Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/eVJksg_tZC1gqJ4CxgC15n-SEdQ.roa
File: eVJksg_tZC1gqJ4CxgC15n-SEdQ.roa (raw, json)
Hash identifier: btGXQHg2mYfMjcjWbTYHZ2mr0/LxHLYRT3vdfCLuDdg=
Subject key identifier: 79:52:64:B2:0F:ED:64:2D:60:A8:9E:02:C6:00:B5:E6:7F:92:11:D4
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0197304F077E206D85ECB7FE30830AA9A379
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/eVJksg_tZC1gqJ4CxgC15n-SEdQ.roa
Signing time: Mon 02 Jun 2025 11:02:54 +0000
ROA not before: Mon 02 Jun 2025 11:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.251.0/24 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.191.80.0/21 maxlen: 21
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:b280::/32 maxlen: 32
2a00:c780::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:d780::/32 maxlen: 32
2a00:e080::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
2a04:807:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:4f:07:7e:20:6d:85:ec:b7:fe:30:83:0a:a9:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jun 2 11:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795264b20fed642d60a89e02c600b5e67f9211d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:b2:83:14:ec:fc:85:9e:de:b2:d1:5f:c3:
05:fb:4a:e4:53:54:c4:0a:15:94:14:3c:c2:79:71:
a3:a2:ba:e1:94:fa:e1:0e:3d:19:53:c7:25:2e:58:
72:1f:bf:b1:2a:40:67:d9:25:46:24:08:96:4e:50:
0f:c2:97:d6:a8:ee:11:00:24:e4:81:12:b4:2f:5e:
5e:0a:19:cd:30:f1:56:b6:4a:3d:e2:d5:af:32:89:
ad:0b:df:51:aa:31:9c:ff:17:ab:8d:96:f0:b6:6a:
11:61:a6:76:a7:e6:de:30:80:d0:74:76:b1:52:18:
8f:cf:a1:bc:9f:2b:f6:0f:37:9c:00:d1:9c:99:f4:
93:5f:03:2d:f0:ec:97:3f:91:27:73:38:7f:ce:f6:
48:5a:c3:0b:77:f1:75:4a:fd:41:ca:ce:9b:c4:e5:
63:28:81:64:b4:18:27:21:05:92:a7:d9:77:d5:a3:
2a:fc:b1:9f:37:4c:e2:ed:05:aa:64:16:d5:e4:d3:
0d:50:80:03:58:f1:81:c4:d9:2b:fa:b8:18:47:4c:
5e:db:27:18:b6:54:13:21:a6:93:bd:dc:47:c2:0f:
68:9e:84:70:48:06:d4:26:15:d0:31:d9:99:fb:38:
5c:7b:d4:5d:84:7a:1f:46:7c:c8:aa:0e:dd:b6:28:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:64:B2:0F:ED:64:2D:60:A8:9E:02:C6:00:B5:E6:7F:92:11:D4
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/eVJksg_tZC1gqJ4CxgC15n-SEdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.191.80.0/21
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:b280::/32
2a00:c780::/32
2a00:cc80::/32
2a00:d780::/32
2a00:e080::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/30
2a04:807::-2a04:807:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:82:aa:13:a1:61:e7:ee:07:93:7e:94:a8:7a:29:ee:b4:64:
d2:81:3b:2c:09:49:05:fa:d3:64:5d:b9:8b:3b:2e:97:b6:5a:
0b:ef:d6:f2:8f:bc:7b:2b:f6:70:30:62:f9:88:e4:fe:df:de:
b5:1e:d1:96:7b:f0:40:19:cc:0f:60:18:91:97:f3:26:26:e9:
67:f7:6f:d5:d6:18:56:08:6f:83:57:e9:69:62:7a:da:a4:ec:
90:c1:37:7f:da:04:37:79:b0:38:33:7c:07:55:8a:86:d3:7d:
c6:45:32:1c:88:be:c9:82:f0:62:53:c0:58:fa:5e:de:8a:24:
23:ff:2e:78:8c:91:f5:91:e7:06:43:46:d0:0d:a5:3e:04:42:
47:7c:b6:f0:3d:d7:69:21:7c:bf:ae:58:77:89:2f:ba:08:ee:
e0:f1:c4:6d:64:ec:a0:15:6a:1d:24:b8:62:a4:c5:7a:7c:e7:
36:d2:a6:7c:dd:f4:b8:70:ce:94:55:c9:21:ec:f9:fb:04:32:
72:12:79:e5:fe:52:93:28:86:6b:2b:3e:e3:28:a1:c8:94:50:
41:79:99:c0:aa:bd:98:a4:95:ec:e1:08:3a:93:b7:4c:23:d8:
d7:0d:a2:e4:01:4f:65:75:1d:69:ea:0d:2d:eb:59:04:1b:0e:
b8:6e:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:54:55 2025 by rpki-client