Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/7fMcRpn_4NUKYhcILzNUoH1_qFA.roa
File: 7fMcRpn_4NUKYhcILzNUoH1_qFA.roa (raw, json)
Hash identifier: ynbImDmPPvdsLOmMwreWm0bsw2CgIBop1J57NfAEBV8=
Subject key identifier: ED:F3:1C:46:99:FF:E0:D5:0A:62:17:08:2F:33:54:A0:7D:7F:A8:50
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0198A7D8F2C7D76A25E4F52F88DA404581FB
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/7fMcRpn_4NUKYhcILzNUoH1_qFA.roa
Signing time: Thu 14 Aug 2025 09:11:09 +0000
ROA not before: Thu 14 Aug 2025 09:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.0.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.192.0/20 maxlen: 20
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.0.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.0.0/24 maxlen: 24
89.124.128.0/18 maxlen: 18
89.124.192.0/19 maxlen: 19
89.124.224.0/20 maxlen: 20
89.124.245.0/24 maxlen: 24
89.125.0.0/16 maxlen: 16
89.126.0.0/22 maxlen: 22
89.126.4.0/22 maxlen: 22
89.126.8.0/22 maxlen: 22
89.126.12.0/22 maxlen: 22
89.126.16.0/22 maxlen: 22
89.126.20.0/22 maxlen: 22
89.126.24.0/22 maxlen: 22
89.126.28.0/22 maxlen: 22
89.127.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
89.127.192.0/19 maxlen: 19
89.127.224.0/20 maxlen: 20
89.127.240.0/21 maxlen: 21
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:d8:f2:c7:d7:6a:25:e4:f5:2f:88:da:40:45:81:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Aug 14 09:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf31c4699ffe0d50a6217082f3354a07d7fa850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:c6:7c:58:36:a8:e4:ba:58:a0:04:c0:95:
a1:4e:49:82:24:1e:82:ba:16:ed:e8:a8:a7:46:23:
3e:4c:9d:a0:b8:af:76:11:90:fe:32:73:7a:e1:36:
79:26:ac:f0:6e:4b:a8:34:4e:f2:41:c3:ad:31:74:
9a:fc:e7:e4:02:dc:1e:ce:a6:79:87:fc:4f:84:1e:
93:c6:3c:b0:4a:e4:74:72:4f:81:9b:21:33:a5:90:
e7:26:80:fa:af:b5:8d:53:1b:b3:48:c5:af:83:f5:
04:67:7e:ac:5c:c2:de:8a:e8:21:31:4f:be:77:6d:
2d:b2:dd:b1:c0:54:4c:11:cc:ce:9a:0f:91:44:28:
1d:76:fb:47:a4:15:30:04:80:3f:16:fe:77:aa:8d:
a2:8e:de:56:c6:29:83:83:c8:4c:11:d8:bb:e4:34:
4a:c4:9e:1a:12:09:ad:95:c3:b1:3e:d2:db:fb:6e:
09:c9:6f:3d:cf:e7:ca:59:b5:a6:51:7f:ad:b5:1e:
02:62:99:d8:fd:19:c5:6e:9c:a1:0a:9e:68:eb:30:
ca:1d:e9:e9:33:8a:c5:33:20:8d:32:c8:30:cc:e3:
d3:a0:5f:de:43:40:47:b8:40:8b:b2:72:29:98:e6:
c7:bc:05:fc:8f:9a:4f:8e:43:f1:c1:b2:c8:b6:dd:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:1C:46:99:FF:E0:D5:0A:62:17:08:2F:33:54:A0:7D:7F:A8:50
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/7fMcRpn_4NUKYhcILzNUoH1_qFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.87.255
87.192.192.0/20
87.192.216.0/22
87.192.222.0/23
87.232.0.0/19
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.0.0/24
89.124.128.0-89.124.239.255
89.124.245.0/24
89.125.0.0-89.126.31.255
89.127.0.0-89.127.251.255
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
13:60:b8:52:21:b7:d2:b7:ae:bc:30:e8:d1:53:9c:3e:a5:b9:
d4:fc:f9:a4:b4:82:f2:77:40:6c:e5:62:0c:26:2d:0f:99:9c:
97:d7:8f:58:dc:c2:ba:8f:4f:07:9b:54:e5:92:c1:4a:67:4b:
b8:5c:b9:09:78:1b:00:cc:4b:81:ed:1d:77:24:ad:b8:a1:0f:
e9:d9:28:92:2d:0f:ad:39:18:b7:87:cd:8c:54:c1:29:84:42:
61:6d:bd:ca:f4:cc:90:5e:05:9a:ad:d5:58:4e:71:79:19:ed:
5a:4c:b8:0e:9e:47:e2:76:1d:1b:29:19:41:56:14:59:6e:cb:
71:ed:4d:7c:38:47:26:16:b2:6c:a9:58:fa:a9:c7:36:09:a4:
dd:cb:9c:a8:96:97:a3:67:14:d6:25:ee:5f:3e:b7:c6:96:75:
f3:f5:4c:81:90:4b:c6:57:3a:f4:9d:e9:a8:bc:d5:e7:a3:2e:
e7:b3:64:ea:b7:a4:3c:d3:1a:f7:22:71:a6:13:dd:b7:1d:c1:
1d:25:ec:9b:ad:be:72:f3:44:e0:a2:e0:3e:dd:5b:48:95:69:
f2:9c:1b:4c:7c:b8:e5:01:b6:ed:f9:ee:a0:a0:fb:b5:91:31:
3e:c7:77:ec:f0:35:86:8f:e1:1f:42:13:ef:82:01:8b:1e:8c:
f7:d1:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:23:18 2025 by rpki-client