Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/429U1iZKJuMEXmE8xb6TVPt5kEg.roa
File: 429U1iZKJuMEXmE8xb6TVPt5kEg.roa (raw, json)
Hash identifier: pt802S5VVTtKABPKRfMgMN8+Ae/m/MFy2MQSTfhvxBM=
Subject key identifier: E3:6F:54:D6:26:4A:26:E3:04:5E:61:3C:C5:BE:93:54:FB:79:90:48
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0197A624847EC35C2EC9A631683B39022868
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/429U1iZKJuMEXmE8xb6TVPt5kEg.roa
Signing time: Wed 25 Jun 2025 08:11:40 +0000
ROA not before: Wed 25 Jun 2025 08:11:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
80.253.52.0/23 maxlen: 23
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:24:84:7e:c3:5c:2e:c9:a6:31:68:3b:39:02:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 25 08:11:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e36f54d6264a26e3045e613cc5be9354fb799048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:04:bc:33:f1:bc:14:ef:2b:d5:16:91:5c:
cd:bd:4f:b3:20:fd:ae:33:57:2a:b5:67:63:b8:9d:
db:b2:95:cc:20:ac:77:3a:3b:aa:8c:56:e6:42:69:
fe:2d:44:9a:c8:18:71:50:bf:e1:fb:19:8b:7d:16:
b9:36:85:9d:67:17:08:c9:56:b6:52:cc:72:5d:37:
93:56:b7:17:1b:be:a9:7c:93:f3:1b:ce:e1:7d:30:
12:1c:b6:31:56:80:b6:6c:0e:b4:62:9f:73:78:d0:
38:05:fa:df:83:e4:81:43:eb:41:44:0e:78:bc:93:
19:48:f7:57:88:15:8a:0c:70:ca:6b:58:25:71:88:
7c:a9:dd:96:12:a0:ca:56:cc:71:c5:42:40:07:b0:
e3:47:cb:31:d5:51:70:dc:5b:94:34:74:b6:a1:f6:
3e:cc:35:3a:84:a6:bb:f6:95:ca:ec:30:7d:da:5d:
8d:b7:53:8b:bb:ba:06:8e:9a:ce:28:10:55:0e:66:
dd:32:6d:0b:a7:c1:53:26:06:38:9e:7e:b6:58:cb:
75:cf:b7:9d:8e:98:b8:a9:60:a6:88:8a:fc:d4:f3:
c5:01:99:2d:29:ba:fb:2d:c5:08:7d:90:2a:22:0f:
b7:b0:5d:ce:1d:da:1a:08:2e:72:20:6a:21:f8:82:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:54:D6:26:4A:26:E3:04:5E:61:3C:C5:BE:93:54:FB:79:90:48
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/429U1iZKJuMEXmE8xb6TVPt5kEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
1c:fb:31:b8:d6:2f:0d:d0:84:05:36:b2:0f:9c:e8:94:f0:cb:
18:5f:24:06:58:0e:2e:ce:0c:b5:46:5b:90:f6:fc:30:43:45:
6c:ed:d3:8f:a9:10:78:f6:9b:fe:21:fc:fc:b4:f9:42:ab:03:
48:31:b5:b3:e3:4e:c0:ab:6c:39:b7:fa:98:0e:d5:95:c4:2e:
3f:18:94:12:73:54:c6:cd:b8:b3:26:8a:87:c9:63:25:33:19:
1d:db:1e:c4:98:d1:1b:84:e9:11:c2:c1:a3:67:71:4e:3c:27:
da:16:f1:56:92:9c:31:d3:46:87:3e:6e:5a:64:08:ec:ce:f6:
4f:1c:b6:2f:1d:ac:54:79:92:39:74:a5:d3:40:26:a6:06:4a:
57:69:34:9e:fa:ea:a0:5f:27:db:d9:a3:90:50:36:57:14:69:
d1:cb:83:63:14:ed:6c:14:90:6a:76:78:d5:26:38:19:44:cb:
f7:15:8a:f5:cb:8f:cb:d1:4c:55:31:49:d4:e9:23:66:8a:d3:
b8:26:7e:bb:37:aa:2f:6f:7f:b1:6d:28:ab:38:89:85:3c:94:
7c:31:a7:f3:5a:03:76:0e:2b:f5:72:e6:86:40:7a:6f:07:79:
d8:5b:43:82:be:fb:87:e6:26:c4:d1:17:11:ca:ec:f8:27:64:
cc:cc:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:55 2025 by rpki-client