Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/kU21zPj_cDfQp59eNGbfgPnOKEw.roa
File: kU21zPj_cDfQp59eNGbfgPnOKEw.roa (raw, json)
Hash identifier: KKCABhY5ZDh0u6CmKvmilt9DAebFs3J5DYDRFE17Ifo=
Subject key identifier: 91:4D:B5:CC:F8:FF:70:37:D0:A7:9F:5E:34:66:DF:80:F9:CE:28:4C
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 01971AB0AA1358ED0DC89A0B4976D076861D
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/kU21zPj_cDfQp59eNGbfgPnOKEw.roa
Signing time: Thu 29 May 2025 06:17:54 +0000
ROA not before: Thu 29 May 2025 06:17:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 2.57.88.0/23 maxlen: 24
2.57.90.0/24 maxlen: 24
2.57.91.0/24 maxlen: 24
31.170.160.0/22 maxlen: 24
31.170.164.0/23 maxlen: 24
31.170.164.0/24 maxlen: 24
31.170.165.0/24 maxlen: 24
31.170.166.0/23 maxlen: 24
31.220.16.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.20.0/23 maxlen: 24
31.220.20.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.22.0/24 maxlen: 24
31.220.23.0/24 maxlen: 24
31.220.48.0/20 maxlen: 24
31.220.104.0/24 maxlen: 24
31.220.105.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.108.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
45.13.132.0/23 maxlen: 24
45.13.134.0/23 maxlen: 24
45.13.252.0/23 maxlen: 24
45.13.254.0/23 maxlen: 24
45.87.80.0/22 maxlen: 24
45.93.136.0/22 maxlen: 24
93.188.160.0/21 maxlen: 24
141.136.33.0/24 maxlen: 24
141.136.34.0/24 maxlen: 24
141.136.35.0/24 maxlen: 24
141.136.36.0/24 maxlen: 24
141.136.39.0/24 maxlen: 24
141.136.41.0/24 maxlen: 24
141.136.42.0/24 maxlen: 24
141.136.43.0/24 maxlen: 24
141.136.44.0/24 maxlen: 24
141.136.45.0/24 maxlen: 24
141.136.46.0/24 maxlen: 24
141.136.47.0/24 maxlen: 24
153.92.0.0/24 maxlen: 24
153.92.1.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.3.0/24 maxlen: 24
153.92.4.0/23 maxlen: 24
153.92.6.0/23 maxlen: 24
153.92.6.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.8.0/21 maxlen: 24
153.92.8.0/24 maxlen: 24
153.92.9.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
153.92.208.0/22 maxlen: 24
153.92.212.0/22 maxlen: 24
153.92.216.0/21 maxlen: 24
156.67.64.0/20 maxlen: 24
156.67.208.0/20 maxlen: 24
185.28.20.0/24 maxlen: 24
185.28.21.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
185.77.96.0/24 maxlen: 24
185.77.97.0/24 maxlen: 24
194.11.154.0/23 maxlen: 24
194.11.214.0/23 maxlen: 24
195.110.58.0/23 maxlen: 24
212.1.208.0/21 maxlen: 24
212.1.208.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.211.0/24 maxlen: 24
212.1.212.0/22 maxlen: 24
212.1.212.0/24 maxlen: 24
212.1.215.0/24 maxlen: 24
2a02:4780::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:15::/48 maxlen: 48
2a02:4780:16::/48 maxlen: 48
2a02:4780:17::/48 maxlen: 48
2a02:4780:18::/48 maxlen: 48
2a02:4780:19::/48 maxlen: 48
2a02:4780:1a::/48 maxlen: 48
2a02:4780:1b::/48 maxlen: 48
2a02:4780:1c::/48 maxlen: 48
2a02:4780:1d::/48 maxlen: 48
2a02:4780:1e::/48 maxlen: 48
2a02:4780:1f::/48 maxlen: 48
2a02:4780:20::/48 maxlen: 48
2a02:4780:21::/48 maxlen: 48
2a02:4780:22::/48 maxlen: 48
2a02:4780:23::/48 maxlen: 48
2a02:4780:24::/48 maxlen: 48
2a02:4780:25::/48 maxlen: 48
2a02:4780:26::/48 maxlen: 48
2a02:4780:27::/48 maxlen: 48
2a02:4780:28::/48 maxlen: 48
2a02:4780:29::/48 maxlen: 48
2a02:4780:2a::/48 maxlen: 48
2a02:4780:2b::/48 maxlen: 48
2a02:4780:2c::/48 maxlen: 48
2a02:4780:2d::/48 maxlen: 48
2a02:4780:2e::/48 maxlen: 48
2a02:4780:2f::/48 maxlen: 48
2a02:4780:30::/48 maxlen: 48
2a02:4780:31::/48 maxlen: 48
2a02:4780:32::/48 maxlen: 48
2a02:4780:33::/48 maxlen: 48
2a02:4780:34::/48 maxlen: 48
2a02:4780:35::/48 maxlen: 48
2a02:4780:36::/48 maxlen: 48
2a02:4780:37::/48 maxlen: 48
2a02:4780:38::/48 maxlen: 48
2a02:4780:39::/48 maxlen: 48
2a02:4780:3a::/48 maxlen: 48
2a02:4780:3b::/48 maxlen: 48
2a02:4780:3c::/48 maxlen: 48
2a02:4780:3d::/48 maxlen: 48
2a02:4780:3e::/48 maxlen: 48
2a02:4780:3f::/48 maxlen: 48
2a02:4780:40::/48 maxlen: 48
2a02:4780:41::/48 maxlen: 48
2a02:4780:42::/48 maxlen: 48
2a02:4780:43::/48 maxlen: 48
2a02:4780:44::/48 maxlen: 48
2a02:4780:45::/48 maxlen: 48
2a02:4780:46::/48 maxlen: 48
2a02:4780:47::/48 maxlen: 48
2a02:4780:48::/48 maxlen: 48
2a02:4780:49::/48 maxlen: 48
2a02:4780:4a::/48 maxlen: 48
2a02:4780:4b::/48 maxlen: 48
2a02:4780:4c::/48 maxlen: 48
2a02:4780:4d::/48 maxlen: 48
2a02:4780:4e::/48 maxlen: 48
2a02:4780:4f::/48 maxlen: 48
2a02:4780:50::/48 maxlen: 48
2a02:4780:51::/48 maxlen: 48
2a02:4780:52::/48 maxlen: 48
2a02:4780:53::/48 maxlen: 48
2a02:4780:55::/48 maxlen: 48
2a02:4780:56::/48 maxlen: 48
2a02:4780:57::/48 maxlen: 48
2a02:4780:58::/48 maxlen: 48
2a02:4780:59::/48 maxlen: 48
2a02:4780:5a::/48 maxlen: 48
2a02:4780:84::/48 maxlen: 48
2a02:4780:85::/48 maxlen: 48
2a02:4780:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:b0:aa:13:58:ed:0d:c8:9a:0b:49:76:d0:76:86:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: May 29 06:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=914db5ccf8ff7037d0a79f5e3466df80f9ce284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:f3:00:40:42:f6:2d:35:cd:e6:7a:9f:b1:
0e:8d:cb:b4:34:9e:6f:70:6c:ce:9b:ec:a0:89:90:
c6:c5:f5:0e:24:55:78:2a:6c:08:1a:43:e8:79:0e:
c8:48:a9:65:09:60:80:5f:d2:12:35:c2:59:a5:f8:
9a:39:25:31:a8:ac:c2:1c:eb:52:5a:3a:60:3d:4b:
c3:c7:dc:a9:d3:ab:07:b4:2d:a0:07:15:dd:fd:94:
d3:bb:a7:b0:11:c1:16:48:65:d2:92:1b:16:ec:af:
d2:d9:09:82:9e:b1:00:ce:1b:f1:a8:55:cd:5c:ce:
45:26:84:6b:7c:dc:16:35:0b:ae:b5:3b:8e:fb:43:
03:84:ca:53:4d:ad:78:2a:0a:d8:2c:76:0c:36:b8:
a6:0e:48:3c:ae:12:e2:e4:03:53:80:09:bf:00:b3:
d7:70:29:92:df:e0:a6:e2:fe:d9:f6:1f:06:d3:d0:
5c:20:bd:53:2b:c4:ca:4b:dd:a9:e2:9c:21:33:ec:
70:17:2c:29:25:dd:11:ab:ba:32:81:9d:79:ef:66:
f3:fd:a3:97:74:5c:b2:85:70:0c:7c:e4:d8:8c:7f:
5a:41:57:02:48:c1:54:89:38:87:22:03:ea:6e:0f:
8b:3f:57:e6:0f:bb:c6:eb:3b:4b:9e:e0:30:6e:bc:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:B5:CC:F8:FF:70:37:D0:A7:9F:5E:34:66:DF:80:F9:CE:28:4C
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/kU21zPj_cDfQp59eNGbfgPnOKEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
141.136.33.0-141.136.36.255
141.136.39.0/24
141.136.41.0-141.136.47.255
153.92.0.0/20
153.92.208.0/20
156.67.64.0/20
156.67.208.0/20
185.28.20.0/22
185.77.96.0/23
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:53:ffff:ffff:ffff:ffff:ffff
2a02:4780:55::-2a02:4780:5a:ffff:ffff:ffff:ffff:ffff
2a02:4780:84::/47
2a02:4780:dead::/48
Signature Algorithm: sha256WithRSAEncryption
1f:47:4d:ea:4d:96:d2:46:22:cf:84:6f:6d:b4:51:fb:84:92:
29:4d:09:60:a9:db:af:5f:8d:72:6b:1d:94:f8:46:d7:9f:b2:
ef:78:7c:ff:cc:1c:82:41:45:05:f1:93:2c:aa:95:b7:0a:a6:
23:4d:61:f3:a5:a6:31:82:37:09:3d:ed:1a:70:5e:72:cf:f7:
5c:fb:37:f4:00:96:bd:2e:3b:3e:9f:db:31:63:f5:33:6f:31:
ca:01:6c:a6:7c:a3:cc:57:d5:2c:69:f5:7f:cd:de:a9:af:3a:
83:39:69:b5:23:2f:3c:81:db:7b:ed:e8:8c:46:a3:e4:9b:92:
62:e7:76:d9:20:cc:8a:a3:a0:3f:1c:98:74:35:ef:30:ac:af:
3d:b5:2a:d6:86:17:aa:a2:a0:39:37:03:a4:f6:81:76:95:d7:
94:20:ef:f0:62:46:09:26:0c:f1:67:4c:2f:3d:5d:2b:3e:2b:
f9:47:a0:05:69:c8:2c:1e:40:04:ef:ff:76:f6:3b:2e:10:62:
8c:13:ba:92:68:2d:b1:72:a6:bf:ae:8f:0e:6c:fb:07:95:52:
b7:ef:60:5d:63:0c:35:a2:a5:e5:1e:f2:e2:35:10:c6:6d:86:
b8:3d:2f:c5:55:c7:b2:da:af:8c:1a:6a:62:cc:2d:a8:42:09:
31:25:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:33:31 2025 by rpki-client