Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-LSqW5hWhZ_ns3sg9lrsjl1Eu3U.roa
File: 1-LSqW5hWhZ_ns3sg9lrsjl1Eu3U.roa (raw, json)
Hash identifier: MBho8bjmHwJRrjsA/doj43g562fHvB1HibUzPwveASs=
Subject key identifier: F8:B4:AA:5B:98:56:85:9F:E7:B3:7B:20:F6:5A:EC:8E:5D:44:BB:75
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019904ACC7E7B9A4F31389791B2112192FCA
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-LSqW5hWhZ_ns3sg9lrsjl1Eu3U.roa
Signing time: Mon 01 Sep 2025 09:47:36 +0000
ROA not before: Mon 01 Sep 2025 09:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:ac:c7:e7:b9:a4:f3:13:89:79:1b:21:12:19:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Sep 1 09:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b4aa5b9856859fe7b37b20f65aec8e5d44bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:eb:9a:7c:34:26:e3:7b:e9:86:44:97:69:
f4:df:a2:56:5a:b7:ad:03:90:e7:43:43:ac:a2:64:
23:90:ce:6c:3c:63:7f:ef:93:dd:fd:68:9b:c8:3d:
eb:e9:9c:6a:fe:b4:76:2f:e2:73:2d:24:c5:da:0e:
e9:1d:82:1e:85:31:84:a7:6e:4f:67:7f:8b:c1:3e:
98:9c:2f:d4:00:48:12:9a:12:d1:74:17:c3:e8:05:
29:bc:05:ae:47:1e:3b:28:9c:30:e8:77:84:22:9d:
9c:c0:75:7f:17:40:f7:8d:91:38:b9:e6:0c:7d:5f:
18:95:d4:11:d2:3d:1a:20:3b:3a:9e:7b:0b:b2:36:
5f:0c:d1:b3:a7:0b:e3:3f:99:0a:12:4f:4c:44:4f:
45:b5:9f:61:6c:fc:3b:fe:22:b7:ca:9f:fc:8a:e5:
dc:84:ad:f6:79:cd:cc:58:fb:b2:83:0a:b6:d6:77:
06:f4:56:2b:24:91:4e:81:53:4d:96:aa:8b:97:af:
39:65:1e:17:bc:5d:ee:20:d8:7e:7d:3e:3c:a8:9a:
cf:4a:af:c0:71:17:63:ed:92:30:84:93:7e:a4:de:
f1:bc:b7:ce:9e:6c:a6:84:f1:06:4b:39:88:29:b3:
44:c1:17:ce:7b:07:bb:b1:3f:03:5d:69:a7:19:b3:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:AA:5B:98:56:85:9F:E7:B3:7B:20:F6:5A:EC:8E:5D:44:BB:75
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-LSqW5hWhZ_ns3sg9lrsjl1Eu3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:ff:ce:84:66:b3:db:ad:1a:c8:34:0d:00:5f:e1:9c:0f:ea:
d1:03:81:12:e7:0b:9a:82:95:5f:9e:48:3e:06:4d:fb:1d:9f:
24:d5:06:e9:ab:30:51:d8:71:2d:d2:6f:7f:3c:38:bb:70:db:
4f:d5:4e:db:32:10:db:d8:f6:84:04:68:b9:3d:c5:e8:c1:a2:
7b:a2:af:ad:21:90:df:c9:83:a7:dc:f2:35:b5:e3:f3:2e:d6:
19:10:64:8a:2d:2a:bd:a9:5e:af:94:8c:b0:e2:27:6c:c9:8d:
3b:cc:4f:8d:bb:0b:2c:16:77:e1:83:a0:39:ce:61:12:d5:fa:
41:3a:43:41:c3:89:69:ef:b2:5c:cf:77:c5:01:00:2b:20:7e:
8e:54:3e:31:6f:ee:f2:4c:5d:23:28:e1:2a:c9:e6:34:9b:4f:
7c:98:0b:27:4d:f2:00:11:aa:08:dd:af:08:aa:05:10:74:49:
31:f1:d5:2a:d5:8f:9a:b8:a2:cd:5c:a6:9a:8b:e4:6c:32:bf:
9f:0b:b1:c1:ac:c1:1d:9c:6c:36:3d:91:fc:90:e8:6e:ea:b8:
e2:64:e3:f0:4d:cb:73:1b:a1:11:3b:ae:18:e4:23:21:34:48:
89:32:08:73:c3:47:02:66:b9:86:38:8b:a1:54:72:4f:90:d2:
62:9f:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 17:03:14 2025 by rpki-client