Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa
File: PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa (raw, json)
Hash identifier: YW1UjO31lL0Fn0BsRdsu06vc+hRyUlv9S9fdp5M6KFQ=
Subject key identifier: 3D:71:1D:65:5B:D2:31:BE:84:6B:FB:3C:C3:77:34:8F:DF:B2:C8:D1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01961B82B158384B540846DBC798416C3249
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa
Signing time: Wed 09 Apr 2025 17:04:32 +0000
ROA not before: Wed 09 Apr 2025 17:04:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:82:b1:58:38:4b:54:08:46:db:c7:98:41:6c:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 9 17:04:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d711d655bd231be846bfb3cc377348fdfb2c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:0c:77:c7:ba:6b:b7:01:45:59:14:62:f7:
0e:5f:49:47:c9:6c:98:02:8d:33:11:ab:02:ee:f3:
d1:91:f3:7c:01:63:a2:5a:da:a1:bf:b4:08:d9:12:
f4:f1:54:c6:9d:fa:35:2b:14:05:25:65:8f:9d:fd:
88:f0:b4:e1:d0:7d:64:5f:28:07:d2:e9:31:8c:ea:
b5:9e:32:37:dc:25:dd:cc:aa:2a:3a:03:b5:87:c1:
c7:69:85:dc:76:09:a1:a7:b0:3f:d9:4b:87:dc:dd:
2f:7e:ae:b0:b0:dd:02:6b:5c:a1:2c:bb:07:f3:9b:
37:09:0f:23:58:00:0a:9c:8a:89:62:98:79:ef:56:
2b:ef:e5:67:66:f8:42:9e:d6:b9:3f:2c:43:08:01:
04:02:33:6a:2f:09:87:66:ff:68:b0:c8:3d:a0:90:
df:a2:f5:5e:d1:87:da:69:33:d1:f7:2c:e2:b1:91:
a3:d9:41:63:57:41:c7:4c:d6:29:f3:a0:30:ed:94:
26:38:cf:18:30:d8:ba:2c:f8:82:60:70:7c:12:6d:
74:51:63:40:52:f6:c7:f0:44:fd:d5:7d:1e:ee:4a:
f8:0f:b7:d6:db:33:b5:d1:6a:9e:73:5c:fb:0d:5c:
07:e2:5f:95:17:b8:5a:18:b3:09:77:60:8f:e1:40:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:1D:65:5B:D2:31:BE:84:6B:FB:3C:C3:77:34:8F:DF:B2:C8:D1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.50.0/23
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
df:ea:86:c4:b5:f8:35:39:8a:02:48:86:28:c4:f9:8e:1e:e8:
43:a1:cf:e5:c3:c9:ba:be:22:46:87:84:6a:d9:19:39:03:76:
68:1b:84:fd:d7:8e:c5:81:92:4a:e4:50:32:6c:fb:2c:c3:ad:
90:18:1b:67:2b:0d:ef:45:14:9e:0e:f2:42:77:e6:be:58:83:
2a:02:44:c0:4d:6c:07:99:da:4c:6d:f9:db:86:14:d9:d4:d3:
55:36:e8:8a:53:4d:38:d7:ec:ce:3d:6f:63:39:a3:79:81:bc:
d8:24:83:46:51:6f:e6:ca:6b:74:72:a9:47:33:9c:1e:a9:48:
a3:62:c9:9c:63:29:bf:ec:ca:7b:7e:33:ed:13:95:8c:13:f7:
46:c5:e0:aa:f6:d2:84:87:0f:61:de:d2:e8:6f:54:ca:ad:fa:
f4:9c:e1:5d:a3:9f:fc:50:82:44:f7:60:0f:e6:f4:90:50:be:
48:06:68:9a:b9:99:38:a7:87:81:b1:4e:28:72:f7:52:b5:1f:
eb:3f:9d:e7:b3:26:6e:f8:55:21:b1:e4:1a:0c:47:cd:17:d3:
78:fe:15:16:a4:34:8b:34:80:4a:b7:48:79:a2:10:fa:f9:b4:
fb:c5:f0:9c:e7:35:e9:20:bd:04:e1:28:ca:a3:95:a9:df:29:
42:ca:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:25:06 2025 by rpki-client