Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/CNT3I9RmhU5FhHuRAfyagUP-vm8.roa
File: CNT3I9RmhU5FhHuRAfyagUP-vm8.roa (raw, json)
Hash identifier: 4yz+rE/3sApHTtDg7d7thHudkoZogGYCKjhzS7ZRRis=
Subject key identifier: 08:D4:F7:23:D4:66:85:4E:45:84:7B:91:01:FC:9A:81:43:FE:BE:6F
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 0198C675C88D42D06B495A0D2C244653FCB6
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/CNT3I9RmhU5FhHuRAfyagUP-vm8.roa
Signing time: Wed 20 Aug 2025 07:51:04 +0000
ROA not before: Wed 20 Aug 2025 07:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 5.226.0.0/21 maxlen: 24
31.7.248.0/21 maxlen: 24
31.172.160.0/22 maxlen: 24
31.172.232.0/21 maxlen: 24
37.26.184.0/21 maxlen: 24
37.61.240.0/21 maxlen: 24
37.110.192.0/21 maxlen: 24
37.156.226.0/24 maxlen: 24
46.22.192.0/20 maxlen: 24
46.102.116.0/24 maxlen: 24
46.231.216.0/21 maxlen: 24
46.247.128.0/22 maxlen: 24
46.255.200.0/21 maxlen: 24
77.72.88.0/21 maxlen: 24
77.246.80.0/20 maxlen: 24
78.153.224.0/19 maxlen: 24
82.96.128.0/18 maxlen: 24
82.163.36.0/22 maxlen: 24
82.196.24.0/21 maxlen: 24
85.31.192.0/19 maxlen: 24
87.121.136.0/21 maxlen: 24
88.212.144.0/21 maxlen: 24
89.37.106.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
89.44.210.0/24 maxlen: 24
91.224.162.0/23 maxlen: 24
91.226.193.0/24 maxlen: 24
91.250.244.0/24 maxlen: 24
94.100.160.0/20 maxlen: 24
95.143.64.0/20 maxlen: 24
149.232.160.0/20 maxlen: 24
176.241.120.0/21 maxlen: 24
185.4.60.0/23 maxlen: 24
185.4.62.0/24 maxlen: 24
185.15.140.0/22 maxlen: 24
185.53.80.0/22 maxlen: 24
185.61.184.0/21 maxlen: 24
185.62.184.0/22 maxlen: 24
185.78.156.0/22 maxlen: 24
185.91.224.0/22 maxlen: 24
185.92.36.0/22 maxlen: 24
185.114.100.0/22 maxlen: 24
185.209.52.0/22 maxlen: 24
193.39.119.0/24 maxlen: 24
193.151.84.0/22 maxlen: 24
193.151.84.0/24 maxlen: 24
193.151.87.0/24 maxlen: 24
193.189.124.0/23 maxlen: 24
194.42.100.0/23 maxlen: 24
194.116.142.0/23 maxlen: 24
195.128.147.0/24 maxlen: 24
195.189.186.0/23 maxlen: 24
195.234.35.0/24 maxlen: 24
212.18.240.0/21 maxlen: 24
212.85.229.0/24 maxlen: 24
212.85.230.0/23 maxlen: 24
2a00:68c0::/32 maxlen: 48
2a00:78c0::/29 maxlen: 48
2a01:240::/32 maxlen: 48
2a01:290::/32 maxlen: 48
2a02:398::/32 maxlen: 48
2a03:bdc0::/32 maxlen: 48
2a04:cc00::/29 maxlen: 48
2a0b:41c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:75:c8:8d:42:d0:6b:49:5a:0d:2c:24:46:53:fc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Aug 20 07:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d4f723d466854e45847b9101fc9a8143febe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:22:96:19:54:a6:7a:25:3f:b7:ad:e5:e4:
4a:27:cd:66:cc:04:c0:38:ed:31:c9:38:ce:73:fb:
fb:34:e5:28:c8:53:51:61:0d:f6:b8:44:ac:fc:63:
9a:53:40:88:63:db:45:92:26:d3:0c:c9:51:43:c4:
0e:f0:c6:83:5f:ac:90:24:ba:78:ba:d5:1a:9c:5c:
cb:4e:53:4c:23:a3:90:21:21:0c:c4:48:1d:d5:a6:
a6:25:d0:d8:e3:2c:e3:e0:73:6e:a1:eb:c7:e2:2c:
bb:5c:3c:16:04:e6:7c:e9:71:f9:c9:71:02:d5:75:
26:2a:d2:3a:61:29:b5:b4:d6:4f:ae:8f:f0:68:0f:
07:7c:e5:bf:c0:f2:e7:bc:b7:2a:4a:06:93:ee:ef:
14:00:68:64:94:3a:43:e5:fe:e9:f6:46:e9:89:b0:
3c:53:92:a0:3d:6d:a4:17:59:fe:6b:66:c1:05:bb:
55:17:88:c1:8f:e9:0f:06:17:ef:bc:34:90:7f:c6:
cc:61:3e:95:15:d6:37:f0:00:f1:17:4c:03:03:9e:
95:20:b5:1b:25:bc:c7:ba:33:58:4e:cd:4b:e3:a3:
0a:78:af:3f:51:b7:62:0b:23:b0:2b:b6:58:39:c4:
83:68:02:d1:7a:53:77:6e:6e:26:8f:6e:7a:15:ae:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:F7:23:D4:66:85:4E:45:84:7B:91:01:FC:9A:81:43:FE:BE:6F
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/CNT3I9RmhU5FhHuRAfyagUP-vm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.0.0/21
31.7.248.0/21
31.172.160.0/22
31.172.232.0/21
37.26.184.0/21
37.61.240.0/21
37.110.192.0/21
37.156.226.0/24
46.22.192.0/20
46.102.116.0/24
46.231.216.0/21
46.247.128.0/22
46.255.200.0/21
77.72.88.0/21
77.246.80.0/20
78.153.224.0/19
82.96.128.0/18
82.163.36.0/22
82.196.24.0/21
85.31.192.0/19
87.121.136.0/21
88.212.144.0/21
89.37.106.0/24
89.44.77.0/24
89.44.210.0/24
91.224.162.0/23
91.226.193.0/24
91.250.244.0/24
94.100.160.0/20
95.143.64.0/20
149.232.160.0/20
176.241.120.0/21
185.4.60.0-185.4.62.255
185.15.140.0/22
185.53.80.0/22
185.61.184.0/21
185.62.184.0/22
185.78.156.0/22
185.91.224.0/22
185.92.36.0/22
185.114.100.0/22
185.209.52.0/22
193.39.119.0/24
193.151.84.0/22
193.189.124.0/23
194.42.100.0/23
194.116.142.0/23
195.128.147.0/24
195.189.186.0/23
195.234.35.0/24
212.18.240.0/21
212.85.229.0-212.85.231.255
IPv6:
2a00:68c0::/32
2a00:78c0::/29
2a01:240::/32
2a01:290::/32
2a02:398::/32
2a03:bdc0::/32
2a04:cc00::/29
2a0b:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:93:ca:93:81:4d:7a:37:49:b7:42:19:4e:bb:17:33:9b:57:
9e:b7:f0:41:9f:eb:72:f1:03:55:8c:9b:ae:f5:6f:0b:09:d9:
48:52:35:e7:40:ce:7d:49:d9:23:82:bb:7a:5a:19:00:6b:f7:
ff:fb:89:90:8a:a0:aa:97:e9:b0:f8:10:ca:8f:28:4f:99:d9:
de:3c:2a:0b:07:59:f2:57:77:34:be:5c:f3:2d:a2:61:87:74:
fe:0b:57:98:a4:8a:5b:77:7e:b0:a9:3a:bc:aa:23:35:c6:22:
8e:fa:55:13:89:f4:61:4d:88:7d:db:2a:a3:c0:2a:92:a2:8d:
80:4b:05:9f:b5:fb:70:d4:4c:f8:23:b7:90:2f:e0:48:e8:25:
c6:2d:ce:d7:c1:ee:71:d8:1f:6a:f5:8f:8d:8d:05:9d:f9:91:
81:ba:c6:40:71:47:31:d0:25:8d:67:13:62:56:b6:9f:1a:45:
85:7c:66:bf:8a:30:55:65:32:71:f2:b8:f8:57:08:9f:ca:27:
6a:14:ff:3c:11:cd:59:10:fa:62:24:02:b7:62:3f:8b:f6:93:
ce:88:62:e1:fc:54:3e:f0:f0:0b:5b:55:60:ca:7b:29:09:7e:
87:c9:b2:31:e1:7b:e2:41:75:e4:94:6f:c3:18:ca:53:6e:0c:
79:72:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:29 2025 by rpki-client