Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Af6rgn7gOSO6b9yJTE82-PCW8cY.roa
File: Af6rgn7gOSO6b9yJTE82-PCW8cY.roa (raw, json)
Hash identifier: yvanfAEMgiAgFfICebeCl0yyBYWNTVGEo6Cci4GOC2Q=
Subject key identifier: 01:FE:AB:82:7E:E0:39:23:BA:6F:DC:89:4C:4F:36:F8:F0:96:F1:C6
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019739F3A3CCDD68C8327F88F44B48D79525
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Af6rgn7gOSO6b9yJTE82-PCW8cY.roa
Signing time: Wed 04 Jun 2025 07:59:17 +0000
ROA not before: Wed 04 Jun 2025 07:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f3:a3:cc:dd:68:c8:32:7f:88:f4:4b:48:d7:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jun 4 07:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01feab827ee03923ba6fdc894c4f36f8f096f1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:d0:3b:6e:b1:f5:b5:8b:33:28:57:8f:f7:
39:3d:50:cf:a2:07:61:c3:1d:41:54:f3:0a:a9:4c:
1f:d0:20:05:e1:80:f5:b8:78:83:04:56:ee:f2:8d:
40:b8:c6:34:6e:0c:23:ef:47:1f:c4:3d:9d:29:77:
10:11:fa:8e:82:0e:38:0b:0c:0b:f0:55:bd:c7:1e:
ec:89:07:7a:97:54:97:80:8b:b5:be:ec:78:95:65:
e4:60:6e:f5:89:ae:a1:41:fe:f8:b4:63:aa:88:fd:
6e:36:3a:63:52:19:ac:e3:7c:2f:19:72:08:5f:6c:
b8:dd:47:ec:ae:4d:0a:3f:75:43:2a:59:3c:fa:1f:
12:25:cb:38:27:36:80:61:b6:2d:ce:66:0b:66:dc:
6f:df:74:4b:c8:06:b9:8c:7e:83:52:4a:04:4e:2f:
be:d1:66:0b:c7:93:7d:41:aa:ff:3d:93:19:f6:d7:
2c:c4:76:47:b2:b1:4e:46:60:26:02:5c:1a:81:7c:
eb:2e:4e:17:b9:e7:49:cc:f1:58:71:b1:fe:34:0f:
2e:ae:ce:ce:98:52:17:0a:cd:6f:60:4a:3b:ab:3c:
3b:6e:27:3f:4f:08:bb:e0:1e:60:39:2d:30:da:69:
88:22:49:1d:f7:3d:42:43:ff:a3:fb:3c:fa:51:a8:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:AB:82:7E:E0:39:23:BA:6F:DC:89:4C:4F:36:F8:F0:96:F1:C6
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Af6rgn7gOSO6b9yJTE82-PCW8cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.204.222.0/23
103.251.26.0/23
104.36.50.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
ba:cc:e8:87:89:ff:49:a5:aa:a6:7c:b0:2d:eb:1c:0d:68:f0:
59:09:69:e0:9a:37:ec:b4:11:2d:ed:62:be:e6:9d:96:d3:d8:
dd:2d:fe:cc:f2:c2:87:43:35:d9:3f:3f:09:4d:c7:ec:1b:72:
37:6d:e1:44:9d:0b:7a:af:80:36:70:af:ef:b0:6f:9a:da:a9:
29:1a:de:56:2d:7a:cf:9b:60:3a:b1:56:4f:23:36:11:6f:c4:
44:21:ad:da:35:ff:42:26:88:73:14:ff:a6:58:75:5b:2f:1e:
86:22:a6:93:a8:dd:51:27:d0:08:d6:1a:2f:6b:34:09:0e:d8:
1f:dd:ac:87:58:97:67:a4:1a:a6:be:16:3a:a2:b9:3b:c4:b8:
a5:54:38:42:da:d3:25:4f:9b:72:f7:61:1b:99:74:5c:dd:53:
49:a2:c7:ed:bd:95:51:14:59:54:85:10:76:6a:68:e4:bd:95:
30:ac:77:ca:94:99:60:b4:3a:13:62:99:5d:f5:eb:54:53:48:
b7:13:ab:36:2c:55:f2:3b:d7:5f:25:e2:48:ef:89:57:86:ac:
64:f8:fc:f3:95:6b:ba:91:65:eb:dd:65:0c:b5:db:09:52:e7:
24:18:04:87:09:c9:93:a1:02:0e:ba:2f:cf:50:a4:36:e9:07:
8d:40:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:59 2025 by rpki-client