Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tuR7o2WUGM_eQ0EyIkyUfDGZE04.roa
File: tuR7o2WUGM_eQ0EyIkyUfDGZE04.roa (raw, json)
Hash identifier: KsTC8XZ2z/E3MMk/x3qi11yREFJxEelGAhxQiCj22bg=
Subject key identifier: B6:E4:7B:A3:65:94:18:CF:DE:43:41:32:22:4C:94:7C:31:99:13:4E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0197874B875298A72BF36FAFBAC3ED49C2AB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tuR7o2WUGM_eQ0EyIkyUfDGZE04.roa
Signing time: Thu 19 Jun 2025 08:26:03 +0000
ROA not before: Thu 19 Jun 2025 08:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/22 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:4b:87:52:98:a7:2b:f3:6f:af:ba:c3:ed:49:c2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jun 19 08:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6e47ba3659418cfde434132224c947c3199134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:bc:b1:30:f9:0d:03:60:d5:94:a8:e9:d9:
97:01:dd:dc:7f:ff:ee:ca:ed:fd:a9:86:3d:ce:d6:
b1:e4:9f:fb:35:29:9b:93:a3:c0:d1:79:ca:4c:62:
0c:2b:12:5e:63:f6:32:c7:85:8e:63:e8:01:1f:69:
a7:95:da:e9:61:4f:5f:00:b7:b3:41:ea:73:5a:3b:
c5:f0:00:d5:50:2e:23:70:23:69:9a:33:33:ea:d3:
67:b2:00:fa:28:cb:7f:98:22:c7:89:2c:a3:92:c8:
99:02:b2:ff:9c:ca:5b:64:03:4f:c3:0d:91:d5:64:
af:6e:1c:93:71:ae:6e:4a:51:8f:37:de:a1:31:2f:
b4:8e:41:67:7a:54:94:df:d0:dd:f3:50:96:34:2c:
d0:e6:62:8f:af:db:ec:1f:b2:26:aa:a3:00:a6:43:
00:fb:2f:e6:83:03:40:d1:3e:8d:ba:c5:dc:18:b6:
32:d3:bd:a2:47:6a:87:4f:db:2c:84:25:b7:1a:e2:
86:ca:9e:32:38:7a:dd:87:8c:47:32:3e:06:10:b1:
ab:42:d0:98:6a:57:52:bc:ad:e9:05:4f:f2:82:2d:
26:42:aa:29:76:2e:17:9b:e1:97:77:99:33:7d:49:
32:cb:de:cd:d3:f3:f5:0b:6e:e1:5e:4c:2a:a9:b1:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:7B:A3:65:94:18:CF:DE:43:41:32:22:4C:94:7C:31:99:13:4E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tuR7o2WUGM_eQ0EyIkyUfDGZE04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/22
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.30.0/24
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
d5:c0:b0:e2:54:17:fc:a3:96:2e:18:52:0b:dc:15:9c:21:0a:
c7:08:bd:31:c8:e7:56:74:46:9e:d2:f4:24:ee:df:0f:ca:ce:
f7:2d:cc:e0:84:85:c4:a3:b2:24:e0:ae:83:24:2d:5a:1c:8f:
d9:55:c5:67:85:d3:2e:ef:86:45:f3:fc:29:34:1f:e8:f9:78:
f1:48:f1:84:57:50:5f:5a:43:aa:1f:a8:be:d4:f6:fc:a5:fe:
c2:e7:5e:68:0f:68:56:e2:9b:3d:5f:ff:4e:d3:e8:c9:1a:38:
70:0b:f0:ab:ca:bc:8e:e3:d9:d2:9b:b1:3b:4e:cb:e5:37:91:
b1:63:59:d8:d5:5d:50:b4:a2:8f:51:f3:e1:66:df:f9:f2:2d:
2a:c0:1f:7b:3e:23:08:ff:11:cf:96:88:fc:c8:08:37:e6:01:
88:7d:b4:51:4a:3a:ac:13:d9:72:ff:2e:a0:3f:1c:6d:37:64:
df:60:7b:2c:cd:42:24:4f:76:87:60:40:50:e1:5c:82:82:d3:
a8:99:b4:d4:2f:26:82:1b:cd:46:ed:7e:50:5c:ca:9b:77:80:
5a:91:33:43:58:b6:38:76:f1:d6:43:f6:3a:7a:02:79:9c:a6:
8a:1d:3c:0d:fa:58:71:28:e0:ed:8e:f5:27:21:f8:bc:3c:9e:
29:a5:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:59:31 2025 by rpki-client