Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lR28HcG6mdYqhxacyt4-YiUbrI0.roa
File: lR28HcG6mdYqhxacyt4-YiUbrI0.roa (raw, json)
Hash identifier: uSujBB1cDF5TWidu6560csgviIQ2Wuk/Rh19WwOFfG8=
Subject key identifier: 95:1D:BC:1D:C1:BA:99:D6:2A:87:16:9C:CA:DE:3E:62:25:1B:AC:8D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197267B2978F96F8C93401A9DAD19EE9EA0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lR28HcG6mdYqhxacyt4-YiUbrI0.roa
Signing time: Sat 31 May 2025 13:14:55 +0000
ROA not before: Sat 31 May 2025 13:14:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
62.106.87.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:7b:29:78:f9:6f:8c:93:40:1a:9d:ad:19:ee:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 31 13:14:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=951dbc1dc1ba99d62a87169ccade3e62251bac8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:dd:f0:8c:b9:7d:db:fc:de:df:51:64:af:
19:ea:a5:60:0f:3a:3a:e5:15:5f:bb:46:9a:1d:4d:
5e:f8:c3:90:45:51:6d:50:33:ae:23:e5:47:14:4d:
dd:0d:8c:0f:50:d2:66:d4:ff:08:71:ce:b0:03:30:
b5:a5:f7:ae:d9:f3:7b:db:c8:c2:a8:ed:08:09:58:
23:fa:3c:9d:1f:22:35:4b:6a:fe:97:7e:e7:ab:8e:
5d:6c:a0:08:b9:84:ee:41:0b:a8:6b:d6:a0:a2:34:
88:b7:7e:f8:9b:a9:71:51:b9:0d:80:c4:aa:a6:34:
89:07:59:1c:a2:04:32:60:7b:06:46:17:a0:e3:b1:
63:de:d2:45:94:50:ff:71:f4:da:3c:26:2e:af:f4:
bb:ec:32:aa:cc:3b:37:cd:50:1f:f7:bf:39:69:cf:
46:f2:fb:5f:d5:68:f1:1e:de:06:97:23:e2:35:2a:
00:a8:0e:fb:ab:68:3c:56:7a:ae:f1:46:20:43:50:
7b:92:f5:b5:e4:dc:4d:9e:d0:52:1d:03:5e:c0:11:
b9:a3:a1:5b:eb:08:9e:83:a5:ba:ae:f7:7d:a1:36:
12:57:86:c0:ef:65:4e:9b:ce:eb:7a:a0:05:d5:94:
6b:68:fd:0b:d5:1a:84:a3:c7:56:35:b5:7b:d5:fd:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:BC:1D:C1:BA:99:D6:2A:87:16:9C:CA:DE:3E:62:25:1B:AC:8D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lR28HcG6mdYqhxacyt4-YiUbrI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
62.106.87.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b9:02:d0:cf:59:64:24:13:42:2f:60:61:99:08:ac:57:c9:
f1:c8:01:f4:55:19:7c:f2:44:e5:53:f5:d1:c6:ac:9d:89:ba:
a3:e0:d3:33:07:eb:45:da:5a:22:7b:55:69:45:28:e6:be:47:
16:da:61:64:78:c9:65:e6:7d:cd:30:08:a4:02:fc:9b:58:1c:
61:e6:0a:bd:6b:4f:80:0b:cc:e5:5f:0f:dc:11:a9:e6:0d:af:
a3:43:2f:92:b5:b8:23:77:01:ee:e1:5d:30:fe:00:73:d2:11:
57:28:67:64:50:8a:80:a2:c7:c9:cb:33:35:56:22:dd:80:8d:
db:f7:90:91:4a:94:21:e6:6e:91:c9:1e:aa:75:7c:f6:3b:d7:
1d:0b:0c:12:3f:0f:6e:d0:fc:3b:f1:f5:b2:7c:3b:dc:b1:f5:
00:01:fa:9d:fe:ba:48:51:8c:dd:04:69:bd:1e:b4:6e:ad:bd:
18:cb:41:b6:36:fb:53:d8:87:fc:a9:17:04:ed:f3:8b:38:fc:
99:c8:1d:ca:76:1f:b1:e1:02:67:f1:8f:4f:8a:24:c4:31:7b:
1b:ea:ab:34:88:41:70:60:83:18:d2:9e:ee:88:87:87:72:e6:
2b:77:7a:f7:53:02:76:70:3a:69:7e:05:e5:72:6c:2c:ee:99:
00:77:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:25:29 2025 by rpki-client