Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/julraPqS2QSJ2CA0Adqt_PgJx0U.roa
File: julraPqS2QSJ2CA0Adqt_PgJx0U.roa (raw, json)
Hash identifier: NxlNqXL0wqzFcIItDSgkJqkpdEhcleIRL/5cK6P63CI=
Subject key identifier: 8E:E9:6B:68:FA:92:D9:04:89:D8:20:34:01:DA:AD:FC:F8:09:C7:45
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019661A69B9B53D42AE9B7C422E7A7A6CC51
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/julraPqS2QSJ2CA0Adqt_PgJx0U.roa
Signing time: Wed 23 Apr 2025 07:57:10 +0000
ROA not before: Wed 23 Apr 2025 07:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.3.96.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
37.34.48.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
79.170.88.0/21 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.246.207.0/24 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/19 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/17 maxlen: 24
85.10.160.0/19 maxlen: 24
85.10.172.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
85.222.224.0/21 maxlen: 24
89.31.96.0/21 maxlen: 24
91.142.240.0/20 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
91.216.162.0/24 maxlen: 24
93.191.128.0/21 maxlen: 24
94.142.208.0/21 maxlen: 24
141.138.192.0/20 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
171.33.128.0/24 maxlen: 24
176.74.224.0/19 maxlen: 24
178.18.80.0/20 maxlen: 24
185.3.208.0/22 maxlen: 24
185.15.248.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.173.0/24 maxlen: 24
185.110.200.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.138.204.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2001:4cb8:e::/48 maxlen: 48
2001:4cb8:40b::/48 maxlen: 48
2a00:c080::/32 maxlen: 48
2a02:348::/32 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:a6:9b:9b:53:d4:2a:e9:b7:c4:22:e7:a7:a6:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 23 07:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee96b68fa92d90489d8203401daadfcf809c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:76:14:79:7d:ee:56:12:36:c4:cc:9b:eb:
7e:3d:26:c8:d5:a8:b8:b0:e1:0e:29:26:32:c6:ad:
9e:c1:12:e6:7e:44:2e:28:9c:32:e9:ba:2b:9a:60:
1b:9c:46:4b:42:2a:77:6f:7b:96:ed:bc:95:05:e0:
8e:55:f1:4e:06:2a:51:69:32:e2:37:10:42:cf:02:
25:d6:43:76:eb:5e:42:8e:a4:97:fd:e4:49:f1:7d:
e5:a6:56:d0:04:a2:2b:67:2a:bb:b9:81:bc:ff:34:
84:e0:17:f2:65:e1:89:ec:fe:3c:2d:8c:7a:46:c4:
9b:56:b7:24:8c:ec:7d:58:10:6e:3c:8e:3b:0f:9c:
b5:06:c4:15:40:da:89:dc:58:ff:97:7b:8e:90:a5:
5e:ee:6b:9a:52:e7:4b:4d:b6:07:22:f5:e7:ac:f5:
7e:96:ae:d7:46:e4:51:27:61:17:e9:cb:06:7a:fe:
ee:41:8a:94:1f:71:6e:c2:62:f7:d4:48:b7:0f:d1:
c3:11:8a:74:9d:b3:8f:aa:5e:58:09:d4:b6:f8:15:
2e:ea:db:cb:af:6d:6b:66:71:ee:c3:1d:33:d9:af:
83:55:2f:90:7d:68:45:97:db:ed:ca:61:12:54:e8:
80:a8:42:8a:f9:a0:aa:2c:98:38:4d:54:25:70:58:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:6B:68:FA:92:D9:04:89:D8:20:34:01:DA:AD:FC:F8:09:C7:45
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/julraPqS2QSJ2CA0Adqt_PgJx0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.3.96.0/21
31.223.160.0/20
37.17.208.0/20
37.34.48.0/21
37.230.96.0/21
46.226.56.0/21
78.108.128.0/20
79.170.88.0/21
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
85.10.160.0/19
85.158.248.0-85.158.253.255
85.222.224.0/21
89.31.96.0/21
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.191.128.0/21
94.142.208.0/21
141.138.192.0/20
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.15.248.0/22
185.21.188.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
185.110.172.0/22
185.110.200.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a02:348::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
23:8d:d7:46:d6:61:9f:c7:0d:62:40:8e:f6:31:99:80:27:62:
82:37:c1:24:26:f5:32:a7:f9:ee:f8:fe:1c:3d:cd:83:55:18:
7c:87:b1:9b:70:9a:05:f7:65:0f:d2:36:9d:c3:d9:0e:ac:b4:
69:b3:26:0d:c7:3c:24:7a:45:15:79:f7:c8:69:1d:28:d9:24:
50:45:45:91:97:9a:3c:41:60:1a:6c:da:5d:1d:0a:46:aa:52:
40:88:63:ba:50:27:33:0b:7d:59:ed:34:b0:34:9b:22:f2:6d:
00:e1:29:11:73:81:7c:17:dc:a4:4c:b3:64:ce:3c:c2:1f:9f:
16:51:3c:74:6f:70:f0:99:53:2f:a9:8c:af:b3:f5:d3:be:52:
a5:74:53:d7:01:3a:50:65:e0:ec:d4:e6:7e:f7:c9:52:11:c5:
c0:67:a1:26:13:f5:9e:85:95:5e:6a:0b:93:ec:da:cc:b4:b7:
bb:7b:46:e6:38:a0:9b:51:76:d1:64:d6:2c:8b:77:b0:f2:4a:
79:ac:a8:35:1d:c2:2e:cb:4c:4d:c6:3b:b2:ea:9e:de:08:b8:
0d:53:77:b9:62:78:b6:86:f8:e4:78:6f:d8:5b:d0:11:ae:b5:
9a:24:ec:c5:74:e8:3c:32:a0:9c:90:db:36:4a:96:ef:71:0f:
4d:cb:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:00:09 2025 by rpki-client