Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WEltOQfN_w0N1OPxkhOX4yIHLXg.roa
File: WEltOQfN_w0N1OPxkhOX4yIHLXg.roa (raw, json)
Hash identifier: xT6xW5tJACwsDtNPZmdKb6qLgOfCmE6l22HcpnD+Ttg=
Subject key identifier: 58:49:6D:39:07:CD:FF:0D:0D:D4:E3:F1:92:13:97:E3:22:07:2D:78
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220176A53F7867CC86B919DC9217B48
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WEltOQfN_w0N1OPxkhOX4yIHLXg.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/24 maxlen: 24
45.143.55.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/24 maxlen: 24
84.247.27.0/24 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/24 maxlen: 24
89.39.165.0/24 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/24 maxlen: 24
94.103.251.0/24 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:6a:53:f7:86:7c:c8:6b:91:9d:c9:21:7b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58496d3907cdff0d0dd4e3f1921397e322072d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:f6:f3:49:2e:9e:a7:e0:19:7f:44:be:30:
5f:05:c4:c2:52:46:4b:79:92:cc:34:f9:86:49:22:
10:f4:b3:a0:c0:e0:2a:a0:b8:3a:d7:07:5a:2a:bf:
1e:d1:8e:13:ab:14:cf:a7:1d:a2:18:14:17:db:3b:
b8:f4:fa:6e:02:f7:7c:b9:1a:91:ef:97:f3:9c:66:
bc:e6:4d:0a:89:e3:41:7b:0b:fa:4a:0e:d9:a4:0a:
88:d8:9f:0b:32:18:83:a8:b2:11:81:e8:30:15:ef:
f2:c7:ea:67:86:7a:7c:4f:46:12:0f:b0:37:91:96:
25:4a:00:65:79:03:4f:f3:a3:a5:3c:09:9e:64:10:
2c:d5:13:8a:4c:ee:2d:68:87:1c:4a:60:97:95:87:
dd:35:e9:77:a3:9b:18:90:b0:3b:8d:d9:c7:fb:56:
22:bf:48:c9:fa:0e:08:f2:f9:bc:ca:ba:0c:3d:f5:
9e:42:b6:de:02:0c:58:93:ff:a1:be:57:08:27:24:
13:5c:45:e4:b5:ed:12:be:84:2f:37:c6:22:ab:5b:
54:df:5c:e8:f7:b4:3b:98:f7:a9:d5:58:0d:82:90:
d3:8b:06:a5:9c:85:d3:a0:19:a0:78:f5:24:af:ca:
f3:6d:c1:a7:d6:92:2c:a2:b6:54:09:75:e4:dd:b8:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:6D:39:07:CD:FF:0D:0D:D4:E3:F1:92:13:97:E3:22:07:2D:78
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WEltOQfN_w0N1OPxkhOX4yIHLXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.150.0/24
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/24
45.143.55.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/24
84.247.27.0/24
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0/24
89.39.165.0/24
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/24
94.103.251.0/24
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0/23
185.192.18.0/23
185.205.188.0/24
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/24
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
27:c5:55:d9:29:a2:e4:11:df:73:f9:40:a5:67:a8:de:13:ea:
6f:27:b5:9e:24:6b:6a:23:34:26:30:c0:23:34:27:54:e6:b4:
e8:af:5a:51:05:35:50:b9:ad:95:7d:81:ea:58:fe:6a:be:7a:
63:67:88:56:f0:38:e8:fe:7e:17:bc:87:38:62:90:66:b6:a5:
54:b8:59:6b:1d:c8:99:12:f5:36:bf:94:9d:2d:18:a0:8a:02:
1b:9e:cf:d3:46:6a:67:ef:08:ae:aa:47:02:d0:e1:a5:56:e9:
be:c1:f2:ff:22:99:34:16:02:f6:5c:2d:5c:ed:86:0a:7a:22:
60:57:34:19:8e:5c:57:b9:93:93:af:7e:3d:1b:6f:21:12:fe:
ac:3c:ae:ae:c4:22:00:ff:2f:8c:7a:e1:ad:8e:2b:a9:79:9e:
2a:54:d2:2c:5f:92:64:13:d3:05:dc:0b:5c:16:67:78:27:55:
81:03:ce:5f:4f:fa:6c:21:53:61:fb:85:4e:2b:84:41:83:16:
ed:8e:ff:d7:45:c4:d8:7f:18:88:35:4a:16:d5:ed:48:29:cd:
9d:bd:db:d9:71:84:79:2b:c0:7a:84:2a:52:19:4f:ac:5a:a4:
32:ce:64:1a:1b:c8:e3:bf:b2:39:d4:87:61:59:3c:f2:f9:ee:
ca:04:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:33:08 2025 by rpki-client