Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bilb14WArW1Ov7SsrYk0Wsxs1vU.roa
File: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (raw, json)
Hash identifier: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=
Subject key identifier: 6E:29:5B:D7:85:80:AD:6D:4E:BF:B4:AC:AD:89:34:5A:CC:6C:D6:F5
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019734C5F46F9B3F469B54FD345A1ED2DCFD
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bilb14WArW1Ov7SsrYk0Wsxs1vU.roa
Signing time: Tue 03 Jun 2025 07:51:17 +0000
ROA not before: Tue 03 Jun 2025 07:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.94.160.0/19 maxlen: 19
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.150.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.158.0/23 maxlen: 23
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
91.197.183.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.135.92.0/24 maxlen: 24
213.135.95.0/24 maxlen: 24
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:c5:f4:6f:9b:3f:46:9b:54:fd:34:5a:1e:d2:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jun 3 07:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e295bd78580ad6d4ebfb4acad89345acc6cd6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:9a:1a:b7:18:f2:38:a7:9f:00:68:93:cf:
9f:f6:79:ec:13:1d:6e:86:c0:f5:8b:44:87:da:2f:
b1:4b:a4:ad:66:f1:ce:66:b9:24:51:5f:17:bc:4b:
16:20:4d:fc:83:c2:6b:04:07:bb:2b:48:fb:30:cd:
3c:fd:d5:3c:1b:fb:a6:9a:d7:f1:42:eb:c2:d2:7a:
7d:a4:76:07:6c:28:62:8b:bf:b7:1f:9d:b6:0a:6c:
20:42:d6:f5:d5:1c:a7:0f:76:95:ec:b8:18:89:3f:
9d:48:7f:29:6d:4a:69:58:5f:03:ef:3d:7b:80:ea:
3f:a0:3d:a2:d6:0e:bb:21:53:c7:a0:76:4e:0b:83:
d8:30:91:f9:5a:e7:5b:b8:4c:a9:31:3a:17:ec:32:
b0:e5:ce:59:b3:8e:26:d1:4e:22:b7:61:c9:b6:a1:
76:f2:5f:dc:c4:9c:95:af:7d:3e:74:62:0e:93:f8:
0e:7c:e4:7f:03:22:46:45:2a:67:0c:43:3e:69:5c:
35:b5:0b:55:3c:6b:6c:eb:2e:d8:1a:08:31:96:4e:
64:ef:f2:06:41:a9:ba:0e:7e:78:00:06:5c:a8:c9:
9c:ba:df:9e:c3:c4:4a:07:ea:e4:42:03:7a:cf:c8:
83:0b:98:5e:c2:5a:a0:5b:83:22:82:6c:4d:93:2d:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:5B:D7:85:80:AD:6D:4E:BF:B4:AC:AD:89:34:5A:CC:6C:D6:F5
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bilb14WArW1Ov7SsrYk0Wsxs1vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
91.197.183.0/24
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.82.0-213.135.92.255
213.135.95.0/24
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.188.0/22
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
8c:8e:f7:28:65:ac:53:d2:d0:db:c1:65:4d:21:7b:5c:6f:9c:
14:ea:c1:19:34:d1:d9:d0:37:1a:5e:d1:0d:11:a8:b2:06:e2:
57:93:3e:23:07:fd:cb:cd:40:6b:58:de:96:56:f8:ec:e1:b8:
07:fc:ce:b4:a3:12:74:44:e5:9b:62:68:7a:0e:09:e2:6d:91:
60:aa:b2:31:90:7f:3a:be:c9:05:5b:cc:a4:92:0f:c7:8d:79:
f1:42:32:c7:d7:83:12:93:04:7a:ad:1f:46:aa:10:37:cd:4b:
60:48:b9:20:82:e1:9b:f1:38:94:c8:97:75:0c:fd:1e:4f:77:
d6:9e:97:78:13:94:4f:92:83:0f:4e:c2:06:20:a5:bd:af:dc:
25:be:bd:d3:98:d3:05:e3:1f:0e:b6:3d:c9:0f:52:9c:7c:26:
b4:71:db:1f:f5:05:70:83:1c:91:03:71:b2:9d:cb:1e:d8:6d:
64:20:0a:cc:46:45:cd:63:22:4c:7f:d5:a8:a9:63:ef:eb:80:
48:53:09:f4:17:f3:f8:d2:44:1b:87:72:44:25:26:bf:e0:47:
01:c1:23:28:c2:6f:2b:b3:6a:11:29:25:c1:af:31:91:81:3a:
2e:bc:02:59:b7:5d:c8:fa:ff:19:21:6a:0e:f6:e6:ba:2f:1e:
2a:69:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:17 2025 by rpki-client