Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CgyXTmrehJkc0yDPaeQHfxglrWE.roa
File: CgyXTmrehJkc0yDPaeQHfxglrWE.roa (raw, json)
Hash identifier: p0Ic/0mHPydXp9uGSoh46TR5zdJE46P3O84bf3xtNoQ=
Subject key identifier: 0A:0C:97:4E:6A:DE:84:99:1C:D3:20:CF:69:E4:07:7F:18:25:AD:61
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01973F4D465DCEF2CBBF35357C53F5A723A6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CgyXTmrehJkc0yDPaeQHfxglrWE.roa
Signing time: Thu 05 Jun 2025 08:55:18 +0000
ROA not before: Thu 05 Jun 2025 08:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.169.0/24 maxlen: 24
31.192.171.0/24 maxlen: 24
31.192.179.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
31.192.187.0/24 maxlen: 24
31.192.188.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
87.224.185.0/24 maxlen: 24
87.224.195.0/24 maxlen: 24
87.224.228.0/24 maxlen: 24
87.224.229.0/24 maxlen: 24
87.224.249.0/24 maxlen: 24
87.224.251.0/24 maxlen: 24
90.157.3.0/24 maxlen: 24
90.157.5.0/24 maxlen: 24
90.157.8.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.41.0/24 maxlen: 24
90.157.49.0/24 maxlen: 24
90.157.54.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.64.0/23 maxlen: 23
90.157.66.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.97.0/24 maxlen: 24
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
90.157.116.0/24 maxlen: 24
92.54.66.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.82.0/24 maxlen: 24
92.54.86.0/24 maxlen: 24
92.54.89.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.94.0/24 maxlen: 24
92.54.102.0/24 maxlen: 24
92.54.108.0/24 maxlen: 24
92.54.116.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
92.54.118.0/24 maxlen: 24
92.54.121.0/24 maxlen: 24
92.54.123.0/24 maxlen: 24
92.54.125.0/24 maxlen: 24
92.54.127.0/24 maxlen: 24
94.31.130.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.140.0/24 maxlen: 24
94.31.141.0/24 maxlen: 24
94.31.143.0/24 maxlen: 24
94.31.144.0/24 maxlen: 24
94.31.145.0/24 maxlen: 24
94.31.146.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.148.0/24 maxlen: 24
94.31.151.0/24 maxlen: 24
94.31.155.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.171.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.178.0/23 maxlen: 23
94.31.184.0/23 maxlen: 23
94.31.192.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.198.0/24 maxlen: 24
94.31.199.0/24 maxlen: 24
94.31.201.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.216.0/24 maxlen: 24
94.31.217.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.224.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.234.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.131.0/24 maxlen: 24
188.73.136.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.142.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.146.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.149.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.153.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.159.0/24 maxlen: 24
188.73.162.0/24 maxlen: 24
188.73.165.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.174.0/23 maxlen: 23
188.73.176.0/24 maxlen: 24
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
188.73.188.0/24 maxlen: 24
188.73.191.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.36.0/24 maxlen: 24
213.142.37.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.41.0/24 maxlen: 24
213.142.48.0/24 maxlen: 24
213.142.51.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
213.142.61.0/24 maxlen: 24
213.142.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:4d:46:5d:ce:f2:cb:bf:35:35:7c:53:f5:a7:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 5 08:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a0c974e6ade84991cd320cf69e4077f1825ad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:3e:3c:10:aa:76:12:bc:bc:09:87:27:62:
cf:58:37:fc:e4:19:e4:ec:e4:e8:e1:64:d0:9a:27:
c6:2b:8f:36:b2:e7:ee:b0:b6:86:a4:a1:d6:cc:18:
1f:a9:e4:cd:5d:01:33:94:b5:e0:5d:51:30:9c:0b:
ee:ed:7c:c3:d8:37:69:04:8b:f9:8f:99:d1:fb:f0:
b5:c9:a7:79:3b:f3:55:30:e2:f6:dd:48:d6:65:d6:
05:51:0a:48:47:60:f4:f3:ab:7d:bf:b2:28:b7:26:
9b:0c:35:5c:ba:f2:34:b5:22:6b:38:09:0c:2f:38:
b0:ee:91:7d:b2:ae:f5:1c:6d:93:5e:a4:8c:d6:ca:
5c:1e:db:c2:d5:f1:91:28:32:29:66:92:4f:7f:b4:
3c:f0:0f:c6:9f:b9:9c:33:29:dc:89:32:30:b0:d5:
57:72:b0:70:62:8a:bb:14:2e:be:ed:83:50:a1:73:
91:88:0f:0a:14:8c:7d:21:1e:e4:68:86:28:b6:8c:
88:75:7e:c1:e5:d8:c8:1a:4d:f8:9a:07:ed:38:26:
9f:a2:8c:e3:b8:f4:91:5e:d0:15:7d:95:c4:6d:bd:
66:e7:0f:a7:86:08:9c:ee:d3:d4:e7:a3:f6:91:74:
96:5f:df:8f:1b:7a:d8:78:f2:d0:40:4b:5d:c2:51:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:97:4E:6A:DE:84:99:1C:D3:20:CF:69:E4:07:7F:18:25:AD:61
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CgyXTmrehJkc0yDPaeQHfxglrWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.169.0/24
31.192.171.0/24
31.192.179.0-31.192.181.255
31.192.187.0-31.192.188.255
46.229.96.0/20
87.224.185.0/24
87.224.195.0/24
87.224.228.0/23
87.224.249.0/24
87.224.251.0/24
90.157.3.0/24
90.157.5.0/24
90.157.8.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.41.0/24
90.157.49.0/24
90.157.54.0/24
90.157.58.0/24
90.157.64.0/21
90.157.78.0-90.157.83.255
90.157.97.0/24
90.157.109.0-90.157.110.255
90.157.115.0-90.157.116.255
92.54.66.0/24
92.54.69.0/24
92.54.82.0/24
92.54.86.0/24
92.54.89.0-92.54.90.255
92.54.94.0/24
92.54.102.0/24
92.54.108.0/24
92.54.116.0-92.54.118.255
92.54.121.0/24
92.54.123.0/24
92.54.125.0/24
92.54.127.0/24
94.31.130.0/24
94.31.134.0-94.31.136.255
94.31.140.0/23
94.31.143.0-94.31.148.255
94.31.151.0/24
94.31.155.0/24
94.31.158.0/23
94.31.171.0/24
94.31.176.0/24
94.31.178.0/23
94.31.184.0/23
94.31.192.0-94.31.196.255
94.31.198.0/23
94.31.201.0-94.31.202.255
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.216.0/23
94.31.221.0/24
94.31.224.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0-94.31.234.255
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.131.0/24
188.73.136.0/23
188.73.139.0/24
188.73.141.0-188.73.142.255
188.73.144.0/22
188.73.149.0/24
188.73.151.0/24
188.73.153.0-188.73.154.255
188.73.156.0/24
188.73.158.0/23
188.73.162.0/24
188.73.165.0/24
188.73.168.0/24
188.73.170.0/23
188.73.174.0-188.73.176.255
188.73.183.0/24
188.73.185.0/24
188.73.188.0/24
188.73.191.0/24
213.142.34.0-213.142.37.255
213.142.40.0/23
213.142.48.0/24
213.142.51.0/24
213.142.57.0/24
213.142.61.0-213.142.62.255
Signature Algorithm: sha256WithRSAEncryption
4e:71:a3:46:5b:42:8b:3f:37:c2:f0:d9:dd:ba:2d:e3:fa:6a:
2f:95:21:9d:ec:b2:ab:b3:29:a5:27:40:b8:56:eb:3a:5b:a9:
d6:dc:93:fc:00:e6:fb:85:8a:76:96:d8:c5:b8:27:1e:1f:8e:
72:a6:af:13:5e:7b:eb:a0:11:de:b0:7b:42:9a:1e:92:0d:ad:
c2:49:b2:df:09:29:77:38:08:cd:11:d9:eb:29:b5:83:cc:f2:
c3:f6:94:a9:87:cf:d7:25:d8:2c:fe:02:3f:3d:10:39:81:0a:
00:6e:b8:6b:3d:91:8f:ca:15:3f:8e:55:a7:9d:7d:c6:90:44:
06:25:6e:95:30:d5:53:32:0b:cc:ab:41:27:31:ab:cc:bf:39:
31:55:76:68:96:bf:56:4a:0d:a2:d0:d0:87:67:1c:55:14:4b:
86:61:31:ce:ad:5c:31:5c:51:ad:3e:33:c9:28:48:94:67:98:
39:c7:74:56:a4:7e:57:13:77:16:f5:de:63:47:b9:c0:8d:a8:
41:60:ed:ba:d2:1b:55:8b:61:de:a2:80:4b:0d:4b:78:0d:3b:
66:07:25:c3:4b:a7:82:45:69:4d:8c:8f:8c:4a:eb:64:9d:ec:
78:7f:43:84:3a:ca:a1:17:a3:79:28:89:35:4c:98:9d:2d:4a:
e7:68:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:43 2025 by rpki-client