Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0DImNT-WCbLZdeJSA4EXyW2Isik.roa
File: 0DImNT-WCbLZdeJSA4EXyW2Isik.roa (raw, json)
Hash identifier: MAj8J20w6HTY1sKuvIOlMeYpI5qG2tyvz/lG3Dkd5sM=
Subject key identifier: D0:32:26:35:3F:96:09:B2:D9:75:E2:52:03:81:17:C9:6D:88:B2:29
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196C377317311B1E357648691788C1C04D7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0DImNT-WCbLZdeJSA4EXyW2Isik.roa
Signing time: Mon 12 May 2025 07:48:10 +0000
ROA not before: Mon 12 May 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.196.0/24 maxlen: 24
79.172.199.0/24 maxlen: 24
79.172.203.0/24 maxlen: 24
79.172.209.0/24 maxlen: 24
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
79.172.216.0/24 maxlen: 24
79.172.225.0/24 maxlen: 24
79.172.236.0/24 maxlen: 24
79.172.238.0/24 maxlen: 24
79.172.240.0/24 maxlen: 24
79.172.241.0/24 maxlen: 24
79.172.243.0/24 maxlen: 24
79.172.248.0/24 maxlen: 24
79.172.253.0/24 maxlen: 24
79.172.255.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.214.0/24 maxlen: 24
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.59.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
217.144.62.0/24 maxlen: 24
2a02:730::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:77:31:73:11:b1:e3:57:64:86:91:78:8c:1c:04:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 12 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03226353f9609b2d975e252038117c96d88b229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:cb:fb:ba:7d:0e:32:d8:ec:3a:2d:e2:ec:
97:35:1f:cb:e6:83:98:15:6b:79:37:f5:ff:d0:d6:
36:24:37:36:97:fc:59:43:83:d2:fa:05:9d:30:66:
56:d9:fc:14:77:76:fc:8f:5f:e6:55:20:db:fd:1c:
12:7e:60:05:6b:07:04:56:7d:97:7a:68:9f:05:47:
db:87:9b:e6:fa:50:5c:3e:a9:22:0f:5c:98:89:53:
d2:56:fa:32:50:cd:f8:00:1c:ed:4a:da:74:02:7e:
cb:5d:99:a3:42:d1:7a:08:db:b2:5e:67:16:de:c9:
45:a3:be:87:4c:54:05:16:79:0d:ef:29:a8:ca:b4:
71:b9:9a:d7:ef:d1:7e:0e:69:ff:85:41:29:d2:64:
e6:1d:7b:4f:64:7c:e2:63:21:1a:f7:39:be:5f:be:
66:55:05:d1:df:d3:60:a3:3e:91:69:31:df:15:8a:
13:1a:d0:69:aa:62:f8:90:67:03:e4:18:01:c8:25:
f4:e1:59:a5:72:00:12:84:66:f3:2e:a8:6c:65:81:
82:39:67:bc:a7:aa:86:f7:54:28:36:63:fa:9a:57:
f6:5b:13:d2:ee:7a:6d:dd:f6:97:bb:cf:ca:fd:3a:
38:9e:2a:b1:57:ca:8b:e2:91:78:51:1a:42:08:bc:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:26:35:3F:96:09:B2:D9:75:E2:52:03:81:17:C9:6D:88:B2:29
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0DImNT-WCbLZdeJSA4EXyW2Isik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.196.0/24
79.172.199.0/24
79.172.203.0/24
79.172.209.0/24
79.172.211.0/24
79.172.213.0/24
79.172.216.0/24
79.172.225.0/24
79.172.236.0/24
79.172.238.0/24
79.172.240.0/23
79.172.243.0/24
79.172.248.0/24
79.172.253.0/24
79.172.255.0/24
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.52.255
217.113.59.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
1b:9c:d9:4e:aa:b3:69:3a:8a:40:ba:de:ad:98:9a:af:3e:b0:
ac:f3:a4:dd:72:41:fd:93:50:2f:4f:3f:bd:5d:d0:35:e4:0c:
cf:f1:98:ed:2f:ce:3c:e9:48:10:4b:7f:af:a6:bd:a8:8b:af:
31:8a:d7:99:e8:d0:d4:67:62:11:48:cb:42:44:5f:84:b0:09:
3e:bc:13:ff:1b:4c:ad:a7:4d:78:4f:0f:a3:db:31:0f:57:e8:
5a:e3:32:89:1b:45:02:f2:c5:ec:08:1a:24:b2:b8:55:0f:17:
ce:50:87:4f:c3:03:e1:9c:30:36:54:11:d9:63:0f:90:a8:05:
31:d3:c3:81:4e:ec:75:66:e8:6e:9a:b4:72:c7:f1:95:e3:ea:
80:03:15:d2:60:0c:44:e2:3a:26:b0:68:be:2c:3d:56:04:ad:
6d:c1:49:5d:88:dc:8e:a2:71:8f:3b:61:74:ce:c1:9b:ed:3a:
a4:51:cb:26:e3:d2:9f:19:3b:81:1d:57:fa:9a:ac:f9:e2:07:
21:eb:1c:e9:91:c2:6d:5f:fc:b4:22:be:e7:99:ba:9f:81:c7:
94:71:07:21:5b:41:e8:e8:5e:49:a2:40:9f:d6:69:24:a1:c9:
e6:5a:2c:04:4f:c6:5a:3b:99:4f:23:73:cc:ca:e4:be:44:87:
f4:c4:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:25 2025 by rpki-client