Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Ls6lYy_lk6ed37X993OsAOWt0Cw.roa
File: Ls6lYy_lk6ed37X993OsAOWt0Cw.roa (raw, json)
Hash identifier: tPmnqGhu5EDYkhVFBd27bS9aXdtOOU66PqhnFJhxqa4=
Subject key identifier: 2E:CE:A5:63:2F:E5:93:A7:9D:DF:B5:FD:F7:73:AC:00:E5:AD:D0:2C
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 0198F103364FC3AF32A7D3631BBC3C9C18B1
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Ls6lYy_lk6ed37X993OsAOWt0Cw.roa
Signing time: Thu 28 Aug 2025 14:09:36 +0000
ROA not before: Thu 28 Aug 2025 14:09:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.177.0/24 maxlen: 24
217.154.178.0/23 maxlen: 24
217.154.180.0/22 maxlen: 24
217.154.184.0/23 maxlen: 24
217.154.186.0/24 maxlen: 24
217.154.188.0/22 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.244.0/23 maxlen: 24
217.154.247.0/24 maxlen: 24
217.154.248.0/21 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:03:36:4f:c3:af:32:a7:d3:63:1b:bc:3c:9c:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Aug 28 14:09:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ecea5632fe593a79ddfb5fdf773ac00e5add02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:bc:91:dc:34:a1:9e:ef:24:89:19:c1:fe:
f2:99:69:db:33:c5:19:09:86:ed:39:b9:4b:40:a5:
74:32:4e:c9:87:e0:08:dc:f8:60:dc:bb:1b:e1:30:
59:39:17:9c:eb:d2:01:ef:f1:58:e4:bb:4f:27:d1:
9d:ec:d7:10:e4:3e:bb:a4:52:0b:07:76:be:b6:f5:
ca:89:9c:57:d4:eb:6e:31:0b:ac:40:29:e1:fe:d8:
dc:d3:95:88:fe:11:99:ec:82:90:da:d7:39:33:9e:
56:ec:d1:7f:1d:62:1d:61:ea:6c:9a:ef:9e:07:ea:
bd:32:8e:fe:17:52:b5:ba:77:e7:ce:7a:5a:e4:b8:
f5:b7:e2:3f:2d:9b:b1:3a:91:77:39:bc:b6:1e:ab:
53:28:cb:d7:af:3d:d4:7d:25:54:6c:3e:15:78:ac:
a3:e6:f1:6e:2b:98:6e:f7:99:80:4f:d2:6d:21:eb:
2e:21:6d:b0:2a:48:15:02:09:3c:e0:37:a5:fe:45:
1c:b1:08:b2:38:cf:56:5d:96:af:51:5e:77:90:20:
c6:d7:4c:5a:ff:1b:8b:53:40:d3:57:b5:bd:eb:5b:
2d:26:f8:6a:50:70:09:5e:6d:4f:73:1a:70:30:c3:
84:d1:22:cf:f4:f7:eb:2b:9c:e6:8a:f3:43:65:8a:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:A5:63:2F:E5:93:A7:9D:DF:B5:FD:F7:73:AC:00:E5:AD:D0:2C
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Ls6lYy_lk6ed37X993OsAOWt0Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.177.0-217.154.186.255
217.154.188.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.245.255
217.154.247.0-217.154.255.255
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
b0:66:86:ca:b0:5d:3a:cb:65:62:d2:5e:03:f7:2f:ea:52:0d:
46:0d:a7:d7:8f:74:0b:15:f3:15:bf:7e:23:ad:be:25:74:d8:
a4:b0:b7:bd:b6:78:99:9b:5e:fc:f2:86:7a:d1:3d:67:ac:e0:
2e:da:12:9f:2b:bb:3f:09:42:3d:b1:1a:ff:0d:41:cc:e9:af:
9e:03:0f:d1:0c:51:78:6c:f8:5b:00:96:dd:6d:87:f9:1a:db:
ae:fe:08:b0:4d:24:6b:15:3f:12:06:48:8f:34:fe:d8:cc:44:
07:0d:c4:35:6d:0c:d2:fb:ba:4c:20:03:38:07:00:ab:d2:69:
41:51:ca:6f:e5:ba:20:af:43:6d:44:48:1a:0b:78:ae:42:51:
57:b5:b3:5c:76:1a:e1:ac:78:35:c0:5d:26:85:7f:23:30:30:
89:52:d7:a1:3e:b7:bd:8d:ce:d5:27:fd:89:7d:ea:b7:b4:2a:
c1:2c:1d:d3:88:d1:ed:b7:6a:a3:e2:05:9b:44:28:fe:b3:54:
52:09:62:e5:b4:75:22:3f:45:71:71:57:64:7a:02:33:38:f9:
b2:6d:0e:1d:68:0d:62:a4:8a:1d:e9:8f:33:76:27:79:ad:7e:
bc:1b:6a:8a:9f:35:ee:e6:91:0d:07:ab:97:2b:04:bb:04:35:
72:f0:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:03:14 2025 by rpki-client