Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/bHL_tTznnHPbHP4F0hJKIReYm6M.roa
File: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (raw, json)
Hash identifier: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=
Subject key identifier: 6C:72:FF:B5:3C:E7:9C:73:DB:1C:FE:05:D2:12:4A:21:17:98:9B:A3
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 0195F5209CE3246F7D51871C7F6695FFA022
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/bHL_tTznnHPbHP4F0hJKIReYm6M.roa
Signing time: Wed 02 Apr 2025 06:11:50 +0000
ROA not before: Wed 02 Apr 2025 06:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.198.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
185.90.104.0/22 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:30::/48 maxlen: 48
2a02:b60:31::/48 maxlen: 48
2a02:b60:32::/48 maxlen: 48
2a02:b60:33::/48 maxlen: 48
2a02:b60:34::/48 maxlen: 48
2a02:b60:35::/48 maxlen: 48
2a02:b60:36::/48 maxlen: 48
2a02:b60:37::/48 maxlen: 48
2a02:b60:38::/48 maxlen: 48
2a02:b60:39::/48 maxlen: 48
2a02:b60:3a::/48 maxlen: 48
2a02:b60:3b::/48 maxlen: 48
2a02:b60:3c::/48 maxlen: 48
2a02:b60:3d::/48 maxlen: 48
2a02:b60:3e::/48 maxlen: 48
2a02:b60:3f::/48 maxlen: 48
2a02:b60:40::/48 maxlen: 48
2a02:b60:41::/48 maxlen: 48
2a02:b60:42::/48 maxlen: 48
2a02:b60:43::/48 maxlen: 48
2a02:b60:44::/48 maxlen: 48
2a02:b60:45::/48 maxlen: 48
2a02:b60:46::/48 maxlen: 48
2a02:b60:47::/48 maxlen: 48
2a02:b60:48::/48 maxlen: 48
2a02:b60:49::/48 maxlen: 48
2a02:b60:4a::/48 maxlen: 48
2a02:b60:4b::/48 maxlen: 48
2a02:b60:4c::/48 maxlen: 48
2a02:b60:4d::/48 maxlen: 48
2a02:b60:4e::/48 maxlen: 48
2a02:b60:4f::/48 maxlen: 48
2a02:b60:50::/48 maxlen: 48
2a02:b60:51::/48 maxlen: 48
2a02:b60:52::/48 maxlen: 48
2a02:b60:53::/48 maxlen: 48
2a02:b60:54::/48 maxlen: 48
2a02:b60:55::/48 maxlen: 48
2a02:b60:56::/48 maxlen: 48
2a02:b60:57::/48 maxlen: 48
2a02:b60:58::/48 maxlen: 48
2a02:b60:59::/48 maxlen: 48
2a02:b60:5a::/48 maxlen: 48
2a02:b60:5b::/48 maxlen: 48
2a02:b60:5c::/48 maxlen: 48
2a02:b60:5d::/48 maxlen: 48
2a02:b60:5e::/48 maxlen: 48
2a02:b60:5f::/48 maxlen: 48
2a02:b60:60::/48 maxlen: 48
2a02:b60:61::/48 maxlen: 48
2a02:b60:62::/48 maxlen: 48
2a02:b60:63::/48 maxlen: 48
2a02:b60:64::/48 maxlen: 48
2a02:b60:65::/48 maxlen: 48
2a02:b60:66::/48 maxlen: 48
2a02:b60:67::/48 maxlen: 48
2a02:b60:68::/48 maxlen: 48
2a02:b60:69::/48 maxlen: 48
2a02:b60:6a::/48 maxlen: 48
2a02:b60:6b::/48 maxlen: 48
2a02:b60:6c::/48 maxlen: 48
2a02:b60:6d::/48 maxlen: 48
2a02:b60:6e::/48 maxlen: 48
2a02:b60:6f::/48 maxlen: 48
2a02:b60:70::/48 maxlen: 48
2a02:b60:71::/48 maxlen: 48
2a02:b60:72::/48 maxlen: 48
2a02:b60:73::/48 maxlen: 48
2a02:b60:74::/48 maxlen: 48
2a02:b60:75::/48 maxlen: 48
2a02:b60:76::/48 maxlen: 48
2a02:b60:77::/48 maxlen: 48
2a02:b60:78::/48 maxlen: 48
2a02:b60:79::/48 maxlen: 48
2a02:b60:7a::/48 maxlen: 48
2a02:b60:7b::/48 maxlen: 48
2a02:b60:7c::/48 maxlen: 48
2a02:b60:7d::/48 maxlen: 48
2a02:b60:7e::/48 maxlen: 48
2a02:b60:7f::/48 maxlen: 48
2a02:b60:80::/48 maxlen: 48
2a02:b60:81::/48 maxlen: 48
2a02:b60:82::/48 maxlen: 48
2a02:b60:83::/48 maxlen: 48
2a02:b60:84::/48 maxlen: 48
2a02:b60:85::/48 maxlen: 48
2a02:b60:86::/48 maxlen: 48
2a02:b60:87::/48 maxlen: 48
2a02:b60:88::/48 maxlen: 48
2a02:b60:89::/48 maxlen: 48
2a02:b60:8a::/48 maxlen: 48
2a02:b60:8b::/48 maxlen: 48
2a02:b60:8c::/48 maxlen: 48
2a02:b60:8d::/48 maxlen: 48
2a02:b60:8e::/48 maxlen: 48
2a02:b60:8f::/48 maxlen: 48
2a02:b60:90::/48 maxlen: 48
2a02:b60:91::/48 maxlen: 48
2a02:b60:92::/48 maxlen: 48
2a02:b60:93::/48 maxlen: 48
2a02:b60:94::/48 maxlen: 48
2a02:b60:95::/48 maxlen: 48
2a02:b60:96::/48 maxlen: 48
2a02:b60:97::/48 maxlen: 48
2a02:b60:98::/48 maxlen: 48
2a02:b60:99::/48 maxlen: 48
2a02:b60:9a::/48 maxlen: 48
2a02:b60:9b::/48 maxlen: 48
2a02:b60:9c::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:20:9c:e3:24:6f:7d:51:87:1c:7f:66:95:ff:a0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Apr 2 06:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c72ffb53ce79c73db1cfe05d2124a2117989ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:a9:c8:6f:67:0b:62:22:f4:8d:9e:34:d5:
60:0c:ab:36:cb:06:5b:47:4f:5e:9e:42:22:76:71:
03:0a:0d:10:50:41:55:10:92:6c:00:8f:b3:b8:c8:
df:fb:ca:d0:b8:65:74:46:63:ad:d0:02:49:c8:0c:
29:5f:95:fb:c1:ed:51:7d:ef:ae:42:2b:6e:3e:6b:
d9:dd:f9:d2:b0:63:72:0c:38:60:91:f5:72:b5:c1:
5a:0a:14:fb:00:ca:b3:47:b4:0c:2f:6f:17:e4:2f:
02:31:ad:65:d7:cc:18:3f:e8:49:99:29:27:17:a1:
b5:e4:dd:97:38:31:31:fe:35:ae:91:21:a3:ed:ba:
9d:6f:28:fd:4e:74:4c:c4:dc:00:fe:f8:2b:5a:a9:
7d:05:42:2a:54:29:57:50:68:67:f2:79:f2:03:41:
84:c3:54:a6:d4:e2:01:5b:bd:b3:af:6e:35:59:5a:
82:38:a9:69:74:25:49:55:f7:8b:ff:63:8d:b5:dd:
e8:75:19:00:19:7c:55:4c:36:3c:f2:2f:bd:b5:36:
4f:fb:de:c2:15:2c:f9:a8:7b:e6:90:48:59:01:f4:
1a:c3:7f:8a:44:67:28:f2:90:66:55:62:7d:5f:24:
f2:4a:5f:8a:26:a6:ad:9e:e4:2f:fa:d1:41:cb:a1:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:FF:B5:3C:E7:9C:73:DB:1C:FE:05:D2:12:4A:21:17:98:9B:A3
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/bHL_tTznnHPbHP4F0hJKIReYm6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
185.90.104.0/22
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
8f:36:f0:4a:d7:74:1f:0d:70:68:0b:9c:55:be:7a:72:f1:69:
d4:bc:6f:94:a9:ff:0e:ec:2e:43:d6:9e:4e:aa:4a:f2:05:4b:
cc:b8:29:a2:5c:2e:2c:87:ce:c8:9d:a3:53:68:db:06:80:bc:
c2:73:20:9d:1a:9b:9b:2a:ff:30:b9:1c:f5:c1:01:a8:17:5b:
44:d5:f8:29:95:cf:61:cb:4e:4a:2b:dd:5e:9b:ed:e2:5d:c8:
96:6c:c2:00:f9:03:2b:3f:36:70:ce:2b:92:97:0b:b0:9d:ed:
02:bd:38:3e:75:fb:32:f4:7e:03:dd:6b:97:d4:81:3a:63:41:
6f:5c:4a:ea:3e:4d:11:c1:2c:56:3a:56:78:01:79:bf:dc:c0:
23:d3:17:58:c3:43:1d:93:7a:a2:54:ff:bd:69:0d:eb:35:fc:
a1:f6:86:76:83:b4:bf:0d:52:8d:6c:c6:7f:22:31:16:cd:2e:
34:61:23:56:59:83:4a:6a:ff:b2:9b:71:e5:c6:ce:96:1e:34:
b0:8f:27:22:42:4c:2a:20:a2:9e:f0:88:b4:6f:21:b8:57:f3:
bb:c5:d8:0a:e0:d4:d8:d0:a6:bb:85:7e:36:34:fc:7a:a3:46:
b9:7c:1d:e9:94:15:0f:61:61:0f:dd:6e:3f:b1:80:d8:76:44:
45:f9:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:06:26 2025 by rpki-client