Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa
File: xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa (raw, json)
Hash identifier: J/Ga6J6sfLJW3CEZ/9em1QDzAEf2XIPOwnBQgDlRhhw=
Subject key identifier: C5:26:66:8E:02:8A:37:D9:8C:1B:72:43:42:85:B2:63:FD:AD:A7:31
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 01973AEBBECB8302B3D0572A9FBDEEB3313B
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa
Signing time: Wed 04 Jun 2025 12:30:17 +0000
ROA not before: Wed 04 Jun 2025 12:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15685
IP address blocks: 77.78.76.0/22 maxlen: 22
77.78.76.0/23 maxlen: 23
77.78.76.0/24 maxlen: 24
77.78.94.0/23 maxlen: 23
77.78.95.0/24 maxlen: 24
77.78.96.0/20 maxlen: 20
77.78.112.0/21 maxlen: 21
77.78.118.0/23 maxlen: 23
77.78.123.0/24 maxlen: 24
77.78.124.0/22 maxlen: 22
81.0.192.0/22 maxlen: 22
81.0.199.0/24 maxlen: 24
81.0.206.0/23 maxlen: 23
81.0.208.0/23 maxlen: 23
81.0.212.0/23 maxlen: 23
81.0.214.0/24 maxlen: 24
81.0.217.0/24 maxlen: 24
81.0.225.0/24 maxlen: 24
81.0.226.0/24 maxlen: 24
81.0.228.0/24 maxlen: 24
81.0.230.0/23 maxlen: 23
81.0.231.0/24 maxlen: 24
81.0.232.0/21 maxlen: 21
81.0.240.0/22 maxlen: 22
81.0.240.0/23 maxlen: 23
81.0.250.0/24 maxlen: 24
81.0.254.0/23 maxlen: 23
82.208.4.0/22 maxlen: 22
82.208.6.0/23 maxlen: 23
82.208.8.0/22 maxlen: 22
82.208.12.0/24 maxlen: 24
82.208.14.0/24 maxlen: 24
82.208.16.0/23 maxlen: 23
82.208.16.0/24 maxlen: 24
82.208.17.0/24 maxlen: 24
82.208.18.0/24 maxlen: 24
82.208.26.0/23 maxlen: 23
82.208.27.0/24 maxlen: 24
82.208.28.0/23 maxlen: 23
82.208.32.0/22 maxlen: 22
82.208.34.0/23 maxlen: 23
82.208.39.0/24 maxlen: 24
82.208.40.0/23 maxlen: 23
82.208.44.0/24 maxlen: 24
82.208.46.0/23 maxlen: 23
82.208.48.0/23 maxlen: 23
82.208.50.0/24 maxlen: 24
82.208.56.0/24 maxlen: 24
82.208.58.0/24 maxlen: 24
85.239.227.0/24 maxlen: 24
85.239.252.0/23 maxlen: 23
85.239.252.0/24 maxlen: 24
109.123.192.0/21 maxlen: 24
109.123.202.0/23 maxlen: 24
109.123.205.0/24 maxlen: 24
109.123.206.0/23 maxlen: 24
109.123.208.0/22 maxlen: 24
109.123.210.0/23 maxlen: 23
109.123.214.0/23 maxlen: 24
109.123.216.0/21 maxlen: 24
217.11.224.0/23 maxlen: 23
217.11.227.0/24 maxlen: 24
217.11.228.0/23 maxlen: 23
217.11.230.0/24 maxlen: 24
217.11.232.0/23 maxlen: 23
217.11.235.0/24 maxlen: 24
217.11.236.0/24 maxlen: 24
217.11.242.0/23 maxlen: 23
217.11.242.0/24 maxlen: 24
217.11.246.0/23 maxlen: 23
217.11.248.0/23 maxlen: 23
217.11.249.0/24 maxlen: 24
217.11.251.0/24 maxlen: 24
217.11.254.0/24 maxlen: 24
2001:1528::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:eb:be:cb:83:02:b3:d0:57:2a:9f:bd:ee:b3:31:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Jun 4 12:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c526668e028a37d98c1b72434285b263fdada731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:70:09:82:81:ed:36:94:80:4b:c0:40:c2:
1b:37:2e:0c:d1:ae:ea:de:d6:87:57:ce:38:5d:2a:
60:a1:21:22:26:48:47:a6:ca:28:cf:9f:71:47:5c:
4b:e1:46:a3:1a:de:6f:ff:32:26:07:c1:b8:91:72:
45:95:e8:71:00:58:a4:01:3d:90:f9:07:1b:3a:d8:
3c:42:4d:fd:05:df:7b:ff:f8:a4:72:be:fa:51:52:
8a:2d:d1:94:c6:20:e1:70:e7:36:a0:86:75:58:ca:
ea:aa:b6:fb:00:3d:ce:9e:54:21:39:99:26:85:5c:
a8:f6:b6:9f:48:55:83:04:19:fb:ca:69:20:ec:37:
0a:af:c5:4f:ca:c6:4c:fb:7c:be:95:13:c5:28:05:
31:fc:5f:5e:95:54:f4:24:24:7a:19:ef:73:2e:be:
9e:d4:44:55:93:d1:6d:08:a5:9f:81:a9:b4:c8:1d:
49:1f:2d:ff:94:1f:0f:53:16:8a:28:34:8c:dc:50:
2b:4a:31:f3:70:fa:68:0a:fb:47:5d:18:a7:04:1b:
e1:0f:b2:45:33:c0:0c:6f:93:69:51:41:02:cf:ec:
bc:69:78:fc:63:c9:53:aa:dc:f4:45:9c:2b:1c:29:
4e:c6:c2:2b:dd:de:6f:94:05:e3:71:29:3b:6b:8f:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:66:8E:02:8A:37:D9:8C:1B:72:43:42:85:B2:63:FD:AD:A7:31
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.76.0/22
77.78.94.0-77.78.119.255
77.78.123.0-77.78.127.255
81.0.192.0/22
81.0.199.0/24
81.0.206.0-81.0.209.255
81.0.212.0-81.0.214.255
81.0.217.0/24
81.0.225.0-81.0.226.255
81.0.228.0/24
81.0.230.0-81.0.243.255
81.0.250.0/24
81.0.254.0/23
82.208.4.0-82.208.12.255
82.208.14.0/24
82.208.16.0-82.208.18.255
82.208.26.0-82.208.29.255
82.208.32.0/22
82.208.39.0-82.208.41.255
82.208.44.0/24
82.208.46.0-82.208.50.255
82.208.56.0/24
82.208.58.0/24
85.239.227.0/24
85.239.252.0/23
109.123.192.0/21
109.123.202.0/23
109.123.205.0-109.123.211.255
109.123.214.0-109.123.223.255
217.11.224.0/23
217.11.227.0-217.11.230.255
217.11.232.0/23
217.11.235.0-217.11.236.255
217.11.242.0/23
217.11.246.0-217.11.249.255
217.11.251.0/24
217.11.254.0/24
IPv6:
2001:1528::/32
Signature Algorithm: sha256WithRSAEncryption
5e:4b:d2:80:33:d5:f7:fd:74:f3:91:72:dc:13:e8:53:6e:c5:
08:65:92:3f:19:98:4a:e8:89:c3:46:af:ff:2f:e3:72:77:9c:
55:b9:65:64:48:02:66:2f:4a:e8:43:42:07:9e:d9:03:d8:bc:
6d:2c:6f:48:e9:93:f5:be:e1:5b:76:92:aa:d9:b9:0b:a7:af:
6f:79:29:72:fa:87:bc:05:68:63:23:b8:84:18:a1:6d:f8:57:
8d:89:95:d7:ad:a3:8d:20:06:4d:3a:9d:3e:3a:61:c1:bb:28:
78:d6:e1:e1:0c:51:98:cd:4b:af:00:71:10:2f:c1:e6:71:d7:
ac:04:29:d8:17:51:2d:80:8e:25:8b:8d:1c:b8:f3:15:0e:f7:
a7:98:94:6b:ce:3e:7d:ca:fc:54:4b:dd:6d:60:be:84:4b:89:
5a:a1:1a:69:21:b2:5c:7a:4a:17:58:0b:b2:df:99:1a:0b:d1:
be:b6:44:ed:6b:e2:02:b9:74:7c:87:8f:08:3c:17:0c:6b:24:
d8:da:06:9f:ae:35:71:02:42:b0:dd:35:4f:9a:d4:5f:c9:94:
11:d3:5b:6e:d2:f7:95:3f:f6:a7:bb:83:9a:f5:b1:23:d0:2e:
00:8e:c9:70:57:57:0d:5d:d2:87:62:66:42:93:68:a0:28:b9:
4e:c9:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:35:21 2025 by rpki-client