Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/25Bx_hA7EMFbc9ngwGvBrr0ZR8k.roa
File: 25Bx_hA7EMFbc9ngwGvBrr0ZR8k.roa (raw, json)
Hash identifier: pQ/iMCbhIJukXeXznFT7k4P2zepLmcfCy8Id/eYB/uU=
Subject key identifier: DB:90:71:FE:10:3B:10:C1:5B:73:D9:E0:C0:6B:C1:AE:BD:19:47:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196C3C71B349A09A0E0AF1016E7B4A6F8AF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/25Bx_hA7EMFbc9ngwGvBrr0ZR8k.roa
Signing time: Mon 12 May 2025 09:15:27 +0000
ROA not before: Mon 12 May 2025 09:15:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.31.192.0/22 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
195.178.111.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:c7:1b:34:9a:09:a0:e0:af:10:16:e7:b4:a6:f8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 12 09:15:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db9071fe103b10c15b73d9e0c06bc1aebd1947c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:0c:91:fb:2b:3e:bf:b6:8b:ec:4a:ca:7f:
45:50:f3:9e:21:39:27:ef:e6:81:13:f5:d4:8f:95:
e5:28:7b:d8:5c:c8:6c:8e:f7:fc:2e:99:1c:aa:a5:
77:b5:18:f2:73:7c:4e:35:79:44:66:ca:c8:e8:ad:
3d:db:1e:3a:c7:c3:c3:af:9d:9a:d2:39:b7:78:96:
2b:db:f7:2c:1b:53:78:56:3e:14:c7:78:ee:5a:10:
4f:32:1b:d7:78:37:f1:f8:ab:ef:d3:1e:94:39:4d:
a0:d4:23:cb:e7:16:b2:8c:7c:78:51:36:b8:e8:c0:
61:3d:c1:eb:46:cd:d4:69:62:1c:24:89:c2:9d:10:
ff:29:13:3f:70:f4:e2:51:96:8f:6b:ea:75:c2:bb:
c8:3c:c3:6b:c2:88:41:e4:d0:8c:64:22:ef:55:31:
b1:51:27:5a:80:5a:3b:44:9c:a2:f3:21:92:e4:c4:
72:90:ec:35:14:75:c9:63:b9:c3:14:08:87:d2:6e:
f3:bc:10:ae:d5:7a:8c:57:69:bb:54:7f:f7:20:c2:
d3:32:e1:16:db:c0:52:ad:db:f2:b5:c3:b5:87:bc:
e4:84:5c:a4:79:65:33:7b:b2:8f:e3:52:d2:12:ac:
29:f2:cf:2a:c1:92:a6:e6:20:15:1d:eb:72:59:65:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:90:71:FE:10:3B:10:C1:5B:73:D9:E0:C0:6B:C1:AE:BD:19:47:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/25Bx_hA7EMFbc9ngwGvBrr0ZR8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.31.192.0/22
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.126.0/23
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.165.0/24
91.92.70.0/24
92.119.196.0/23
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
193.222.96.0/24
194.55.186.0/24
194.169.172.0/24
194.169.175.0/24
195.178.111.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:40:17:54:9a:a7:7d:56:28:8e:26:ce:9a:43:a2:53:ae:55:
6c:07:02:ff:cf:e4:8c:52:28:fe:39:6d:af:8f:85:70:ea:7a:
ce:f8:30:98:11:cf:62:3b:cf:30:ea:df:ed:2a:98:ce:0b:62:
5e:c7:1c:31:ef:f4:f3:d4:e2:72:2a:eb:57:af:08:d5:64:3a:
14:b3:2f:56:58:2c:a2:9e:cb:8d:83:aa:aa:eb:e3:cf:b0:6a:
ad:41:54:97:2b:c9:1b:95:65:9b:bd:9f:5b:05:fb:3b:6e:a7:
94:5c:af:16:24:4c:8a:74:5a:09:8d:4c:1e:b2:fd:dc:06:81:
b0:63:9a:a7:8e:ec:c0:e6:ac:41:55:b3:d5:aa:18:82:01:4d:
ae:82:9a:72:29:2e:1a:93:3f:c5:fb:f9:70:0c:7b:4d:7e:4a:
c0:f0:c0:b8:b8:ca:03:c7:5e:25:cc:84:61:b5:b7:b4:fa:e4:
ae:5a:aa:b5:ec:8e:84:9e:8f:d8:82:6f:df:33:bc:bc:68:3d:
a0:a2:43:50:7b:cd:cc:8d:d4:48:ff:95:a9:6c:73:8b:0a:8f:
51:2f:3b:3c:c3:38:75:95:4a:f7:ce:08:8f:2a:80:52:6b:74:
fc:27:06:77:55:b9:0e:bd:8a:86:18:e2:ac:6f:57:a6:4f:1b:
97:3c:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:44:20 2025 by rpki-client