Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/64IYMsHvI6_BFzjvT3Kh01Iaq3Y.roa
File: 64IYMsHvI6_BFzjvT3Kh01Iaq3Y.roa (raw, json)
Hash identifier: glJ+p4zhJLvf17qxy3tcmrWJQjR4bQkS2fl4OyKN6VY=
Subject key identifier: EB:82:18:32:C1:EF:23:AF:C1:17:38:EF:4F:72:A1:D3:52:1A:AB:76
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 01992FF1889C3309B2D1676D7D683CE4396C
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/64IYMsHvI6_BFzjvT3Kh01Iaq3Y.roa
Signing time: Tue 09 Sep 2025 19:26:22 +0000
ROA not before: Tue 09 Sep 2025 19:26:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 22
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 19
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:f1:88:9c:33:09:b2:d1:67:6d:7d:68:3c:e4:39:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Sep 9 19:26:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb821832c1ef23afc11738ef4f72a1d3521aab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:d5:73:ae:72:dc:dd:4f:9a:2d:03:42:02:
02:cc:f9:97:39:4c:20:97:e9:cc:0b:20:c5:35:22:
55:ca:7d:80:79:42:79:ff:ad:1e:e5:0b:95:33:1d:
69:2c:d3:d7:51:65:0a:9c:8d:ff:b5:58:4e:4d:03:
50:e1:b8:c1:ed:50:1b:0d:90:df:df:b0:e0:29:cb:
78:d9:3b:6a:29:86:74:c1:5c:d6:51:c6:13:c0:45:
66:b9:ec:34:36:4c:ad:c5:c9:3e:f0:02:2c:5c:c8:
14:c5:67:81:3c:88:bd:27:a8:6e:9b:eb:4c:15:20:
d4:59:4d:11:df:8f:b1:1d:6f:73:09:81:bf:bd:fc:
7b:ee:8a:4b:d3:05:0a:4c:23:57:76:fe:7c:2d:4c:
0a:a9:f9:35:f6:64:fe:05:f7:2a:92:e6:b5:0b:3c:
13:bf:b4:45:cb:af:11:8c:d6:f0:89:df:86:f0:2d:
e4:ab:90:ec:f4:1e:15:ad:d0:39:db:9c:77:81:47:
00:6f:2e:71:76:59:8c:5c:72:35:81:90:b2:53:9e:
10:51:2f:5c:a1:a6:9d:ba:5b:62:39:0c:7e:75:9e:
4e:81:d2:71:d9:d1:90:47:85:ad:3a:98:61:57:c9:
4b:40:35:79:c8:75:ef:4c:2d:96:65:fd:05:ed:df:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:18:32:C1:EF:23:AF:C1:17:38:EF:4F:72:A1:D3:52:1A:AB:76
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/64IYMsHvI6_BFzjvT3Kh01Iaq3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.192.0/18
81.208.160.0/20
81.208.188.0/22
84.8.64.0/20
84.8.88.0/23
84.8.96.0-84.8.159.255
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.5.0.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.206.0-130.110.214.255
130.110.216.0/24
130.110.218.0-130.110.221.255
130.110.223.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
141.253.96.0/19
141.253.192.0/19
145.241.112.0/20
145.241.144.0-145.241.175.255
145.241.178.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
07:c6:c8:19:18:07:91:00:e4:e3:55:4f:e3:a5:98:6f:9c:82:
37:da:a2:d4:28:d2:c9:0c:93:17:f7:f3:2b:92:f5:24:83:be:
be:86:93:e8:8c:9b:9d:00:37:81:b0:b0:96:8e:79:1b:a9:0b:
d7:66:79:93:15:fc:51:a5:d7:39:fc:63:b4:2a:92:2d:44:71:
9b:bb:42:82:cd:50:3c:8f:10:9c:28:2c:b9:8c:31:6e:8e:3e:
40:71:1a:d2:cf:11:87:28:81:34:c5:1a:98:3f:63:05:59:7f:
0f:03:c1:4c:7f:8a:ec:a6:50:74:79:ca:0c:c4:6e:da:ab:d8:
c1:65:a5:bd:e0:e4:64:29:e2:e2:e6:9c:77:13:94:f6:e7:c5:
f1:86:6f:4b:6d:37:e4:26:19:7d:5b:5d:50:fe:01:68:5b:d5:
93:96:81:60:ad:03:f4:c6:e0:3c:f6:c0:f2:30:01:dc:65:d5:
01:04:93:dc:4c:04:5a:df:9c:96:f9:84:35:7d:ab:ff:ea:91:
a4:57:f5:ca:20:20:02:0d:7c:6b:ec:4a:28:86:ec:38:00:3a:
97:45:64:0a:a5:bb:5f:a0:e9:67:98:89:12:09:53:39:b9:4e:
21:c3:b0:03:cd:37:d2:2f:3e:d6:43:30:2c:d3:2c:10:0d:30:
27:29:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:41:30 2025 by rpki-client