Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/JDg5pnuBYnMYrz2b4bhEcsSMjhY.roa
File: JDg5pnuBYnMYrz2b4bhEcsSMjhY.roa (raw, json)
Hash identifier: JrOCyN26LRkftj4uemRvhd9/88LW/oSbsqF9jvrHtnw=
Subject key identifier: 24:38:39:A6:7B:81:62:73:18:AF:3D:9B:E1:B8:44:72:C4:8C:8E:16
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0197C1805765869F099ED18C55694810886D
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/JDg5pnuBYnMYrz2b4bhEcsSMjhY.roa
Signing time: Mon 30 Jun 2025 15:41:42 +0000
ROA not before: Mon 30 Jun 2025 15:41:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21267
IP address blocks: 5.39.176.0/21 maxlen: 24
5.159.208.0/21 maxlen: 24
5.181.72.0/22 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
80.87.16.0/20 maxlen: 24
83.150.252.0/22 maxlen: 24
85.95.96.0/19 maxlen: 24
87.236.128.0/21 maxlen: 24
88.151.152.0/21 maxlen: 24
89.38.120.0/21 maxlen: 24
91.143.64.0/20 maxlen: 24
92.42.120.0/21 maxlen: 24
93.115.176.0/20 maxlen: 24
94.142.168.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
176.58.0.0/21 maxlen: 24
185.52.144.0/22 maxlen: 24
185.79.184.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.178.218.0/24 maxlen: 24
185.178.219.0/24 maxlen: 24
185.182.0.0/21 maxlen: 24
185.182.200.0/23 maxlen: 24
185.204.212.0/22 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.253.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.248.255.0/24 maxlen: 24
188.94.16.0/21 maxlen: 24
188.94.19.0/24 maxlen: 24
188.94.21.0/24 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
217.145.128.0/20 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a0d:7680::/29 maxlen: 29
2a0e:a1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:80:57:65:86:9f:09:9e:d1:8c:55:69:48:10:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jun 30 15:41:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=243839a67b81627318af3d9be1b84472c48c8e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:d7:02:0e:7a:48:13:b1:ef:a9:10:f9:0c:
dc:20:10:b2:de:ca:e5:62:ef:28:71:6c:f9:36:b6:
60:c7:2c:44:3e:47:96:e6:83:cb:39:a5:cf:df:6e:
e4:7d:13:41:09:68:ea:0d:52:cc:64:40:d8:9a:52:
0e:d4:4c:02:92:a5:ed:44:7c:43:fc:68:76:fb:7a:
b4:6c:51:e8:53:35:f6:6e:c0:25:d0:7e:26:2b:d8:
bb:61:63:fc:2f:f0:29:bd:04:e8:a5:71:31:c9:6a:
6c:f5:d4:13:5c:cb:47:33:77:d3:9e:37:c6:6b:99:
ad:28:ed:92:6a:b9:a7:bc:6f:eb:43:15:28:d6:7e:
1b:7e:13:2e:f9:88:38:47:dc:06:bc:35:01:69:e0:
4b:6b:8b:f1:e2:68:f8:81:38:1f:3a:7b:4c:7b:bb:
90:1c:d6:32:d8:82:48:5c:fb:ab:af:e5:f2:fa:08:
80:bc:3d:49:8a:f4:e2:23:ad:67:7a:d8:d0:27:3b:
0a:dd:f9:b7:29:22:5d:68:8e:9c:95:66:d0:19:19:
93:52:6f:4d:8e:1a:2b:db:ae:4a:f2:2e:b2:4c:69:
5e:7b:ff:14:b8:71:5a:16:0e:b1:7d:5f:45:05:1e:
36:7d:55:f6:0e:14:72:91:73:75:37:03:76:34:bc:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:39:A6:7B:81:62:73:18:AF:3D:9B:E1:B8:44:72:C4:8C:8E:16
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/JDg5pnuBYnMYrz2b4bhEcsSMjhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.176.0/21
5.159.208.0/21
5.181.72.0/22
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
45.137.44.0/22
80.74.240.0/20
80.87.16.0/20
83.150.252.0/22
85.95.96.0/19
87.236.128.0/21
88.151.152.0/21
89.38.120.0/21
91.143.64.0/20
92.42.120.0/21
93.115.176.0/20
94.142.168.0/21
95.129.64.0/21
176.58.0.0/21
185.52.144.0/22
185.79.184.0/22
185.90.0.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.182.0.0/21
185.182.200.0/23
185.204.212.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
217.145.128.0/20
IPv6:
2a00:f1c0::/32
2a0d:7680::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:2b:2c:39:db:aa:35:bc:2b:ac:df:1c:4e:1e:5c:fd:e2:bb:
06:43:45:54:c0:de:0c:ee:12:d8:ca:c8:ec:3b:02:74:00:fb:
6f:52:b1:14:fb:ca:14:96:7c:f0:56:7b:49:b7:c7:09:e9:9e:
70:d7:9b:c5:1a:fc:d3:4e:fe:a0:a8:e3:3a:ba:e1:ac:cc:c8:
27:5e:80:65:d3:a5:82:20:75:95:ae:45:f6:d7:f6:ce:6e:57:
49:33:0e:27:0c:6d:6e:7d:6a:5a:85:f0:8b:5b:09:ae:ff:5f:
6f:da:c7:18:16:3f:eb:4d:68:5d:cb:33:02:7c:50:40:4d:0c:
7f:c7:d3:e9:d1:11:a7:5e:b0:a1:51:bd:1d:81:31:e5:48:4a:
01:ca:4d:ee:22:22:4a:be:d0:70:9d:57:3d:c7:e3:cf:7b:43:
48:d0:05:14:00:ba:98:2e:cf:fd:17:f5:08:e9:bc:42:a0:f5:
db:ec:cc:14:d0:46:76:5c:c5:63:26:70:d4:d8:e1:79:1d:f7:
94:a0:05:5e:bb:49:b1:90:3a:ac:44:86:7d:c4:bc:df:fd:02:
fd:1a:76:ba:3f:11:88:ef:de:40:b9:00:28:59:2b:a3:33:fe:
48:99:78:72:e7:a1:54:89:e3:48:94:dd:a3:bf:bb:09:f9:ff:
82:44:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:06:43 2025 by rpki-client