Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8rC5KACpXHxTX33_V-TJVV6e2kw.roa
File: 8rC5KACpXHxTX33_V-TJVV6e2kw.roa (raw, json)
Hash identifier: MGhlHHTS2Sm1Rr0tkLszVM0ctGniCsswsBgGpFWkkSY=
Subject key identifier: F2:B0:B9:28:00:A9:5C:7C:53:5F:7D:FF:57:E4:C9:55:5E:9E:DA:4C
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0196022C748D2A83BB83BF65EBAE4CCC7CA8
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8rC5KACpXHxTX33_V-TJVV6e2kw.roa
Signing time: Fri 04 Apr 2025 18:59:49 +0000
ROA not before: Fri 04 Apr 2025 18:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.54.136.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 24
89.38.68.0/24 maxlen: 24
89.38.69.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.170.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.28.252.0/22 maxlen: 24
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:2c:74:8d:2a:83:bb:83:bf:65:eb:ae:4c:cc:7c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Apr 4 18:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b0b92800a95c7c535f7dff57e4c9555e9eda4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:6f:7c:68:44:a8:4f:90:2e:3a:c4:4d:4a:
0f:bf:70:b9:c2:85:ad:2b:d4:ae:f9:65:5e:2f:bc:
9b:f6:12:27:88:9a:91:e2:c5:a8:f9:2f:be:cd:1b:
b6:78:8b:e2:45:79:2a:2a:28:3f:7d:71:27:72:6c:
18:09:a4:91:7a:3a:34:2c:ec:18:f9:00:a4:ef:39:
93:b0:81:80:30:d4:d3:2a:2c:b7:9b:5e:24:bf:d0:
bc:d1:3d:21:1a:68:92:95:fd:8d:8f:b5:22:f3:2f:
66:c3:9f:b8:d9:5f:c5:c5:b5:e3:12:0b:8b:79:e9:
64:77:8e:12:7f:56:cc:14:23:45:ac:a7:1e:d7:70:
d1:24:db:92:dc:1b:76:73:f9:34:da:fb:1c:c9:2a:
39:8c:3a:ee:b1:01:16:4c:c8:42:0a:0f:e9:78:8e:
2d:f8:ee:85:25:08:02:bd:92:c6:74:c2:44:a1:a8:
6c:9b:ee:3b:c9:23:c3:ba:5f:e2:29:84:5e:ca:89:
ae:e1:c2:d7:34:08:4a:b0:39:a3:70:80:14:36:4f:
90:e7:ae:eb:94:49:b8:e7:a4:27:b4:34:60:67:3c:
35:7d:53:5d:cc:58:18:97:e7:b9:0e:b8:2c:f0:86:
36:45:ff:5c:3c:23:53:51:1f:3f:d9:48:83:11:6a:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:B9:28:00:A9:5C:7C:53:5F:7D:FF:57:E4:C9:55:5E:9E:DA:4C
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8rC5KACpXHxTX33_V-TJVV6e2kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
f0:bd:1b:c5:e0:f1:23:87:75:af:01:42:3b:38:82:5e:d6:d7:
55:e9:cd:10:47:38:34:13:d6:fd:1b:9c:22:92:96:14:ca:ea:
c0:b7:1d:ba:2f:89:4d:d4:8d:a7:df:51:77:21:67:7b:5c:9e:
6a:e4:00:9b:8a:6e:39:60:95:0b:52:64:dc:8d:ed:71:db:24:
2c:7b:40:08:d8:b2:46:4d:84:24:24:e0:35:0f:82:e6:98:45:
91:39:4c:a5:5d:5f:72:d0:2a:8d:3e:2e:48:2c:29:12:9c:6d:
75:f5:0b:2b:73:d0:e7:9c:14:f1:03:4a:3c:52:13:b1:c5:9f:
70:c0:44:48:89:83:8a:da:3c:c1:ba:9c:5a:49:9c:03:ef:35:
48:89:42:ea:b7:7a:22:1a:72:0e:9a:1e:27:48:36:ee:1f:99:
ef:64:10:18:e4:b8:b6:10:56:f9:63:c3:c8:79:fc:40:cc:1c:
02:6a:35:6f:5a:95:fd:42:7d:c6:78:95:c5:f2:83:a0:d1:49:
a2:28:99:d8:94:5b:bc:1f:bd:ce:64:f1:8c:84:d3:4f:6e:5c:
c9:30:0c:b7:f1:71:59:f1:ae:ee:6e:c6:61:5d:d4:e3:34:bb:
cc:5a:be:a8:ae:7f:43:0c:5b:d2:7f:3b:11:85:f5:d4:b5:1f:
31:ca:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:14 2025 by rpki-client