Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0EZ__zE-BZxZjD_Mlg0WlGEV-0I.roa
File: 0EZ__zE-BZxZjD_Mlg0WlGEV-0I.roa (raw, json)
Hash identifier: ozqVQ4dB4UtowHLJpmlNGDL2Tkt4TtLx+fQzZddItqk=
Subject key identifier: D0:46:7F:FF:31:3E:05:9C:59:8C:3F:CC:96:0D:16:94:61:15:FB:42
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019643E0D6BF5FF6A751FDC817FF5B33C176
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0EZ__zE-BZxZjD_Mlg0WlGEV-0I.roa
Signing time: Thu 17 Apr 2025 13:12:10 +0000
ROA not before: Thu 17 Apr 2025 13:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.169.0/24 maxlen: 24
31.192.171.0/24 maxlen: 24
31.192.179.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
31.192.187.0/24 maxlen: 24
31.192.188.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
87.224.185.0/24 maxlen: 24
87.224.195.0/24 maxlen: 24
87.224.228.0/24 maxlen: 24
87.224.229.0/24 maxlen: 24
87.224.249.0/24 maxlen: 24
87.224.251.0/24 maxlen: 24
90.157.3.0/24 maxlen: 24
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.41.0/24 maxlen: 24
90.157.49.0/24 maxlen: 24
90.157.54.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.64.0/23 maxlen: 23
90.157.66.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.97.0/24 maxlen: 24
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
90.157.116.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.116.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.140.0/24 maxlen: 24
94.31.141.0/24 maxlen: 24
94.31.143.0/24 maxlen: 24
94.31.144.0/24 maxlen: 24
94.31.145.0/24 maxlen: 24
94.31.146.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.148.0/24 maxlen: 24
94.31.151.0/24 maxlen: 24
94.31.155.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.171.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.178.0/23 maxlen: 23
94.31.184.0/23 maxlen: 23
94.31.192.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.198.0/24 maxlen: 24
94.31.199.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.216.0/24 maxlen: 24
94.31.217.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.224.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.234.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.131.0/24 maxlen: 24
188.73.136.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.142.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.146.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.149.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.153.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.159.0/24 maxlen: 24
188.73.162.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.174.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.37.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.41.0/24 maxlen: 24
213.142.48.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:e0:d6:bf:5f:f6:a7:51:fd:c8:17:ff:5b:33:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 17 13:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0467fff313e059c598c3fcc960d16946115fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:7f:ed:db:50:25:e0:39:ad:77:9a:97:ee:
da:16:c9:f7:5f:00:33:39:3a:72:f4:c7:34:bb:a1:
d2:86:90:ee:1e:6d:a8:36:ae:6e:39:2f:60:42:8a:
5c:35:bc:fc:02:1d:88:29:aa:e5:40:0c:26:26:b7:
07:41:49:d8:e6:5a:80:19:71:bd:4c:00:6b:c2:6a:
9e:67:34:5e:c3:13:bd:c0:e3:77:c6:3f:d1:78:74:
7b:d7:a8:f3:26:a9:36:5c:d6:a7:e3:42:c0:3c:d1:
e9:39:8b:4c:4c:49:5c:e4:0a:9d:59:e7:50:79:00:
88:3f:b5:2f:cb:e0:e6:a3:c3:8d:0c:d1:9f:73:fa:
04:02:b6:04:49:bb:b6:91:2d:61:01:ef:41:80:a5:
3f:2a:a7:b3:15:c3:e1:56:f8:8f:b4:ac:77:b2:ee:
d8:99:97:26:1e:c3:96:a4:24:ff:38:2c:0a:e8:3a:
8e:9d:e9:20:29:fc:fb:09:c0:c8:eb:0f:3e:85:96:
8f:03:41:cc:38:ff:f6:84:77:f6:25:92:a7:d4:3c:
57:cf:cb:b8:42:7f:80:f9:fe:2b:cb:c4:96:a5:14:
8b:e8:15:fe:12:59:57:43:3d:12:cc:d9:2a:f2:14:
c7:8c:62:70:6d:bc:4f:91:fa:fd:16:cc:00:66:f9:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:7F:FF:31:3E:05:9C:59:8C:3F:CC:96:0D:16:94:61:15:FB:42
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0EZ__zE-BZxZjD_Mlg0WlGEV-0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.169.0/24
31.192.171.0/24
31.192.179.0-31.192.181.255
31.192.187.0-31.192.188.255
46.229.96.0/20
87.224.185.0/24
87.224.195.0/24
87.224.228.0/23
87.224.249.0/24
87.224.251.0/24
90.157.3.0/24
90.157.5.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.41.0/24
90.157.49.0/24
90.157.54.0/24
90.157.58.0/24
90.157.64.0/21
90.157.78.0-90.157.83.255
90.157.97.0/24
90.157.109.0-90.157.110.255
90.157.115.0-90.157.116.255
92.54.69.0/24
92.54.90.0/24
92.54.116.0/23
94.31.134.0-94.31.136.255
94.31.140.0/23
94.31.143.0-94.31.148.255
94.31.151.0/24
94.31.155.0/24
94.31.158.0/23
94.31.171.0/24
94.31.176.0/24
94.31.178.0/23
94.31.184.0/23
94.31.192.0-94.31.196.255
94.31.198.0/23
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.216.0/23
94.31.221.0/24
94.31.224.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0-94.31.234.255
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.131.0/24
188.73.136.0/23
188.73.139.0/24
188.73.141.0-188.73.142.255
188.73.144.0/22
188.73.149.0/24
188.73.151.0/24
188.73.153.0-188.73.154.255
188.73.156.0/24
188.73.158.0/23
188.73.162.0/24
188.73.168.0/24
188.73.170.0/23
188.73.174.0/23
188.73.183.0/24
188.73.185.0/24
213.142.34.0/23
213.142.37.0/24
213.142.40.0/23
213.142.48.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4f:48:90:87:51:5c:cb:f6:2d:fc:83:54:49:55:f3:da:9b:
2f:98:d6:a5:67:7e:34:05:7b:27:df:70:f6:a6:d2:6c:73:83:
ba:76:9e:4b:34:d9:c3:ff:71:9b:e3:75:fe:66:25:e1:85:30:
60:5d:37:31:be:56:0f:48:b3:f1:3d:7a:91:36:36:a4:b6:09:
80:68:a2:aa:7b:ff:6a:20:11:65:2a:a8:12:31:77:74:8b:b4:
14:cb:b3:6c:f4:b8:07:54:3a:f7:79:82:9d:e5:9e:48:a4:cd:
f7:d5:77:44:ba:a7:b1:87:42:a4:6e:89:70:ef:82:7e:0c:0a:
63:d1:35:66:a9:6c:26:35:47:60:e0:1b:29:2d:db:ee:61:67:
ee:17:70:75:8d:25:b0:a6:f7:50:6d:1c:d4:ff:5c:86:3a:f2:
4d:13:83:39:7b:a5:91:07:55:ed:98:8a:82:a5:c5:29:6e:43:
ac:e9:b7:51:e9:f7:54:0f:c8:76:6c:11:38:ba:dc:38:65:57:
3d:53:a2:8c:a9:e7:ef:f9:8d:3b:1e:f8:78:52:42:f5:99:6c:
fd:47:e5:20:b7:1b:bc:c2:ba:0d:3a:ca:01:c2:8a:ef:ed:0e:
5e:0e:0e:3e:a0:d8:39:ca:31:34:2c:91:5b:0a:13:3c:41:c3:
a5:5c:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:32:52 2025 by rpki-client