Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_5g1YtOrTWtfIqYpbuGBA1y7Ojc.roa
File: _5g1YtOrTWtfIqYpbuGBA1y7Ojc.roa (raw, json)
Hash identifier: wR12d6awHhfTZfbVCjCRwzbWAUVHvAvixfCi4Jroy9s=
Subject key identifier: FF:98:35:62:D3:AB:4D:6B:5F:22:A6:29:6E:E1:81:03:5C:BB:3A:37
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0196FB7D9A349EE20641AEE7A35B02672722
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_5g1YtOrTWtfIqYpbuGBA1y7Ojc.roa
Signing time: Fri 23 May 2025 04:53:54 +0000
ROA not before: Fri 23 May 2025 04:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:7d:9a:34:9e:e2:06:41:ae:e7:a3:5b:02:67:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 23 04:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff983562d3ab4d6b5f22a6296ee181035cbb3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:2e:56:2f:33:e8:b4:59:50:e9:ac:50:58:
11:04:95:83:ac:a8:b0:f5:a3:bb:64:01:c1:c2:01:
18:70:55:9b:80:93:bb:2d:3c:03:26:7c:4f:4a:a9:
c2:0f:3f:5d:2a:29:c4:9a:b4:dd:55:ee:5c:a2:ef:
59:47:50:f4:c4:9c:4c:34:26:a9:70:dd:3c:3a:3b:
4e:3c:5f:fa:51:21:2b:fc:bc:7d:59:06:55:e7:96:
87:d0:34:28:09:74:fd:0d:53:46:42:96:5d:32:a4:
a3:67:09:f3:2b:de:91:74:e0:0a:09:a6:49:63:f8:
7f:48:1a:d8:3e:9d:18:9b:f5:e9:bf:dc:81:fe:c4:
0e:bb:be:18:a7:a4:db:6b:37:9c:75:93:d4:03:c2:
48:f8:17:6b:2d:d2:d9:9b:fb:32:96:77:6b:9e:6e:
76:46:54:35:66:b1:52:8c:89:d2:f1:cc:3f:9c:24:
ad:ea:65:3c:2f:26:80:3f:8e:93:7a:bf:11:72:f5:
de:6f:ca:46:e6:83:eb:b8:04:25:b1:9e:76:50:29:
c9:8d:87:96:af:bc:fc:ab:3a:b9:8b:cd:08:74:ef:
e3:81:ed:1a:cb:1b:9f:80:44:b4:c7:5a:54:1f:c6:
82:87:31:75:60:4c:fb:44:e1:14:1a:29:d5:24:4a:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:35:62:D3:AB:4D:6B:5F:22:A6:29:6E:E1:81:03:5C:BB:3A:37
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_5g1YtOrTWtfIqYpbuGBA1y7Ojc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:cd:46:36:6c:16:d7:5e:8c:62:be:67:73:d9:6f:0b:f9:42:
ee:77:d5:33:39:de:b1:b0:16:e6:e2:7e:3d:c7:ed:76:0f:31:
fc:64:4c:b1:ca:dd:1f:1d:e1:3f:fd:21:f6:0f:dc:ac:85:43:
8f:61:a8:1e:89:a9:fe:f2:f9:b4:2a:d1:11:d5:b7:27:60:56:
73:3f:da:d2:27:b7:79:60:95:69:35:31:45:0e:31:c2:71:e5:
65:59:4d:50:f1:10:fc:17:0d:b2:a1:eb:5e:98:9c:cf:93:13:
b4:6d:21:c3:33:17:7d:60:22:65:d3:5b:4f:f4:1d:78:ba:b3:
b9:27:20:93:36:1a:ae:49:ef:59:b2:2e:da:4d:72:9b:65:5f:
4c:0b:75:a4:04:99:55:c7:e4:de:e9:b4:c9:2d:36:96:85:37:
0f:cc:3f:1d:d5:44:74:19:59:47:29:5c:89:f2:c0:26:57:e0:
2c:76:23:f7:8d:5c:1f:66:cd:a7:1f:67:b2:aa:64:26:fd:b5:
2e:c6:a8:9d:35:f9:8b:45:10:02:9b:5d:26:b3:c2:72:8c:ea:
2d:5c:aa:be:73:f1:9c:3c:ab:8c:b4:d0:5e:c3:c2:2d:fe:e8:
2d:90:df:9e:de:ea:6c:0d:a8:a6:06:55:06:e6:1e:23:6b:58:
87:a8:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:46:30 2025 by rpki-client