Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/VLqdLNwvF7oBbH11jW9SQSyf5O8.roa
File: VLqdLNwvF7oBbH11jW9SQSyf5O8.roa (raw, json)
Hash identifier: 4AJukoJVduXQDokXhBnxAlZ+C+giZ/4AyH2j0E83XQ0=
Subject key identifier: 54:BA:9D:2C:DC:2F:17:BA:01:6C:7D:75:8D:6F:52:41:2C:9F:E4:EF
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019715878ED543EEC333805B3F22CA15862B
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/VLqdLNwvF7oBbH11jW9SQSyf5O8.roa
Signing time: Wed 28 May 2025 06:14:54 +0000
ROA not before: Wed 28 May 2025 06:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 24
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:87:8e:d5:43:ee:c3:33:80:5b:3f:22:ca:15:86:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: May 28 06:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ba9d2cdc2f17ba016c7d758d6f52412c9fe4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:12:6c:29:2a:6e:95:32:bd:e5:50:6e:e1:
20:aa:d0:1a:95:63:22:91:28:bb:44:7c:d1:f0:e7:
c7:91:d7:20:c4:c0:85:32:9c:1e:53:67:60:bd:76:
69:ed:c1:07:88:f8:95:2b:41:6f:82:a6:81:04:7c:
fb:bf:25:d3:49:27:ad:ac:88:ac:50:6e:28:04:ee:
65:4e:0a:02:d3:3b:22:c6:f6:35:ed:07:b1:3c:c5:
1d:06:36:db:11:93:f7:6c:7a:fb:91:46:2c:47:4b:
9c:72:05:d6:d5:b5:f2:fa:15:61:03:60:28:eb:cd:
56:69:e9:dc:9b:7d:a9:d1:31:bf:ea:51:7d:db:82:
dd:23:ff:bb:f4:ac:1b:6f:ba:7c:e9:e3:9f:fc:be:
8c:5e:d2:3a:c1:aa:df:85:44:a7:c3:31:54:78:30:
66:27:af:70:07:62:0e:26:09:9d:49:25:33:96:b5:
be:af:17:f3:37:8f:05:e1:f2:5f:bd:71:3b:87:43:
7d:43:b9:f9:06:e5:6f:cc:e7:c8:b3:9e:b6:9a:ec:
f3:eb:bc:a3:d0:83:da:c5:23:cd:18:5a:c3:40:7d:
b7:48:cf:a8:01:91:8d:fe:1e:0d:fb:74:10:cc:fd:
02:dd:fb:63:4e:7a:5e:f0:62:c8:9a:a0:b0:cc:16:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:9D:2C:DC:2F:17:BA:01:6C:7D:75:8D:6F:52:41:2C:9F:E4:EF
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/VLqdLNwvF7oBbH11jW9SQSyf5O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
c8:a1:aa:76:c4:18:14:03:3c:e6:76:71:85:1d:67:8d:98:94:
a5:76:3d:79:71:96:44:62:72:f2:44:ae:84:62:ac:ad:6c:fa:
b8:2d:33:30:2b:01:65:0a:df:d3:5d:39:36:2e:b9:bb:8c:ea:
70:37:a0:22:08:e8:76:7c:63:c3:f1:81:08:7e:f6:0b:75:77:
92:29:7c:f5:be:03:23:11:12:81:c5:6f:d9:20:e7:f5:04:0f:
ee:67:2c:62:76:8b:e2:8f:f9:a7:b4:8d:2a:7f:1c:e6:7e:a0:
4f:1d:33:92:f3:18:ad:ad:c2:e5:1a:ab:d0:49:46:05:6f:92:
73:c0:e8:cf:69:1c:28:ab:bb:72:d2:57:b4:ff:f6:8b:ec:8b:
0c:66:78:bb:8a:18:71:46:c4:41:e4:b9:b5:f9:4b:be:1f:c8:
07:ea:0c:e1:d1:4b:45:94:26:72:97:b9:2e:0f:19:28:71:1a:
04:ff:ab:53:06:21:39:72:55:7c:00:e5:f5:16:c6:6f:45:b2:
d9:c6:8d:23:95:61:2d:da:99:eb:f2:33:19:bc:2c:6a:ed:bf:
d6:38:66:6a:eb:1b:8d:42:0d:ea:34:73:6d:44:62:e4:65:66:
35:d8:b2:54:e8:9a:86:e8:f0:ca:f1:32:3e:27:29:1f:7b:b6:
37:81:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:23 2025 by rpki-client