Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/xvJJCJmfitiZoRrYzWugczL4VyQ.roa
File: xvJJCJmfitiZoRrYzWugczL4VyQ.roa (raw, json)
Hash identifier: UrxIyZ/4qn/YP7b/SzV5GX2KUOXeEfz4V6Bha/YX2bk=
Subject key identifier: C6:F2:49:08:99:9F:8A:D8:99:A1:1A:D8:CD:6B:A0:73:32:F8:57:24
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 019427B36D8DAA9D2AB308E7A1A54BE41E05
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/xvJJCJmfitiZoRrYzWugczL4VyQ.roa
Signing time: Thu 02 Jan 2025 15:47:37 +0000
ROA not before: Thu 02 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 92.40.0.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.32.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.112.0/20 maxlen: 20
92.40.128.0/19 maxlen: 19
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.214.0/23 maxlen: 23
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.41.0.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
92.41.32.0/20 maxlen: 20
92.41.48.0/20 maxlen: 20
92.41.64.0/20 maxlen: 20
92.41.80.0/22 maxlen: 22
92.41.84.0/22 maxlen: 22
92.41.88.0/22 maxlen: 22
92.41.92.0/22 maxlen: 22
92.41.96.0/19 maxlen: 19
92.41.128.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
92.41.160.0/21 maxlen: 21
92.41.176.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
92.41.251.0/24 maxlen: 24
94.196.0.0/18 maxlen: 18
94.196.64.0/20 maxlen: 20
94.196.80.0/20 maxlen: 20
94.196.96.0/20 maxlen: 20
94.196.112.0/20 maxlen: 20
94.196.128.0/20 maxlen: 20
94.196.144.0/20 maxlen: 20
94.196.160.0/19 maxlen: 19
94.196.192.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
94.196.224.0/19 maxlen: 19
94.197.0.0/19 maxlen: 19
94.197.32.0/20 maxlen: 20
94.197.48.0/20 maxlen: 20
94.197.64.0/19 maxlen: 19
94.197.96.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
94.197.112.0/21 maxlen: 21
94.197.128.0/21 maxlen: 21
94.197.136.0/21 maxlen: 21
94.197.144.0/21 maxlen: 21
94.197.152.0/21 maxlen: 21
94.197.160.0/21 maxlen: 21
94.197.168.0/21 maxlen: 21
94.197.176.0/21 maxlen: 21
94.197.184.0/21 maxlen: 21
94.197.192.0/18 maxlen: 18
185.153.236.0/24 maxlen: 24
185.153.237.0/24 maxlen: 24
185.153.238.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.28.0.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
188.28.32.0/20 maxlen: 20
188.28.48.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
188.28.96.0/20 maxlen: 20
188.28.112.0/20 maxlen: 20
188.28.128.0/19 maxlen: 19
188.28.160.0/19 maxlen: 19
188.28.192.0/18 maxlen: 18
188.29.0.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.29.160.0/22 maxlen: 22
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.224.0/20 maxlen: 20
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.24.0/21 maxlen: 21
188.30.32.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.68.0/22 maxlen: 22
188.30.72.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.30.80.0/22 maxlen: 22
188.30.84.0/22 maxlen: 22
188.30.87.0/26 maxlen: 26
188.30.87.64/26 maxlen: 26
188.30.88.0/22 maxlen: 22
188.30.92.0/22 maxlen: 22
188.30.96.0/19 maxlen: 19
188.30.128.0/21 maxlen: 21
188.30.136.0/21 maxlen: 21
188.30.144.0/21 maxlen: 21
188.30.152.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.192.0/21 maxlen: 21
188.30.200.0/21 maxlen: 21
188.30.208.0/20 maxlen: 20
188.30.224.0/20 maxlen: 20
188.30.240.0/21 maxlen: 21
188.31.0.0/21 maxlen: 21
188.31.8.0/21 maxlen: 21
188.31.16.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
188.31.32.0/19 maxlen: 19
188.31.64.0/22 maxlen: 22
188.31.68.0/22 maxlen: 22
188.31.72.0/22 maxlen: 22
188.31.76.0/22 maxlen: 22
188.31.80.0/22 maxlen: 22
188.31.84.0/22 maxlen: 22
188.31.88.0/22 maxlen: 22
188.31.92.0/22 maxlen: 22
188.31.96.0/20 maxlen: 20
188.31.112.0/20 maxlen: 20
188.31.128.0/19 maxlen: 19
188.31.160.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.31.192.0/21 maxlen: 21
188.31.200.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
188.31.224.0/20 maxlen: 20
188.31.248.0/23 maxlen: 23
188.31.250.0/24 maxlen: 24
188.31.251.0/24 maxlen: 24
188.31.252.0/24 maxlen: 24
188.31.254.0/24 maxlen: 24
217.171.128.0/20 maxlen: 20
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4800::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:4a00::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:4c00::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:4f00::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:5100::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
2a04:4a43:8400::/40 maxlen: 40
2a04:4a43:8500::/40 maxlen: 40
2a04:4a43:8600::/40 maxlen: 40
2a04:4a43:8700::/40 maxlen: 40
2a04:4a43:8800::/40 maxlen: 40
2a04:4a43:8900::/40 maxlen: 40
2a04:4a43:8a00::/40 maxlen: 40
2a04:4a43:8b00::/40 maxlen: 40
2a04:4a43:8c00::/40 maxlen: 40
2a04:4a43:8d00::/40 maxlen: 40
2a04:4a43:8e00::/40 maxlen: 40
2a04:4a43:8f00::/40 maxlen: 40
2a04:4a43:9000::/40 maxlen: 40
2a04:4a43:9100::/40 maxlen: 40
2a04:4a43:9200::/40 maxlen: 40
2a04:4a43:9300::/40 maxlen: 40
2a04:4a43:9400::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
2a04:4a45:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:6d:8d:aa:9d:2a:b3:08:e7:a1:a5:4b:e4:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jan 2 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f24908999f8ad899a11ad8cd6ba07332f85724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:94:33:1d:bf:99:e9:7b:da:f3:4f:fe:01:
f9:f8:47:e9:45:0b:6d:d7:ad:43:f9:2a:f6:f3:b0:
59:66:85:65:93:6a:49:3f:4f:50:f4:2d:18:b9:4f:
b3:0c:36:e9:7b:5a:4c:1c:8f:ac:08:5b:b1:b1:ed:
0a:60:60:9d:fe:21:65:c2:af:31:b7:a5:6f:42:75:
eb:cf:05:93:19:86:03:4d:0a:d7:0f:02:48:04:cc:
37:a7:5a:73:ab:c0:93:de:dc:28:80:93:08:43:0a:
7f:a1:b6:c5:5f:4b:06:78:fd:08:b0:38:26:87:e2:
61:c4:9c:2a:e3:66:b9:d7:4d:94:c2:4c:d5:7c:0b:
cd:4b:54:82:be:b6:49:d2:d6:ab:a4:a0:f3:02:dd:
a7:e6:5f:cb:b0:1c:65:cc:bd:0b:8f:d5:5a:ce:d4:
51:94:cc:2e:f8:a2:82:d1:9a:cc:2a:75:5a:91:34:
f4:d5:1d:a3:8d:5c:ce:0b:d7:60:4f:ef:39:a9:09:
ed:d8:7a:4c:f2:f2:3f:4f:f7:39:94:ce:64:6a:21:
e6:34:86:fb:22:89:10:cd:31:39:fb:73:5a:45:12:
6e:43:6c:25:45:a4:5f:50:a2:2f:7b:d5:dd:74:d2:
e7:33:a2:62:7a:97:00:43:81:7d:a3:ab:a2:08:8c:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:49:08:99:9F:8A:D8:99:A1:1A:D8:CD:6B:A0:73:32:F8:57:24
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/xvJJCJmfitiZoRrYzWugczL4VyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.0.0-92.40.205.255
92.40.208.0-92.40.219.255
92.41.0.0-92.41.151.255
92.41.156.0-92.41.167.255
92.41.176.0/20
92.41.208.0-92.41.239.255
92.41.251.0/24
94.196.0.0-94.197.119.255
94.197.128.0/17
185.153.236.0/22
188.28.0.0-188.29.163.255
188.29.184.0-188.29.251.255
188.30.0.0-188.30.247.255
188.31.0.0-188.31.215.255
188.31.224.0/20
188.31.248.0-188.31.252.255
188.31.254.0/24
217.171.128.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:58ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:8400::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:f::/48
Signature Algorithm: sha256WithRSAEncryption
b7:9d:55:75:cc:3b:96:af:a7:b1:4d:23:3c:04:d6:fa:3f:2f:
32:e8:4d:70:b9:af:1e:f5:67:d6:77:6e:0a:9a:14:b6:e5:1c:
8b:f9:29:86:0c:c2:79:b2:61:32:78:03:f4:25:14:7c:60:ce:
19:0b:38:d2:47:c5:01:f1:5c:05:12:70:64:3e:3c:6b:2e:80:
96:58:fd:88:28:30:ca:4d:30:4a:ec:f1:23:cb:f4:4a:fc:56:
bd:52:9e:9e:50:1f:aa:06:33:57:a9:5b:d7:89:80:46:2b:fa:
3c:49:8e:23:16:1f:50:c4:10:02:59:c2:c5:a5:1e:32:dd:67:
bd:70:0e:37:23:0b:a4:0c:b3:df:97:7b:31:af:14:71:f8:87:
43:fb:22:dd:f4:1d:e7:66:e5:d2:6e:b8:b4:8c:96:d9:1b:02:
12:36:e8:2a:b4:0e:87:ed:1b:11:9c:77:fe:1a:09:9f:3b:47:
1f:7a:cb:9e:b3:25:eb:81:21:55:e4:83:98:10:f3:14:d2:65:
ff:89:b9:41:1d:5a:bd:27:7e:6d:07:a3:d4:66:60:5e:80:2e:
c7:92:62:59:c4:77:0a:9e:16:c6:62:14:ef:29:be:f6:f6:f2:
5a:43:02:06:ac:79:91:b8:21:00:30:a6:d5:dc:6d:4b:25:70:
c0:fd:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:10 2025 by rpki-client