Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa
File: 53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa (raw, json)
Hash identifier: hcmIxv0Tq4ILIXkoyytgzjVrkSlA1EbanTY+o8bnAF0=
Subject key identifier: E7:74:82:CB:E0:52:E8:13:D6:50:F5:8B:A3:A6:70:A3:BC:D8:8F:B5
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0198EB59877A1E12F74BF7A6CF1F549AEE66
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa
Signing time: Wed 27 Aug 2025 11:46:09 +0000
ROA not before: Wed 27 Aug 2025 11:46:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2.59.8.0/23 maxlen: 32
2.59.14.0/24 maxlen: 32
5.42.198.0/24 maxlen: 32
31.42.112.0/22 maxlen: 32
31.210.18.0/24 maxlen: 32
37.77.144.0/24 maxlen: 32
45.78.80.0/22 maxlen: 32
45.84.92.0/22 maxlen: 32
45.94.244.0/22 maxlen: 32
45.95.48.0/22 maxlen: 32
45.116.168.0/22 maxlen: 32
45.138.232.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
46.28.192.0/21 maxlen: 32
58.97.128.0/21 maxlen: 32
58.97.232.0/21 maxlen: 32
58.97.240.0/20 maxlen: 32
62.3.29.0/24 maxlen: 32
62.68.91.0/24 maxlen: 32
62.106.92.0/24 maxlen: 32
69.94.10.0/23 maxlen: 32
69.94.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
78.24.206.0/24 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
78.138.25.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
82.97.199.0/24 maxlen: 32
83.229.76.0/22 maxlen: 24
83.229.104.0/22 maxlen: 32
84.39.224.0/21 maxlen: 32
85.89.192.0/21 maxlen: 32
85.89.200.0/21 maxlen: 32
85.89.208.0/21 maxlen: 32
85.89.216.0/21 maxlen: 32
86.104.19.0/24 maxlen: 32
89.19.40.0/22 maxlen: 32
89.19.42.0/23 maxlen: 24
89.34.78.0/23 maxlen: 32
89.38.132.0/23 maxlen: 32
89.44.213.0/24 maxlen: 32
89.46.152.0/21 maxlen: 32
89.249.51.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
91.201.107.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
92.43.84.0/22 maxlen: 32
92.118.108.0/24 maxlen: 32
93.113.124.0/23 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.10.0/24 maxlen: 24
93.114.11.0/24 maxlen: 24
93.115.12.0/23 maxlen: 32
93.180.192.0/20 maxlen: 32
93.180.224.0/20 maxlen: 32
94.176.112.0/20 maxlen: 32
94.177.56.0/23 maxlen: 32
95.215.36.0/22 maxlen: 32
103.63.224.0/22 maxlen: 32
103.113.225.0/24 maxlen: 32
103.113.226.0/24 maxlen: 32
103.113.227.0/24 maxlen: 32
103.218.253.0/24 maxlen: 32
103.218.254.0/24 maxlen: 32
104.167.22.0/23 maxlen: 32
119.13.192.0/19 maxlen: 32
119.13.208.0/20 maxlen: 32
121.91.80.0/21 maxlen: 32
138.124.144.0/22 maxlen: 32
150.129.92.0/22 maxlen: 32
176.117.84.0/22 maxlen: 32
176.118.195.0/24 maxlen: 32
176.119.8.0/21 maxlen: 32
178.251.236.0/24 maxlen: 32
178.251.237.0/24 maxlen: 32
185.38.102.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
185.131.220.0/24 maxlen: 32
185.131.221.0/24 maxlen: 32
185.223.56.0/24 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.254.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
188.95.152.0/21 maxlen: 32
188.119.116.0/22 maxlen: 32
193.163.101.0/24 maxlen: 32
193.169.175.0/24 maxlen: 32
193.203.36.0/24 maxlen: 32
193.203.39.0/24 maxlen: 32
193.203.127.0/24 maxlen: 32
194.145.118.0/24 maxlen: 32
194.145.220.0/23 maxlen: 32
194.187.50.0/23 maxlen: 32
194.242.23.0/24 maxlen: 32
195.14.98.0/24 maxlen: 32
202.81.208.0/22 maxlen: 32
202.81.212.0/22 maxlen: 32
202.81.216.0/22 maxlen: 32
202.81.220.0/23 maxlen: 32
202.81.222.0/23 maxlen: 32
202.181.20.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
203.166.156.0/23 maxlen: 32
209.20.160.0/19 maxlen: 32
212.21.102.0/24 maxlen: 32
212.46.128.0/24 maxlen: 32
212.46.133.0/24 maxlen: 32
212.46.138.0/24 maxlen: 32
212.46.142.0/23 maxlen: 32
212.46.145.0/24 maxlen: 32
212.46.149.0/24 maxlen: 32
212.46.159.0/24 maxlen: 32
217.197.103.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:59:87:7a:1e:12:f7:4b:f7:a6:cf:1f:54:9a:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Aug 27 11:46:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e77482cbe052e813d650f58ba3a670a3bcd88fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:f6:7d:4e:03:56:b6:ac:bf:a1:6a:82:3b:
be:20:63:51:d5:f2:fa:94:70:b1:e4:6e:bb:91:78:
4e:d4:96:fd:aa:3d:14:34:87:cb:eb:97:f1:54:82:
6a:12:c3:6d:e0:bc:9d:b1:4e:a0:b2:a9:90:84:13:
ae:d8:43:b8:14:83:e2:b4:e3:77:87:d2:78:db:be:
c8:9e:dd:f3:d2:fc:ec:f9:24:83:e4:e4:ec:ca:cd:
03:d9:5b:19:fb:c5:73:67:7a:4b:e3:31:6b:1d:2e:
9c:74:7b:ba:5b:32:0c:cc:50:ca:cb:ec:22:12:8b:
bc:79:a5:88:f8:4f:2c:6d:ad:6d:42:db:0b:18:44:
97:70:86:5e:8f:30:9c:30:46:82:0a:14:ac:2f:61:
14:08:93:28:63:5e:a8:90:dc:35:44:5d:d1:40:1d:
38:10:dd:f2:55:c0:df:bf:69:84:12:b4:b4:00:d4:
bf:a3:8b:6d:db:53:34:b7:2b:c4:24:01:95:d1:ef:
7e:20:3f:82:7b:d2:3f:b5:20:24:95:5d:d8:56:09:
16:83:b7:f8:5a:a1:83:a1:6b:b0:3c:a0:17:f3:ec:
5d:99:d3:2f:f4:de:72:d0:03:37:34:6f:4b:a7:ac:
be:f5:03:d1:5f:06:28:4d:21:5c:c2:4a:55:d7:2d:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:82:CB:E0:52:E8:13:D6:50:F5:8B:A3:A6:70:A3:BC:D8:8F:B5
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.8.0/23
2.59.14.0/24
5.42.198.0/24
31.42.112.0/22
31.210.18.0/24
37.77.144.0/24
45.78.80.0/22
45.84.92.0/22
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
46.28.192.0/21
58.97.128.0/21
58.97.232.0-58.97.255.255
62.3.29.0/24
62.68.91.0/24
62.106.92.0/24
69.94.10.0-69.94.13.255
77.81.104.0/21
78.24.206.0/24
78.138.1.0-78.138.2.255
78.138.25.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
82.97.199.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
85.89.192.0/19
86.104.19.0/24
89.19.40.0/22
89.34.78.0/23
89.38.132.0/23
89.44.213.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.197.252.0/22
91.201.107.0/24
91.245.235.0/24
92.43.84.0/22
92.118.108.0/24
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
93.180.192.0/20
93.180.224.0/20
94.176.112.0/20
94.177.56.0/23
95.215.36.0/22
103.63.224.0/22
103.113.225.0-103.113.227.255
103.218.253.0-103.218.254.255
104.167.22.0/23
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.117.84.0/22
176.118.195.0/24
176.119.8.0/21
178.251.236.0/23
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/23
185.223.56.0/24
185.240.252.0/24
185.240.254.0/23
188.95.152.0/21
188.119.116.0/22
193.163.101.0/24
193.169.175.0/24
193.203.36.0/24
193.203.39.0/24
193.203.127.0/24
194.145.118.0/24
194.145.220.0/23
194.187.50.0/23
194.242.23.0/24
195.14.98.0/24
202.81.208.0/20
202.181.20.0/22
203.109.52.0/22
203.166.156.0/23
209.20.160.0/19
212.21.102.0/24
212.46.128.0/24
212.46.133.0/24
212.46.138.0/24
212.46.142.0/23
212.46.145.0/24
212.46.149.0/24
212.46.159.0/24
217.197.103.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7e:4a:c4:01:bf:58:a3:f1:47:22:02:57:19:ec:94:29:19:
01:77:d6:f8:5f:07:46:25:f7:51:f9:59:1a:de:51:58:82:a5:
1c:6a:1f:9e:85:7b:5d:ad:a8:30:18:f6:b4:10:48:ea:ff:af:
46:a3:8e:50:18:2f:e1:0a:33:25:5e:f9:49:20:fb:a3:ec:15:
bb:72:0a:68:9f:5f:97:c9:c9:b0:6c:65:77:e7:64:2c:ca:f2:
ab:d6:58:85:f3:9e:fd:27:5f:fd:f1:00:0e:7d:13:88:f4:04:
68:4a:33:d6:3f:0e:e7:06:4a:d9:7e:76:2f:bb:a0:b8:16:42:
e5:13:4b:b7:1a:9b:8c:3e:2e:fb:33:21:d4:58:41:eb:84:da:
ad:e7:d2:55:50:1f:81:d8:cc:7b:54:09:49:46:b1:ee:d2:0a:
18:de:d1:44:33:8d:26:7a:27:16:48:88:b9:d9:59:6d:bf:12:
bf:9c:30:57:24:02:18:d5:fb:ca:51:85:a3:da:8d:dd:82:f7:
b2:4b:00:fd:cf:01:ec:51:30:3d:ca:c6:cd:de:9f:f2:86:37:
3e:43:dd:3a:85:d5:54:6a:ba:3f:f2:44:39:06:51:f5:bf:ab:
5c:f3:12:fa:11:bf:54:f6:37:03:cf:37:16:92:08:f4:61:ab:
b5:78:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:53:44 2025 by rpki-client