Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/ELVDoYmFaTCtnTMhAqZufMc8mXg.roa
File: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (raw, json)
Hash identifier: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=
Subject key identifier: 10:B5:43:A1:89:85:69:30:AD:9D:33:21:02:A6:6E:7C:C7:3C:99:78
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01966DCBBBB689F6A883A13E383B1B1DCA30
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/ELVDoYmFaTCtnTMhAqZufMc8mXg.roa
Signing time: Fri 25 Apr 2025 16:33:10 +0000
ROA not before: Fri 25 Apr 2025 16:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:cb:bb:b6:89:f6:a8:83:a1:3e:38:3b:1b:1d:ca:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Apr 25 16:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b543a189856930ad9d332102a66e7cc73c9978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:a3:ab:eb:00:9c:5e:51:b7:e6:11:c4:d7:
0b:dd:3f:7b:32:9c:e1:4e:5d:9f:03:e0:16:1b:ff:
63:eb:5c:b5:da:c2:80:95:ff:0f:aa:1b:bc:06:c1:
28:5b:ad:91:49:28:1c:6d:b2:12:61:68:9d:5a:fe:
0e:53:e1:fd:16:7d:1a:6f:7d:ad:18:d0:6b:3f:a1:
02:0c:41:8a:e8:fc:0a:96:fa:89:eb:c4:7d:ea:1d:
21:7f:95:a7:b7:86:48:03:08:f4:9c:90:94:1c:4a:
d7:dc:90:be:eb:e8:50:fc:4a:fc:61:c5:24:3e:f0:
b9:55:23:b3:69:a4:91:4a:29:4f:85:f7:95:c7:d1:
26:e8:43:ab:af:67:15:fb:5f:88:59:a1:65:78:ed:
af:2a:0b:07:e1:f9:e6:74:00:8d:15:7b:bb:1f:2f:
48:6b:2e:15:7d:37:30:01:0e:41:5f:b6:71:d8:25:
81:25:9e:a3:f9:08:0d:8b:4f:78:3a:be:f2:6a:1f:
17:2e:3d:df:90:24:23:99:70:df:02:af:b2:d3:df:
89:3a:02:49:66:b6:97:27:5e:13:bf:fe:30:b1:16:
52:ae:3e:c4:21:94:7e:53:50:e9:86:55:d6:9c:44:
0c:37:8a:29:40:87:01:f9:d7:0d:95:87:8b:ab:8a:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B5:43:A1:89:85:69:30:AD:9D:33:21:02:A6:6E:7C:C7:3C:99:78
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/ELVDoYmFaTCtnTMhAqZufMc8mXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0-86.48.197.255
86.48.208.0-86.48.225.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:e4:38:7e:61:42:73:c1:ec:6a:4d:49:ad:6f:31:6c:e7:ed:
e8:8b:0d:d9:d1:7a:28:51:71:4b:9b:23:2a:6b:1d:80:50:75:
aa:4f:b4:cc:d2:9f:05:2e:b3:e6:67:2f:29:7a:6f:e3:41:01:
6a:e2:97:8d:77:30:b8:34:60:b5:53:54:aa:9d:12:45:d8:3a:
b6:3b:c7:94:41:e6:b5:8c:fb:0d:40:58:55:cd:05:f5:40:c5:
d1:74:bd:33:4b:9c:7c:91:7b:e9:f0:87:d3:56:10:e4:96:a1:
45:76:6f:05:a1:6d:53:55:46:71:42:21:f7:32:94:c4:09:c4:
fe:92:47:fa:00:d3:38:77:72:5b:4b:19:42:ae:f6:b3:91:6f:
1f:16:6a:74:39:a9:fd:78:4e:7f:71:6f:89:14:08:b4:be:7b:
42:54:39:e7:06:0e:4f:79:f1:d8:e4:f9:c0:bf:01:65:2a:8f:
bb:84:c6:a8:5b:c4:df:5d:cc:d7:00:3e:af:48:e5:98:41:83:
61:49:ae:36:72:7b:8b:62:51:65:07:0a:cf:20:c3:0a:dd:1c:
ed:34:7b:aa:bc:e3:50:58:f5:01:f9:54:bc:f9:2d:34:ce:e7:
1a:e9:45:7b:d0:44:70:7b:d3:3f:b0:8c:df:0a:4f:3f:86:cb:
00:85:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:02:14 2025 by rpki-client