Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa
File: ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa (raw, json)
Hash identifier: mTx3iBU5+gUzCuwkRIlwRwR4OdmyhWs/YLzJTZWJgsk=
Subject key identifier: 66:EC:42:68:CD:23:BC:EF:1D:4F:AF:6B:AE:D0:A8:F9:45:3F:7C:63
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 01942143AED61861F6E5476731DE7DF341FE
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/12 maxlen: 12
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
82.38.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
82.40.0.0/16 maxlen: 16
82.41.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
82.46.0.0/15 maxlen: 15
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ae:d6:18:61:f6:e5:47:67:31:de:7d:f3:41:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66ec4268cd23bcef1d4faf6baed0a8f9453f7c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:3d:e3:75:47:fe:1f:09:59:55:55:01:8f:
ed:7e:da:31:5f:fe:5a:08:f1:38:27:c8:33:b0:de:
8b:67:d4:14:fd:e9:00:10:e6:ca:f4:e7:e5:b5:dc:
f5:e0:db:01:43:88:e9:1b:16:47:27:ce:14:b7:fd:
ec:6e:c0:5d:26:c8:8e:28:62:cf:df:e3:04:cd:3d:
55:29:c9:44:a4:07:18:d0:33:3d:18:d5:3a:9f:63:
ce:45:cd:3e:46:16:e2:22:98:ac:b1:18:b8:0a:3f:
ec:55:64:4e:1b:6c:84:44:95:9c:da:f4:74:3f:91:
84:c4:d1:93:80:fd:9f:a7:3c:d5:28:13:67:01:a9:
5a:95:c0:f8:ca:23:6f:f5:b0:5e:31:08:ec:82:63:
37:cb:db:93:01:a9:79:ea:f7:b8:52:d3:c7:a2:e0:
76:63:9e:f9:11:c3:3a:cb:51:67:be:32:84:49:87:
97:61:99:82:09:6d:06:d5:e3:5b:5c:04:85:a1:2d:
14:fd:cd:2a:9b:2f:d2:90:12:23:23:7e:04:f8:db:
fa:5a:3f:e9:75:e9:62:a0:35:59:ec:0a:4d:11:0f:
c7:17:68:50:9b:39:ed:13:c0:0c:c1:68:40:d6:34:
d3:f3:58:ad:65:95:0a:d5:39:43:ee:f4:0a:30:77:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:42:68:CD:23:BC:EF:1D:4F:AF:6B:AE:D0:A8:F9:45:3F:7C:63
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
81.96.0.0/12
82.0.0.0-82.20.255.255
82.28.0.0/16
82.30.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
9b:51:0e:53:ce:0d:13:91:91:c6:e9:80:a6:14:25:f4:f2:81:
20:83:a1:82:3b:9c:f1:e1:08:74:1c:df:ac:b2:bb:ad:63:08:
87:0d:2d:94:61:9a:4b:75:2b:aa:d7:ca:57:52:a9:72:7f:45:
07:43:0b:d7:6b:aa:ad:26:b9:a5:92:37:d2:13:d7:50:78:49:
73:59:9a:37:d2:ea:ef:fa:a8:5a:7b:92:f2:f0:2d:92:45:07:
47:05:54:c1:86:54:5c:9d:90:50:10:99:0e:be:ef:aa:04:6e:
1a:62:ad:f9:17:31:0c:b6:11:68:92:cc:9a:68:8e:1b:8d:ce:
d4:f6:62:29:99:53:c7:ec:4b:d3:71:3d:e6:b1:85:57:f3:25:
a6:61:cc:16:81:9a:24:2e:06:a4:c4:e0:3f:35:01:3f:db:ac:
13:b0:42:ed:c4:23:00:e1:21:fc:a6:34:ff:02:0e:3b:a5:1b:
94:8b:17:a2:db:7b:46:d4:f6:82:f1:27:53:85:6b:7a:c5:4e:
41:7c:fe:af:b4:b1:f8:1f:64:ae:cf:6d:72:e4:57:c8:7f:34:
88:17:dc:0b:2a:c0:99:dd:58:c1:a0:a8:53:59:5d:52:70:14:
2d:b4:b6:b1:8b:4b:30:b3:ed:15:b0:e4:31:55:d0:0a:8c:11:
00:86:5f:f7
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAZQhQ67WGGH25UdnMd5980H+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjUwMTAxMDk0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmVjNDI2OGNkMjNiY2VmMWQ0ZmFmNmJhZWQwYThmOTQ1M2Y3YzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l8943VH/h8JWVVVAY/tftoxX/5a
CPE4J8gzsN6LZ9QU/ekAEObK9Ofltdz14NsBQ4jpGxZHJ84Ut/3sbsBdJsiOKGLP
3+MEzT1VKclEpAcY0DM9GNU6n2PORc0+RhbiIpissRi4Cj/sVWROG2yERJWc2vR0
P5GExNGTgP2fpzzVKBNnAalalcD4yiNv9bBeMQjsgmM3y9uTAal56ve4UtPHouB2
Y575EcM6y1FnvjKESYeXYZmCCW0G1eNbXASFoS0U/c0qmy/SkBIjI34E+Nv6Wj/p
delioDVZ7ApNEQ/HF2hQmzntE8AMwWhA1jTT81itZZUK1TlD7vQKMHc2/QIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFGbsQmjNI7zvHU+va67QqPlFP3xjMB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvWnV4Q2FNMGp2TzhkVDY5cnJ0Q28tVVVfZkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBuQQCAAEwgbIDAwE+
HgMDAj78AwMDTWADAwNQAAMDAlDAAwQHUOuAAwMEUWAwCQMCAVIDAwBSFAMDAFIc
MAoDAwFSHgMDBFIgAwMFVgAwCgMDA1zoAwMAXOoDAwJc7DAKAwMAXq0DAwReoAME
BsEmQDAMAwQFwScgAwQAwSdAAwQFwcFgAwQFwnWAAwMAwqgDAwDDvAMEBdQYQAMD
ANT6AwMA1TADBAfVUQADAwLVaAMEBdWUIAMDANmJMBQEAgACMA4DBQAqAogBAwUH
KgKIgDANBgkqhkiG9w0BAQsFAAOCAQEAm1EOU84NE5GRxumAphQl9PKBIIOhgjuc
8eEIdBzfrLK7rWMIhw0tlGGaS3UrqtfKV1Kpcn9FB0ML12uqrSa5pZI30hPXUHhJ
c1maN9Lq7/qoWnuS8vAtkkUHRwVUwYZUXJ2QUBCZDr7vqgRuGmKt+RcxDLYRaJLM
mmiOG43O1PZiKZlTx+xL03E95rGFV/MlpmHMFoGaJC4GpMTgPzUBP9usE7BC7cQj
AOEh/KY0/wIOO6UblIsXott7RtT2gvEnU4VresVOQXz+r7Sx+B9krs9tcuRXyH80
iBfcCyrAmd1YwaCoU1ldUnAULbS2sYtLMLPtFbDkMVXQCowRAIZf9w==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:43 2025 by rpki-client