Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j9ADF_nAOwyBhsERDVosC2n1Fpo.roa
File: j9ADF_nAOwyBhsERDVosC2n1Fpo.roa (raw, json)
Hash identifier: LXdB6yMGYyi9pipjXofhBMLt6YOq/1URK7isEPRaHhg=
Subject key identifier: 8F:D0:03:17:F9:C0:3B:0C:81:86:C1:11:0D:5A:2C:0B:69:F5:16:9A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01968B96FE8970C68E57AF8CB0A61D630803
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j9ADF_nAOwyBhsERDVosC2n1Fpo.roa
Signing time: Thu 01 May 2025 11:24:10 +0000
ROA not before: Thu 01 May 2025 11:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
5.57.210.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.244.0/24 maxlen: 24
31.222.245.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.1.0/24 maxlen: 24
62.3.2.0/24 maxlen: 24
62.3.3.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.68.85.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.211.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
91.242.226.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.109.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
146.19.136.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.25.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.163.20.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
194.104.227.0/24 maxlen: 24
194.104.229.0/24 maxlen: 24
194.104.237.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.30.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:96:fe:89:70:c6:8e:57:af:8c:b0:a6:1d:63:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 1 11:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fd00317f9c03b0c8186c1110d5a2c0b69f5169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:fc:f0:7c:67:a6:bf:bc:0a:9b:7d:6c:d6:
28:38:67:66:a8:26:8a:a3:6f:a7:d8:86:f4:a9:0b:
56:a7:94:4f:49:91:45:bf:d6:c2:fe:c0:dc:7e:1f:
5b:dd:42:e9:7c:2c:52:6e:c0:83:12:77:df:7c:e3:
ed:24:65:e7:28:26:df:92:9d:16:24:24:cb:1f:4b:
63:47:36:49:d1:30:de:4c:34:0e:7e:50:ba:de:58:
85:dd:ad:e2:14:93:3a:7b:35:60:0e:85:c4:4a:fd:
75:b9:4b:7b:2d:f3:88:67:6a:f3:40:30:9e:aa:7c:
dc:c7:e3:d3:91:b8:9b:f7:20:db:a8:3e:58:2b:76:
b0:1c:df:c6:f1:a2:42:08:12:11:66:cc:79:cf:4b:
f6:f8:21:e2:60:f3:eb:5a:5f:81:19:9d:48:0f:65:
d6:b8:d9:83:44:20:fc:1e:9a:d8:f5:d0:d1:3c:56:
5b:3e:f3:22:4e:6d:27:42:6d:e6:50:56:de:b4:73:
1e:45:36:fe:ea:04:a1:28:21:57:ec:c9:30:59:12:
a5:68:ea:0f:e1:43:e7:7f:44:58:99:75:20:1e:c2:
21:94:e7:12:17:85:eb:31:32:33:e5:5a:24:f3:0e:
97:9f:17:60:78:51:ea:24:a1:7b:2b:c3:62:0e:f2:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:03:17:F9:C0:3B:0C:81:86:C1:11:0D:5A:2C:0B:69:F5:16:9A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j9ADF_nAOwyBhsERDVosC2n1Fpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
5.57.210.0/24
31.216.60.0/24
31.222.237.0/24
31.222.244.0-31.222.246.255
37.140.255.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.1.0-62.3.4.255
62.3.23.0/24
62.68.85.0/24
62.106.69.0/24
62.204.34.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.211.0-80.91.212.255
84.246.81.0/24
84.246.110.0/24
89.107.12.0/24
89.248.68.0/24
91.213.85.0/24
91.242.226.0/24
91.242.237.0/24
91.242.239.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/23
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.47.0/24
146.19.61.0/24
146.19.64.0/23
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.109.0/24
146.19.126.0/24
146.19.136.0/24
176.100.47.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/23
176.116.28.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.187.19.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0-193.163.18.255
193.163.20.0/24
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/23
194.104.227.0/24
194.104.229.0/24
194.104.237.0-194.104.238.255
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.30.0/23
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ec:aa:87:62:d0:c8:55:4a:03:0e:80:aa:19:cd:70:83:5e:
2f:60:7e:28:15:5d:18:71:31:3a:81:6e:3a:5d:60:2b:9e:e5:
39:aa:9c:b8:16:c8:8b:85:d6:fa:05:ea:b9:82:70:ee:5f:81:
7f:86:41:17:1c:0b:2f:fe:fc:31:da:67:a9:a4:70:88:f8:e7:
b7:0f:e0:1f:36:be:6b:f5:49:71:23:8b:3d:e5:6c:92:a9:1a:
5a:fc:1a:c4:06:29:93:6f:de:96:9b:e1:fe:2a:76:99:33:67:
96:5a:b9:ef:e0:72:8d:39:9e:44:02:52:c8:cd:04:8b:61:08:
55:a1:4d:4e:b4:79:ad:b5:31:0b:50:4d:82:83:4b:6f:7e:87:
82:ca:12:11:52:c2:8e:f6:a2:e3:62:62:64:77:6b:0f:7b:d9:
bc:68:b0:59:89:57:6a:05:6e:f5:a3:d4:a8:cd:06:19:ab:d0:
97:f2:18:2f:f5:9e:b2:3f:3f:e1:6f:a7:6f:4d:40:c9:6f:90:
c7:a4:87:ca:c2:f5:33:1b:a6:2e:1e:c6:31:aa:46:91:75:e4:
42:0a:1c:23:20:d4:51:56:7e:b6:41:85:89:3b:82:85:a0:1b:
0f:42:64:8d:ed:e7:a1:15:76:f4:ff:7e:b9:f7:32:00:78:e5:
9b:df:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:53:01 2025 by rpki-client