Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/8tE73tTyc50FXb5YFWLLM8iDRuI.roa
File: 8tE73tTyc50FXb5YFWLLM8iDRuI.roa (raw, json)
Hash identifier: u90hDSgERXDnRD/Za5EPngqSUsaFRKPCGbCgiZ9sIyo=
Subject key identifier: F2:D1:3B:DE:D4:F2:73:9D:05:5D:BE:58:15:62:CB:33:C8:83:46:E2
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 0196482A8D4F97BCC3015712979337102C24
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/8tE73tTyc50FXb5YFWLLM8iDRuI.roa
Signing time: Fri 18 Apr 2025 09:11:10 +0000
ROA not before: Fri 18 Apr 2025 09:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21309
IP address blocks: 5.63.136.0/21 maxlen: 21
77.89.0.0/18 maxlen: 18
77.89.0.0/19 maxlen: 19
77.89.0.0/20 maxlen: 20
77.89.16.0/20 maxlen: 20
77.89.32.0/19 maxlen: 19
77.89.32.0/20 maxlen: 20
77.89.48.0/20 maxlen: 20
83.216.160.0/19 maxlen: 19
83.216.160.0/20 maxlen: 20
83.216.160.0/21 maxlen: 21
83.216.168.0/21 maxlen: 21
83.216.176.0/20 maxlen: 20
83.216.176.0/21 maxlen: 21
83.216.184.0/21 maxlen: 21
86.110.128.0/19 maxlen: 19
86.110.128.0/20 maxlen: 20
86.110.128.0/21 maxlen: 21
86.110.136.0/21 maxlen: 21
86.110.144.0/20 maxlen: 20
86.110.144.0/21 maxlen: 21
86.110.152.0/21 maxlen: 21
185.123.8.0/22 maxlen: 22
185.123.8.0/24 maxlen: 24
185.123.9.0/24 maxlen: 24
188.125.122.0/24 maxlen: 24
213.174.160.0/19 maxlen: 19
213.174.160.0/20 maxlen: 20
213.174.160.0/21 maxlen: 21
213.174.168.0/21 maxlen: 21
213.174.176.0/20 maxlen: 20
213.174.176.0/21 maxlen: 21
213.174.184.0/21 maxlen: 21
213.209.192.0/18 maxlen: 18
213.209.192.0/19 maxlen: 19
213.209.192.0/20 maxlen: 20
213.209.208.0/20 maxlen: 20
213.209.224.0/19 maxlen: 19
213.209.224.0/20 maxlen: 20
213.209.240.0/20 maxlen: 20
2a03:c380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:2a:8d:4f:97:bc:c3:01:57:12:97:93:37:10:2c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Apr 18 09:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d13bded4f2739d055dbe581562cb33c88346e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:ab:cd:46:fe:ba:a3:b0:8c:04:4d:ef:f8:
06:18:28:27:99:21:d6:4a:ab:f1:12:5c:03:94:69:
31:24:7b:f6:8f:da:9a:cf:ca:ff:c4:d0:39:20:a7:
7d:db:68:6b:51:fe:2b:69:d8:31:aa:fc:1a:6d:43:
bd:ad:b0:4c:7d:18:92:5b:e1:91:c5:1d:3c:f7:62:
e1:8b:9c:6f:2b:60:04:73:16:c4:9e:0d:e0:7b:61:
a3:ac:5f:f1:86:79:62:6f:e7:58:9e:e2:7f:44:ae:
b0:8f:2c:1c:01:41:8a:c6:43:20:1c:49:c6:bd:6a:
2a:be:32:0b:66:a1:ed:42:8a:7c:35:75:b4:97:81:
4d:07:5c:7d:32:a7:33:7c:41:55:c9:a4:21:47:62:
a6:d8:c9:34:d1:69:46:da:07:0d:56:2f:2f:01:f7:
a8:cd:02:2a:a7:84:17:d8:57:8d:ff:1a:f6:44:3e:
8d:06:99:a3:ca:f3:47:04:e0:2a:39:91:1f:3b:59:
55:99:57:72:70:ad:29:cc:9b:1a:42:bb:20:4f:7d:
96:bc:46:49:e3:d7:d4:f3:14:87:10:01:70:da:b4:
88:c6:81:a4:98:04:e7:4a:f5:d8:d0:b6:58:99:fc:
24:36:6f:6e:d6:c4:d8:b2:13:38:72:20:2e:ff:e8:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:3B:DE:D4:F2:73:9D:05:5D:BE:58:15:62:CB:33:C8:83:46:E2
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/8tE73tTyc50FXb5YFWLLM8iDRuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.136.0/21
77.89.0.0/18
83.216.160.0/19
86.110.128.0/19
185.123.8.0/22
188.125.122.0/24
213.174.160.0/19
213.209.192.0/18
IPv6:
2a03:c380::/32
Signature Algorithm: sha256WithRSAEncryption
82:e5:6a:53:da:c3:00:b0:5d:9b:28:d4:c5:2f:20:3a:0a:1b:
d2:a7:2a:49:da:0e:cd:f4:68:92:00:f4:17:4d:92:fe:e0:5b:
99:37:85:52:fd:85:24:70:17:df:d8:69:85:fb:f8:77:04:dd:
6c:7f:1b:c0:b2:fa:9e:3a:a6:c7:ae:bd:b9:85:fd:a0:81:9e:
30:d4:f4:ce:47:1c:bc:a6:5c:06:93:08:44:1b:d8:60:ea:82:
8a:9d:66:06:7e:af:c3:fd:45:0f:63:cb:03:55:10:66:73:37:
03:7a:61:57:89:1e:b9:d4:8c:7f:50:aa:b5:c8:ad:32:87:70:
da:7a:64:92:ed:65:c5:74:43:fc:12:27:c8:d2:76:b6:39:ed:
40:5b:99:c0:08:2c:a8:34:f9:be:6b:fe:24:8f:4c:84:4f:ae:
17:fa:60:82:a7:4e:b1:af:3a:21:9b:b9:b2:29:6d:6a:ed:90:
a2:4e:2e:af:c9:e5:f2:d3:0a:2e:d8:e9:a3:97:0d:c3:74:94:
59:cb:18:c6:8a:86:02:e4:86:0c:19:c6:82:4c:f7:6d:b5:7d:
44:ec:01:93:18:5a:43:9e:15:ca:c0:f2:ff:ad:e9:78:f6:b2:
f3:32:f4:5d:22:99:a2:10:ae:1e:32:26:17:c4:80:2b:d4:25:
c0:a6:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:38:00 2025 by rpki-client