Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/AexviFEHCwsMaKckFw_8LEgwxjw.roa
File: AexviFEHCwsMaKckFw_8LEgwxjw.roa (raw, json)
Hash identifier: bQ67nxIurGAbRX3Gwq2JaPVeHNuDL7mTk6j3XTcJFzA=
Subject key identifier: 01:EC:6F:88:51:07:0B:0B:0C:68:A7:24:17:0F:FC:2C:48:30:C6:3C
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019716C195628C71A5C96E75ACEE1485A0DD
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/AexviFEHCwsMaKckFw_8LEgwxjw.roa
Signing time: Wed 28 May 2025 11:57:54 +0000
ROA not before: Wed 28 May 2025 11:57:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.22.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.184.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
216.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:c1:95:62:8c:71:a5:c9:6e:75:ac:ee:14:85:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: May 28 11:57:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01ec6f8851070b0b0c68a724170ffc2c4830c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:91:1c:e2:ae:b5:17:fb:9a:64:45:5b:e5:
d6:64:69:86:5d:d0:8e:b1:5b:55:1f:41:39:de:74:
c4:7f:d0:32:1f:b9:bb:9c:e0:a9:87:f6:31:92:88:
5e:48:78:9f:81:12:da:45:4f:c2:3b:55:80:1e:43:
c3:58:25:a6:9a:50:be:35:77:66:95:ad:4a:28:6d:
ee:3b:9d:f1:5c:92:df:4c:2f:ba:8b:10:40:85:b3:
06:aa:12:d1:dd:62:91:da:f4:f3:f1:05:3f:4a:09:
6f:57:85:2a:03:0e:dc:35:0e:dc:60:b5:c6:f9:75:
7a:83:69:60:20:0d:2e:94:90:ac:83:a4:63:fb:eb:
b2:35:ef:a0:7d:b4:bb:5e:99:14:b6:e1:bb:48:76:
21:90:5a:0f:f2:51:05:7d:83:8c:0a:f2:3e:87:ab:
8b:8a:a8:55:73:34:9a:fb:09:f8:5b:12:5d:b8:33:
41:a9:71:9f:5c:c7:87:9f:01:3e:06:df:58:c4:fc:
d0:ee:2e:b3:5d:e4:d6:40:2b:09:49:8e:89:f8:ea:
53:ed:f3:16:73:5c:1e:a6:49:31:28:28:71:79:02:
1f:75:5f:54:f7:3a:be:a0:97:9b:1f:76:e6:d1:c3:
ff:93:1d:26:08:b7:ec:84:89:11:c5:7f:b8:ba:1c:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:6F:88:51:07:0B:0B:0C:68:A7:24:17:0F:FC:2C:48:30:C6:3C
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/AexviFEHCwsMaKckFw_8LEgwxjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.31.255
185.114.120.0/22
209.206.0.0/19
216.252.177.0-216.252.180.255
216.252.182.0-216.252.187.255
216.252.189.0-216.252.191.255
Signature Algorithm: sha256WithRSAEncryption
b2:c2:45:71:7b:1d:cc:07:55:0c:96:e0:a3:5a:d8:9e:d8:61:
08:88:ed:6a:80:e2:23:f4:02:bd:22:06:f3:3a:00:88:a6:55:
d8:dd:c8:47:85:26:97:d3:3d:ef:38:38:6c:ed:01:9f:97:89:
64:3b:db:26:d8:2d:a7:27:2c:60:6b:f9:4c:9f:0b:23:ff:2c:
68:1f:39:be:a3:ee:e3:e3:94:15:c6:8b:43:f6:53:7b:16:02:
f6:84:30:17:d2:12:4a:cd:37:9e:41:f9:b5:60:c1:4b:3b:16:
f4:8d:ab:b1:c9:6a:74:d1:3b:cb:b9:bb:81:45:68:0f:4f:76:
15:53:b2:dc:60:b4:b0:6f:8e:b5:4e:f4:bd:d1:a8:8b:05:28:
61:c5:4c:f7:31:76:76:6b:48:18:e7:70:55:c9:78:b7:61:93:
ce:65:87:5c:c1:d1:63:89:a3:8f:89:b2:a6:e9:1f:11:4a:f1:
50:60:18:ec:da:d1:01:7a:bf:9f:d7:37:89:fb:60:b4:a6:3a:
26:a0:3a:02:1b:4e:d6:f3:98:6e:a1:7b:c1:8f:d1:ca:95:53:
9b:ac:67:53:55:01:d8:f3:2d:47:5b:72:8f:6b:e3:3c:89:9d:
7b:e1:52:75:be:a6:3d:25:32:07:10:8d:a4:5e:84:52:bd:d0:
9f:ca:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:01 2025 by rpki-client