Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/7ZMUW-4CMsR-5NsmCET4C511LYc.roa
File: 7ZMUW-4CMsR-5NsmCET4C511LYc.roa (raw, json)
Hash identifier: flHUU3cZdn7ebvLYAZpyrnv0Wp5Ls4L3zQ1Agou/ou8=
Subject key identifier: ED:93:14:5B:EE:02:32:C4:7E:E4:DB:26:08:44:F8:0B:9D:75:2D:87
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019711D3FCA59DF61787F8636FE8191A4980
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/7ZMUW-4CMsR-5NsmCET4C511LYc.roa
Signing time: Tue 27 May 2025 12:59:54 +0000
ROA not before: Tue 27 May 2025 12:59:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
31.207.74.0/23 maxlen: 24
31.207.76.0/23 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
46.173.16.0/22 maxlen: 24
46.173.24.0/22 maxlen: 24
46.173.28.0/23 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
82.202.128.0/22 maxlen: 24
83.222.16.0/22 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
93.189.228.0/22 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
109.172.36.0/22 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.207.0.0/23 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.114.8.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:d3:fc:a5:9d:f6:17:87:f8:63:6f:e8:19:1a:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: May 27 12:59:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed93145bee0232c47ee4db260844f80b9d752d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:12:17:0c:eb:19:31:d0:91:30:85:4c:1a:
c3:45:37:bc:30:de:6b:ed:90:0f:83:ed:ec:e0:11:
50:b2:0a:2e:79:0d:08:eb:4a:d5:3f:3d:86:cb:93:
3a:17:cc:3a:3a:e2:f1:b9:7a:31:78:4e:05:86:9e:
33:b7:31:58:ab:2e:aa:d7:a4:e5:2c:c5:b2:6f:8a:
d0:71:c0:fd:4b:7b:1f:f5:62:ca:0d:ef:f2:2f:73:
04:ed:93:4a:5a:a6:84:ee:e4:8a:30:3b:86:c7:ec:
52:54:77:b4:0a:4a:f7:16:d7:5f:da:15:27:35:34:
20:2f:46:4a:22:11:37:4f:d0:36:fb:c0:35:13:b3:
b2:4b:fc:98:08:99:85:e0:4d:28:02:83:7a:35:78:
f5:43:21:37:29:a4:7b:e0:00:ee:6e:88:cb:f7:bf:
af:25:78:ad:cd:27:1a:6b:aa:4c:38:7c:27:93:30:
b9:84:9c:1f:bf:ed:ef:69:9a:b4:66:32:46:46:bd:
2b:c2:32:80:12:9f:e8:c2:77:43:8f:33:aa:f9:0f:
b9:e7:68:13:85:6e:a9:d5:26:2e:52:7a:d5:69:d6:
64:38:ca:af:3e:06:57:35:f7:3e:6b:0e:72:21:4f:
a6:de:03:00:ce:e5:04:a8:01:e9:29:01:6c:ca:9d:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:93:14:5B:EE:02:32:C4:7E:E4:DB:26:08:44:F8:0B:9D:75:2D:87
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/7ZMUW-4CMsR-5NsmCET4C511LYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
31.207.74.0-31.207.77.255
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
46.173.16.0/22
46.173.24.0-46.173.29.255
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
82.202.128.0/22
83.222.16.0/22
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
93.189.228.0/22
95.214.60.0/22
109.172.36.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.207.0.0/23
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/20
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
91:74:86:65:f9:e5:fe:be:7a:6d:43:4c:e7:9d:fe:1e:f6:75:
e7:8b:ee:d1:5c:65:2c:56:ae:d9:da:00:b8:fd:ab:ff:ed:fb:
8f:a1:40:30:2f:fb:09:c5:d2:56:30:aa:b1:ec:92:52:93:ee:
99:3b:3b:08:67:6d:76:50:8b:68:71:8f:1a:91:05:a7:96:b0:
5b:cf:ba:54:03:a2:5f:b5:67:30:c7:8f:2a:db:1a:ed:2a:c3:
04:6f:8b:29:78:07:cd:c5:ae:f2:e7:dc:59:fd:83:75:17:49:
49:80:cd:ae:3c:35:77:e7:1a:38:b6:28:46:ce:1b:9f:2b:9b:
a1:b8:00:cb:ec:dd:84:08:6d:75:35:ee:8b:26:ef:8d:a2:90:
b9:e5:23:0b:af:cd:dd:fc:11:09:08:22:1c:90:dc:5b:a4:8c:
d8:b1:38:ea:71:5b:39:2e:e1:ab:b3:e3:cc:c1:89:3e:b5:cb:
82:86:55:6d:88:31:d6:3d:d4:a5:0d:50:73:2d:e4:6f:6e:6c:
26:c2:5b:72:b8:ad:ef:4c:78:c7:6d:46:9d:ea:2d:c4:f3:cf:
57:4a:80:5e:1b:2a:3c:ab:1e:76:13:bf:fb:52:6a:6c:43:21:
f9:14:0a:fe:55:34:b6:bf:8c:82:1c:46:36:8a:22:63:72:e7:
1f:ab:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:40:54 2025 by rpki-client