e:e1:
63:b7:ee:ba:1b:48:9a:a2:e5:66:c4:fd:3d:41:df:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9D:C6:7E:76:FC:C5:9B:A5:96:10:F8:BE:11:6E:AA:AA:E5:C3:D4
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sp3Gfnb8xZullhD4vhFuqqrlw9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.29.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.244.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91a::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
1f:81:77:b0:90:9e:46:af:4b:34:85:1d:05:9a:44:af:7d:af:
4e:a4:44:b7:eb:1e:69:2f:80:2e:0e:f4:55:55:59:18:a4:b2:
ac:73:71:9e:76:a8:95:56:a1:76:22:f4:d0:4b:4e:5a:5a:d0:
66:76:fc:2a:1b:2a:2f:1b:24:1e:17:aa:cd:fd:74:1a:d9:2d:
b3:ea:72:38:e6:24:d7:df:17:35:3a:ea:31:26:d2:39:3e:08:
39:35:63:eb:5c:0f:33:14:00:eb:ca:41:51:54:35:41:46:d5:
7d:d8:d5:46:3d:09:0d:9e:04:07:9c:cc:33:48:88:92:0f:80:
eb:fb:5e:49:0e:17:5f:31:72:ad:a9:de:4a:7a:44:2b:87:33:
f1:4d:c7:6d:8e:48:d5:6a:de:8f:8a:11:4c:82:6f:53:46:d7:
82:46:9d:5a:0a:8b:2f:97:1d:62:10:4f:33:60:9a:86:3f:d1:
50:eb:97:c2:5e:f9:9e:c7:5d:2a:f3:ae:75:2c:bc:1e:b0:90:
88:4e:31:86:7c:f6:b9:f4:fa:32:9e:ee:9f:10:40:6d:a6:d5:
e4:aa:62:56:be:42:88:14:2c:22:c6:eb:9d:82:77:63:18:d9:
89:86:8d:03:09:c5:99:04:64:0d:06:ce:84:46:0f:5d:81:80:
7a:77:c1:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:27:27 2025 by rpki-client