Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mKq_xfX4GR_sRnKxaF_Jb4hVjPc.roa
File: mKq_xfX4GR_sRnKxaF_Jb4hVjPc.roa (raw, json)
Hash identifier: IBzPrlYvpdl22I7A6wpS6qZk+JSBkD6G1y12ddxaVGI=
Subject key identifier: 98:AA:BF:C5:F5:F8:19:1F:EC:46:72:B1:68:5F:C9:6F:88:55:8C:F7
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0195A2EE22ABB43F3B858A96D0396727B5D6
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mKq_xfX4GR_sRnKxaF_Jb4hVjPc.roa
Signing time: Mon 17 Mar 2025 07:07:50 +0000
ROA not before: Mon 17 Mar 2025 07:07:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/47 maxlen: 47
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/47 maxlen: 47
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/44 maxlen: 44
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:18::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:20::/48 maxlen: 48
2a04:7f80:21::/48 maxlen: 48
2a04:7f80:22::/48 maxlen: 48
2a04:7f80:23::/48 maxlen: 48
2a04:7f80:24::/48 maxlen: 48
2a04:7f80:25::/48 maxlen: 48
2a04:7f80:26::/48 maxlen: 48
2a04:7f80:27::/48 maxlen: 48
2a04:7f80:28::/48 maxlen: 48
2a04:7f80:29::/48 maxlen: 48
2a04:7f80:2a::/48 maxlen: 48
2a04:7f80:2b::/48 maxlen: 48
2a04:7f80:2c::/48 maxlen: 48
2a04:7f80:2d::/48 maxlen: 48
2a04:7f80:2e::/48 maxlen: 48
2a04:7f80:2f::/48 maxlen: 48
2a04:7f80:30::/44 maxlen: 44
2a04:7f80:30::/48 maxlen: 48
2a04:7f80:31::/48 maxlen: 48
2a04:7f80:32::/48 maxlen: 48
2a04:7f80:33::/48 maxlen: 48
2a04:7f80:34::/48 maxlen: 48
2a04:7f80:35::/48 maxlen: 48
2a04:7f80:36::/48 maxlen: 48
2a04:7f80:37::/48 maxlen: 48
2a04:7f80:38::/48 maxlen: 48
2a04:7f80:39::/48 maxlen: 48
2a04:7f80:3a::/48 maxlen: 48
2a04:7f80:3b::/48 maxlen: 48
2a04:7f80:3c::/48 maxlen: 48
2a04:7f80:3d::/48 maxlen: 48
2a04:7f80:3e::/48 maxlen: 48
2a04:7f80:3f::/48 maxlen: 48
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:40::/48 maxlen: 48
2a04:7f80:41::/48 maxlen: 48
2a04:7f80:42::/48 maxlen: 48
2a04:7f80:43::/48 maxlen: 48
2a04:7f80:44::/48 maxlen: 48
2a04:7f80:45::/48 maxlen: 48
2a04:7f80:46::/48 maxlen: 48
2a04:7f80:47::/48 maxlen: 48
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:48::/48 maxlen: 48
2a04:7f80:49::/48 maxlen: 48
2a04:7f80:4a::/48 maxlen: 48
2a04:7f80:4b::/48 maxlen: 48
2a04:7f80:4c::/48 maxlen: 48
2a04:7f80:4d::/48 maxlen: 48
2a04:7f80:4e::/48 maxlen: 48
2a04:7f80:4f::/48 maxlen: 48
2a04:7f80:50::/45 maxlen: 45
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/45 maxlen: 45
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:59::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:60::/44 maxlen: 44
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:1000::/40 maxlen: 40
2a04:7f80:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:ee:22:ab:b4:3f:3b:85:8a:96:d0:39:67:27:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Mar 17 07:07:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98aabfc5f5f8191fec4672b1685fc96f88558cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:28:a2:a8:7c:78:35:c5:35:e7:b4:fa:47:
d3:02:9e:31:ff:9b:85:da:68:d1:fb:99:cd:51:96:
77:08:32:8a:9d:60:a4:80:b9:d5:42:88:db:a2:86:
2a:81:b2:b8:67:fe:3f:0f:77:02:9d:39:98:8b:07:
20:66:dc:d9:de:3c:75:9b:24:63:83:e0:99:8d:43:
0d:50:31:d7:11:29:8d:a0:e4:6e:14:e1:ce:8e:d6:
87:23:95:e7:9d:0c:24:c6:12:8e:de:68:b6:6d:29:
cd:b3:17:14:39:98:b9:e0:8b:77:c7:32:3e:e7:f5:
ac:91:bb:0f:a1:09:b6:68:84:15:ec:01:90:d4:2d:
13:7c:08:e3:b3:22:2e:27:a9:d0:86:eb:09:32:6f:
b9:ea:a9:06:4e:e5:25:ed:be:2a:96:56:a9:f6:15:
7b:91:5d:45:50:3e:1f:82:e0:e9:61:6c:de:41:53:
a1:36:4b:a1:2c:57:5a:b8:7b:09:f6:06:16:5d:a6:
15:0d:4a:bb:a5:c6:27:32:62:37:90:d7:22:f4:17:
8a:8d:42:b3:25:19:de:0b:00:4f:df:c6:ee:d7:45:
d6:6b:88:b5:63:a9:05:16:cf:89:f2:c6:83:d1:4f:
77:b4:70:b0:54:06:dc:28:f0:68:16:2c:26:0a:ea:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AA:BF:C5:F5:F8:19:1F:EC:46:72:B1:68:5F:C9:6F:88:55:8C:F7
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mKq_xfX4GR_sRnKxaF_Jb4hVjPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0-37.186.37.255
37.186.39.0-37.186.55.255
37.186.58.0/23
80.76.160.0-80.76.165.255
80.76.170.0-80.76.175.255
103.14.208.0/24
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/22
212.70.102.0/24
212.70.106.0-212.70.119.255
212.70.122.0/24
212.70.125.0-212.70.127.255
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
67:2a:ce:f0:72:cb:ff:74:a3:79:3f:23:98:a0:2c:86:11:be:
28:6d:29:43:e6:03:9a:48:f8:04:00:79:7b:e0:79:6e:01:7b:
5b:a0:a8:5b:ca:20:00:6e:68:86:aa:9d:8d:84:9f:4c:a3:f8:
3d:1f:05:33:bd:99:0c:1a:32:bb:24:ce:27:3c:ce:b6:dd:4e:
fd:2f:f4:2d:52:67:18:12:98:f7:fc:58:e3:02:7c:c7:37:79:
27:60:f8:26:fc:fa:78:88:dc:67:12:00:1d:4b:6c:22:63:da:
b7:98:95:e6:29:22:0e:b2:ac:fd:d9:32:7f:5a:69:d9:68:d2:
4f:34:38:43:5e:f1:3a:f4:15:41:f9:b3:4d:cc:e7:9f:68:16:
85:73:47:71:f2:6c:5d:62:85:9d:28:e1:7f:f9:95:53:c4:ba:
46:fd:70:95:ee:17:74:40:16:ad:97:6a:4d:a1:46:6b:9d:00:
d3:12:98:bc:17:f3:65:cd:03:e7:50:61:07:bf:ad:a8:1d:ce:
a3:9e:1f:02:df:69:8a:eb:dc:20:cc:e3:36:84:1d:73:68:51:
65:2d:c0:7a:ee:a9:1e:72:c5:cf:8e:e7:20:ac:2b:f1:6f:18:
3a:58:4b:23:17:48:f6:eb:c1:db:5e:22:1f:76:5e:40:30:89:
e5:7d:9d:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:26:12 2025 by rpki-client