Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/60lT6E7Hw-SybLa6dCTef8Owqso.roa
File: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (raw, json)
Hash identifier: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=
Subject key identifier: EB:49:53:E8:4E:C7:C3:E4:B2:6C:B6:BA:74:24:DE:7F:C3:B0:AA:CA
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0196B472E58AE63173CBC0690911E55EB0FC
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/60lT6E7Hw-SybLa6dCTef8Owqso.roa
Signing time: Fri 09 May 2025 09:49:10 +0000
ROA not before: Fri 09 May 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:72:e5:8a:e6:31:73:cb:c0:69:09:11:e5:5e:b0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 9 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb4953e84ec7c3e4b26cb6ba7424de7fc3b0aaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:1a:0d:5a:31:6c:a3:92:d7:b7:a0:e9:a4:
ab:a5:91:6b:d4:12:19:63:27:86:01:81:31:ee:f9:
e7:08:59:a7:c3:48:f0:1d:87:6d:cb:3b:b1:e5:e9:
59:2e:9a:2d:df:7f:62:e9:05:6a:1b:7a:c2:83:6a:
39:13:fd:c0:ee:29:98:78:b1:8a:f5:92:c5:a5:75:
58:62:ee:46:52:28:7f:b4:88:0b:46:5e:fa:9a:5e:
83:56:a6:93:59:00:d9:2c:e5:0c:c2:8b:b9:7d:32:
2f:09:48:29:45:de:e8:58:b3:51:28:c5:cf:b6:44:
ce:44:81:9a:35:f2:b4:ed:cc:7b:93:33:b8:54:72:
6b:a1:64:9e:a7:35:9a:40:9a:26:40:64:19:98:e0:
87:44:c5:16:e4:66:9c:84:2a:a2:36:e4:02:bf:22:
f8:ea:b3:ff:83:a6:17:35:e8:08:72:e6:2f:39:08:
5e:aa:07:d2:28:f5:d9:6a:bb:26:3e:00:57:cd:d3:
15:7d:54:ec:34:68:0c:86:6a:77:e9:1a:f0:0d:6d:
12:5c:f9:65:47:64:63:1c:b8:45:91:4b:ba:c0:db:
19:fc:83:85:f1:4c:91:65:68:d3:0d:cd:99:1b:80:
38:8c:a0:4c:21:f0:2c:2d:48:c1:95:31:1f:f0:58:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:53:E8:4E:C7:C3:E4:B2:6C:B6:BA:74:24:DE:7F:C3:B0:AA:CA
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/60lT6E7Hw-SybLa6dCTef8Owqso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.219.0/24
89.117.223.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:40:0f:68:e1:6a:30:3a:25:27:a8:cf:ba:aa:80:46:b0:07:
96:cb:2e:2f:d3:59:e6:85:cb:94:44:8a:e9:ad:11:0a:b5:d0:
98:2d:41:22:fa:56:dc:c4:89:41:4b:19:2c:4a:d3:53:c7:5a:
eb:f5:c9:48:cf:b8:25:ff:f4:97:24:b4:94:e2:d7:0e:a1:f9:
bf:a6:50:d9:6d:42:8a:43:11:65:b3:aa:08:22:57:4d:1d:0c:
f4:27:ed:37:df:c3:9f:4d:ff:06:06:2d:c6:2b:d7:a2:3d:a7:
10:81:60:c5:28:20:04:bc:6d:1c:92:c1:6e:5e:5a:e4:99:a6:
e5:07:43:57:a9:f8:71:ae:9d:62:d2:46:56:97:3a:37:14:20:
b5:70:aa:74:74:21:12:ab:3a:6c:ee:15:a3:07:e4:2f:34:1b:
96:7c:f2:8d:2f:f6:b3:3f:18:5a:6a:f6:19:3f:90:70:07:68:
50:f5:5e:3f:f2:ed:ac:9f:ca:9a:65:77:41:d9:fa:2a:a1:31:
50:8c:27:3e:02:e5:98:75:42:a9:95:e3:6d:12:36:e8:0c:ff:
4a:c9:f0:f4:0e:b4:2d:c1:32:2a:a3:8a:18:84:62:5a:b2:68:
46:a0:69:73:31:5f:7b:af:5f:0e:4f:6f:ec:8b:ee:17:98:19:
1e:07:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:43:35 2025 by rpki-client