Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/2H0isDyyiP2sYF4YkBkcHW9B9wM.roa
File: 2H0isDyyiP2sYF4YkBkcHW9B9wM.roa (raw, json)
Hash identifier: tAjRc5iOplxE9x/JPuoyND1T3RP58fCMWUC6wQV0GGc=
Subject key identifier: D8:7D:22:B0:3C:B2:88:FD:AC:60:5E:18:90:19:1C:1D:6F:41:F7:03
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0196D8077A62FE6692196C27494F371379A7
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/2H0isDyyiP2sYF4YkBkcHW9B9wM.roa
Signing time: Fri 16 May 2025 07:38:10 +0000
ROA not before: Fri 16 May 2025 07:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.151.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
109.69.164.0/24 maxlen: 24
109.69.165.0/24 maxlen: 24
109.69.166.0/24 maxlen: 24
109.69.167.0/24 maxlen: 24
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
2a03:8480::/33 maxlen: 33
2a03:8480:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:07:7a:62:fe:66:92:19:6c:27:49:4f:37:13:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: May 16 07:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d87d22b03cb288fdac605e1890191c1d6f41f703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:5f:13:1c:4e:db:96:77:9d:7a:f9:e6:a1:
4c:27:95:a4:52:43:34:ae:00:60:ed:1b:97:cb:b7:
61:b1:36:d6:39:33:7a:a1:3f:35:8e:db:d5:4a:2b:
b6:3d:ae:56:7a:55:09:ca:36:83:a0:69:04:93:e1:
87:ac:55:37:49:01:66:21:60:fd:0d:70:71:d6:85:
97:27:e5:93:6b:f7:6b:e2:4d:12:a3:2b:82:24:d1:
d8:c6:a3:d3:59:be:ec:02:b6:06:f3:4a:d2:34:d0:
72:87:cb:51:47:28:47:62:63:d4:ab:0f:c9:9b:d4:
77:3b:fe:1c:7a:c1:fd:09:a3:5b:3c:68:f6:57:ab:
9e:b7:60:08:d0:44:99:73:3a:fb:ca:b6:e4:1c:d4:
bf:70:c7:05:eb:af:b4:55:c7:b7:22:5a:f8:d8:0e:
39:2e:b3:60:23:b3:bf:f1:9d:61:0d:27:97:9c:e8:
67:9a:4f:96:d8:ad:bb:3e:d8:fd:3b:61:d9:80:68:
93:d0:1d:b0:4a:18:4d:c3:65:ba:82:38:a8:2d:57:
18:44:36:d7:d9:ac:95:58:5e:50:dd:0c:4a:df:69:
85:51:37:ba:41:83:17:4f:1b:29:f7:ff:93:6f:f3:
ed:76:87:2b:e2:65:5a:fe:34:40:ed:24:1c:f6:5f:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:22:B0:3C:B2:88:FD:AC:60:5E:18:90:19:1C:1D:6F:41:F7:03
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/2H0isDyyiP2sYF4YkBkcHW9B9wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/23
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
109.69.164.0/22
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
b3:ce:cb:6b:00:67:d8:e1:f4:af:9e:87:ed:a1:3b:15:99:71:
61:d3:44:76:cd:2d:e1:1a:38:b0:9b:7d:9b:57:08:1d:ee:93:
33:3d:c9:ff:63:7b:dc:c5:94:87:7c:c3:38:49:2d:85:0a:77:
a9:34:6b:68:83:53:ca:55:ef:ea:8a:15:9b:a8:f6:f2:d0:d5:
c8:a4:e5:89:69:ac:f9:11:c6:df:07:56:1b:f3:05:49:3a:0a:
0d:c1:7f:e5:f1:af:3c:01:34:bb:d7:ea:24:23:5e:58:be:41:
23:7f:74:d7:53:30:40:88:1e:3a:23:0e:04:13:4a:10:3c:7d:
d6:3c:b8:e3:f7:92:31:f3:b3:c4:2f:3f:8a:be:63:bd:9e:71:
91:c8:59:76:2b:01:e5:fd:e9:44:22:d9:07:65:b5:0b:f3:f7:
2c:ce:45:33:c4:67:42:6e:5b:12:60:17:ee:92:6f:3b:ca:87:
dc:f6:e8:e0:8b:55:e2:01:16:81:72:cb:92:9a:46:77:8f:a5:
72:be:0c:dd:9b:21:67:7b:dc:90:c8:d3:a8:4b:40:00:62:00:
22:7c:9c:54:aa:79:b2:18:61:e6:77:8d:e1:8c:8d:8e:ac:a9:
a4:f9:55:e0:f1:4d:13:ad:73:3e:fe:61:0b:86:bf:1c:49:f6:
96:63:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:58 2025 by rpki-client