Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa
File: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (raw, json)
Hash identifier: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=
Subject key identifier: 6F:73:B2:9C:93:B6:75:0F:A1:24:4A:96:96:0E:DD:E2:5C:12:DA:F4
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01942521EFAD288BD0C814BF1FE10DB0C3AB
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47589
IP address blocks: 37.231.0.0/17 maxlen: 17
37.231.0.0/18 maxlen: 18
37.231.0.0/22 maxlen: 22
37.231.4.0/22 maxlen: 22
37.231.8.0/22 maxlen: 22
37.231.12.0/22 maxlen: 22
37.231.16.0/22 maxlen: 22
37.231.20.0/22 maxlen: 22
37.231.24.0/22 maxlen: 22
37.231.28.0/22 maxlen: 22
37.231.32.0/22 maxlen: 22
37.231.36.0/22 maxlen: 22
37.231.40.0/22 maxlen: 22
37.231.44.0/22 maxlen: 22
37.231.48.0/22 maxlen: 22
37.231.52.0/22 maxlen: 22
37.231.56.0/22 maxlen: 22
37.231.56.0/24 maxlen: 24
37.231.57.0/24 maxlen: 24
37.231.58.0/24 maxlen: 24
37.231.59.0/24 maxlen: 24
37.231.60.0/22 maxlen: 22
37.231.64.0/18 maxlen: 18
37.231.64.0/22 maxlen: 22
37.231.68.0/22 maxlen: 22
37.231.72.0/22 maxlen: 22
37.231.76.0/22 maxlen: 22
37.231.80.0/22 maxlen: 22
37.231.84.0/22 maxlen: 22
37.231.88.0/22 maxlen: 22
37.231.92.0/22 maxlen: 22
37.231.96.0/22 maxlen: 22
37.231.100.0/22 maxlen: 22
37.231.104.0/22 maxlen: 22
37.231.108.0/22 maxlen: 22
37.231.112.0/22 maxlen: 22
37.231.116.0/22 maxlen: 22
37.231.116.0/24 maxlen: 24
37.231.117.0/24 maxlen: 24
37.231.118.0/24 maxlen: 24
37.231.119.0/24 maxlen: 24
37.231.120.0/22 maxlen: 22
37.231.124.0/22 maxlen: 22
37.231.124.0/24 maxlen: 24
37.231.125.0/24 maxlen: 24
37.231.126.0/24 maxlen: 24
37.231.127.0/24 maxlen: 24
37.231.128.0/17 maxlen: 17
37.231.128.0/18 maxlen: 18
37.231.128.0/22 maxlen: 22
37.231.132.0/22 maxlen: 22
37.231.136.0/22 maxlen: 22
37.231.140.0/22 maxlen: 22
37.231.144.0/22 maxlen: 22
37.231.148.0/22 maxlen: 22
37.231.152.0/22 maxlen: 22
37.231.156.0/22 maxlen: 22
37.231.160.0/22 maxlen: 22
37.231.164.0/22 maxlen: 22
37.231.168.0/22 maxlen: 22
37.231.172.0/22 maxlen: 22
37.231.176.0/22 maxlen: 22
37.231.180.0/22 maxlen: 22
37.231.184.0/22 maxlen: 22
37.231.188.0/22 maxlen: 22
37.231.192.0/18 maxlen: 18
37.231.192.0/22 maxlen: 22
37.231.196.0/22 maxlen: 22
37.231.200.0/22 maxlen: 22
37.231.204.0/22 maxlen: 22
37.231.208.0/22 maxlen: 22
37.231.212.0/22 maxlen: 22
37.231.216.0/22 maxlen: 22
37.231.216.0/24 maxlen: 24
37.231.217.0/24 maxlen: 24
37.231.218.0/24 maxlen: 24
37.231.219.0/24 maxlen: 24
37.231.220.0/22 maxlen: 22
37.231.220.0/24 maxlen: 24
37.231.221.0/24 maxlen: 24
37.231.222.0/24 maxlen: 24
37.231.223.0/24 maxlen: 24
37.231.224.0/22 maxlen: 22
37.231.228.0/22 maxlen: 22
37.231.232.0/22 maxlen: 22
37.231.236.0/22 maxlen: 22
37.231.240.0/22 maxlen: 22
37.231.244.0/22 maxlen: 22
37.231.248.0/22 maxlen: 22
37.231.252.0/22 maxlen: 22
94.128.0.0/16 maxlen: 16
94.128.0.0/17 maxlen: 17
94.128.0.0/22 maxlen: 22
94.128.4.0/22 maxlen: 22
94.128.7.0/24 maxlen: 24
94.128.8.0/22 maxlen: 22
94.128.10.0/24 maxlen: 24
94.128.11.0/24 maxlen: 24
94.128.12.0/22 maxlen: 22
94.128.13.0/24 maxlen: 24
94.128.16.0/22 maxlen: 22
94.128.20.0/22 maxlen: 22
94.128.24.0/22 maxlen: 22
94.128.28.0/22 maxlen: 22
94.128.30.0/23 maxlen: 23
94.128.32.0/22 maxlen: 22
94.128.36.0/22 maxlen: 22
94.128.40.0/22 maxlen: 22
94.128.44.0/22 maxlen: 22
94.128.48.0/22 maxlen: 22
94.128.52.0/22 maxlen: 22
94.128.56.0/22 maxlen: 22
94.128.60.0/22 maxlen: 22
94.128.64.0/22 maxlen: 22
94.128.68.0/22 maxlen: 22
94.128.72.0/22 maxlen: 22
94.128.76.0/22 maxlen: 22
94.128.80.0/22 maxlen: 22
94.128.84.0/22 maxlen: 22
94.128.88.0/22 maxlen: 22
94.128.92.0/22 maxlen: 22
94.128.96.0/22 maxlen: 22
94.128.100.0/22 maxlen: 22
94.128.104.0/22 maxlen: 22
94.128.108.0/22 maxlen: 22
94.128.112.0/22 maxlen: 22
94.128.116.0/22 maxlen: 22
94.128.120.0/22 maxlen: 22
94.128.124.0/22 maxlen: 22
94.128.128.0/17 maxlen: 17
94.128.128.0/22 maxlen: 22
94.128.132.0/22 maxlen: 22
94.128.136.0/22 maxlen: 22
94.128.140.0/22 maxlen: 22
94.128.144.0/22 maxlen: 22
94.128.148.0/22 maxlen: 22
94.128.152.0/22 maxlen: 22
94.128.156.0/22 maxlen: 22
94.128.160.0/22 maxlen: 22
94.128.164.0/22 maxlen: 22
94.128.168.0/22 maxlen: 22
94.128.172.0/22 maxlen: 22
94.128.176.0/22 maxlen: 22
94.128.180.0/22 maxlen: 22
94.128.184.0/22 maxlen: 22
94.128.188.0/22 maxlen: 22
94.128.192.0/22 maxlen: 22
94.128.196.0/22 maxlen: 22
94.128.200.0/22 maxlen: 22
94.128.204.0/22 maxlen: 22
94.128.208.0/22 maxlen: 22
94.128.212.0/22 maxlen: 22
94.128.216.0/22 maxlen: 22
94.128.220.0/22 maxlen: 22
94.128.224.0/22 maxlen: 22
94.128.228.0/22 maxlen: 22
94.128.232.0/22 maxlen: 22
94.128.236.0/22 maxlen: 22
94.128.240.0/22 maxlen: 22
94.128.244.0/22 maxlen: 22
94.128.248.0/22 maxlen: 22
94.128.252.0/22 maxlen: 22
94.129.0.0/17 maxlen: 17
94.129.0.0/22 maxlen: 22
94.129.4.0/22 maxlen: 22
94.129.8.0/22 maxlen: 22
94.129.10.0/24 maxlen: 24
94.129.11.0/24 maxlen: 24
94.129.12.0/22 maxlen: 22
94.129.16.0/22 maxlen: 22
94.129.20.0/22 maxlen: 22
94.129.24.0/22 maxlen: 22
94.129.28.0/22 maxlen: 22
94.129.32.0/22 maxlen: 22
94.129.36.0/22 maxlen: 22
94.129.40.0/22 maxlen: 22
94.129.44.0/22 maxlen: 22
94.129.48.0/22 maxlen: 22
94.129.52.0/22 maxlen: 22
94.129.56.0/22 maxlen: 22
94.129.60.0/22 maxlen: 22
94.129.64.0/22 maxlen: 22
94.129.68.0/22 maxlen: 22
94.129.72.0/22 maxlen: 22
94.129.76.0/22 maxlen: 22
94.129.80.0/22 maxlen: 22
94.129.84.0/22 maxlen: 22
94.129.88.0/22 maxlen: 22
94.129.92.0/22 maxlen: 22
94.129.96.0/22 maxlen: 22
94.129.100.0/22 maxlen: 22
94.129.104.0/22 maxlen: 22
94.129.108.0/22 maxlen: 22
94.129.112.0/22 maxlen: 22
94.129.116.0/22 maxlen: 22
94.129.120.0/22 maxlen: 22
94.129.124.0/22 maxlen: 22
94.129.128.0/17 maxlen: 17
94.129.128.0/22 maxlen: 22
94.129.132.0/22 maxlen: 22
94.129.136.0/22 maxlen: 22
94.129.140.0/22 maxlen: 22
94.129.144.0/22 maxlen: 22
94.129.148.0/22 maxlen: 22
94.129.152.0/22 maxlen: 22
94.129.156.0/22 maxlen: 22
94.129.160.0/22 maxlen: 22
94.129.164.0/22 maxlen: 22
94.129.168.0/22 maxlen: 22
94.129.172.0/22 maxlen: 22
94.129.176.0/22 maxlen: 22
94.129.180.0/22 maxlen: 22
94.129.184.0/22 maxlen: 22
94.129.188.0/22 maxlen: 22
94.129.192.0/22 maxlen: 22
94.129.196.0/22 maxlen: 22
94.129.200.0/22 maxlen: 22
94.129.204.0/22 maxlen: 22
94.129.208.0/22 maxlen: 22
94.129.212.0/22 maxlen: 22
94.129.216.0/22 maxlen: 22
94.129.220.0/22 maxlen: 22
94.129.224.0/22 maxlen: 22
94.129.228.0/22 maxlen: 22
94.129.232.0/22 maxlen: 22
94.129.236.0/22 maxlen: 22
94.129.240.0/22 maxlen: 22
94.129.244.0/22 maxlen: 22
94.129.248.0/22 maxlen: 22
94.129.252.0/22 maxlen: 22
185.192.236.0/23 maxlen: 23
185.192.238.0/23 maxlen: 23
2a03:4780::/32 maxlen: 32
2a03:4781::/32 maxlen: 32
2a03:4782::/32 maxlen: 32
2a03:4783::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:ad:28:8b:d0:c8:14:bf:1f:e1:0d:b0:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f73b29c93b6750fa1244a96960edde25c12daf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:81:8b:fe:9d:74:07:4f:78:49:3c:e9:39:
b7:db:55:c0:89:04:fd:c3:31:ea:34:c5:2d:c0:db:
c0:9b:f9:1d:7b:43:9f:b0:72:f1:0a:80:b5:01:67:
f1:1f:87:a9:45:fe:03:82:81:03:8f:42:c7:4c:94:
71:55:e1:fc:fd:b3:9c:87:37:f7:02:d7:b4:9e:ce:
54:ed:63:80:dd:36:52:fe:bd:8e:5f:95:53:9c:42:
f6:3f:d9:98:eb:bb:76:fc:6d:9a:8f:51:84:54:54:
87:af:a0:ba:d5:0a:53:27:81:6b:6b:93:30:06:c4:
07:b9:ee:f8:8f:5a:80:c3:54:f9:d3:e4:63:94:4e:
92:13:18:e0:dc:4f:28:0d:19:45:13:ee:7f:88:e4:
67:eb:31:b4:16:1d:3d:6b:95:d7:f9:20:3f:31:0c:
34:f9:04:d9:84:53:3d:e7:b5:e0:2c:ac:c0:81:31:
69:df:55:7d:88:26:39:3f:e8:e5:16:5a:ae:2f:57:
e5:df:a7:dc:3f:09:65:6f:bf:d7:c8:1f:9b:76:f5:
0f:55:07:1d:5a:59:ee:48:06:ce:33:f7:df:5c:75:
b6:5c:1d:85:d2:cd:18:66:27:22:77:78:ef:cb:3b:
36:9a:4b:e0:95:40:fc:9e:12:04:50:7b:95:f2:54:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:B2:9C:93:B6:75:0F:A1:24:4A:96:96:0E:DD:E2:5C:12:DA:F4
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.231.0.0/16
94.128.0.0/15
185.192.236.0/22
IPv6:
2a03:4780::/30
Signature Algorithm: sha256WithRSAEncryption
89:89:4d:6e:65:5e:4e:46:07:90:91:9e:f6:8e:90:59:2f:af:
53:b0:05:75:4f:bd:a8:5d:23:2e:a4:b8:05:11:23:d4:64:ae:
c6:28:b2:08:a1:cb:49:82:e1:eb:16:03:a0:34:8f:ed:f2:8f:
ad:37:61:1f:58:84:ea:da:93:d1:2d:15:a1:2f:f2:a8:10:39:
39:58:d5:7e:20:31:7a:2a:93:24:45:21:6b:c4:8d:00:33:5b:
b1:fc:9c:5f:90:78:ce:fb:dd:71:f6:1d:2f:61:1b:f3:ab:4f:
18:8a:1f:5c:5e:f6:a9:3c:98:87:9f:6b:63:c8:e2:be:bb:e0:
2c:2a:28:a9:67:14:31:1e:18:c5:16:4e:5e:b1:ca:fc:d9:f7:
35:04:20:fe:e4:fb:2d:67:ee:3a:da:44:4b:d8:3a:7e:4b:78:
d9:42:15:1b:c6:b2:b8:5c:71:57:71:3e:c4:e4:72:10:17:2d:
9d:8d:de:0b:9f:7b:cb:a4:5c:ac:0c:9e:0a:2b:09:94:df:e5:
d9:67:23:b9:4d:ee:a9:32:0f:80:65:03:b2:d5:36:63:0f:f9:
9f:79:c8:2e:b5:1e:53:7b:99:a2:c2:53:af:6f:d6:a1:66:66:
34:c7:26:8c:2a:b2:7a:8b:c5:0a:c5:bc:06:d3:04:c1:be:bb:
ad:b9:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:32:10 2025 by rpki-client