Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/CGPP8HhjMW_RZkE7DV2Keb_-LHY.roa
File: CGPP8HhjMW_RZkE7DV2Keb_-LHY.roa (raw, json)
Hash identifier: BwYMxlq5FSbj/DRTEs1ojEz4ScbmF9CAybLJxeuJX1Q=
Subject key identifier: 08:63:CF:F0:78:63:31:6F:D1:66:41:3B:0D:5D:8A:79:BF:FE:2C:76
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0199A396A45E419716EE75021CBCBB68BFE5
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/CGPP8HhjMW_RZkE7DV2Keb_-LHY.roa
Signing time: Thu 02 Oct 2025 06:23:02 +0000
ROA not before: Thu 02 Oct 2025 06:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.210.34.0/24 maxlen: 24
88.210.35.0/24 maxlen: 24
88.210.52.0/24 maxlen: 24
88.210.53.0/24 maxlen: 24
88.210.54.0/24 maxlen: 24
88.210.55.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
91.184.246.0/24 maxlen: 24
91.184.247.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.130.131.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
212.118.45.0/24 maxlen: 24
212.118.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:96:a4:5e:41:97:16:ee:75:02:1c:bc:bb:68:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Oct 2 06:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0863cff07863316fd166413b0d5d8a79bffe2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:1f:67:4c:6d:1b:33:4d:b1:45:da:a5:ae:
ae:80:af:3f:4f:21:27:a5:0a:58:d8:85:70:0c:aa:
53:44:6c:6f:d9:5d:c2:c3:5b:8e:68:dc:e9:ed:7e:
b5:c1:c9:e9:2d:d2:87:c5:94:5e:89:ca:86:eb:5e:
a2:a5:c2:2d:ea:f4:3f:03:1c:bd:fe:a9:d7:0f:31:
52:b6:e3:e3:d2:b6:88:d8:78:cd:ba:cf:8c:9a:48:
2c:7f:05:03:03:40:54:68:89:39:07:4d:c1:fc:b6:
5a:58:4c:6e:a3:9e:8b:4a:39:cf:d5:e7:7b:86:2a:
3d:bf:3c:6a:ad:0e:cc:6a:66:da:ee:75:16:d1:6f:
41:79:5e:64:3c:19:1f:d3:2a:7e:63:67:f0:ee:89:
83:b6:69:fd:27:2f:88:da:3a:3f:bb:86:d1:ac:33:
38:13:0b:5b:9b:aa:75:90:18:91:37:d0:ef:6f:d1:
cb:4a:8d:7f:59:fd:51:f8:ae:6c:b1:03:f9:51:fc:
4e:5f:25:ad:64:40:94:04:49:58:5a:c3:87:87:04:
ad:b9:60:b4:61:c6:df:47:5c:ff:7c:36:d5:ce:0f:
7e:e7:b9:5d:81:c5:16:e7:0f:7a:c9:d1:fa:79:b0:
b7:de:27:93:db:37:f1:2d:cd:70:c2:21:34:41:68:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:CF:F0:78:63:31:6F:D1:66:41:3B:0D:5D:8A:79:BF:FE:2C:76
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/CGPP8HhjMW_RZkE7DV2Keb_-LHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.210.34.0/23
88.210.52.0/22
88.218.60.0/22
91.142.72.0/22
91.184.244.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
178.20.40.0/21
178.130.131.0/24
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
212.118.45.0/24
212.118.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5e:99:57:82:22:80:68:d7:e1:5d:28:c8:0e:5a:ec:cf:1e:
87:f3:21:1d:2f:58:62:06:7d:fd:b7:32:ee:f7:bc:be:b4:36:
38:bd:be:c0:fe:37:df:79:97:f0:cf:27:f2:84:88:44:4a:46:
2f:30:be:89:48:3a:e5:5f:c1:3b:01:7a:9c:87:eb:23:66:db:
b3:73:b3:0e:62:57:51:49:bd:f0:c7:4c:cf:35:7f:62:d9:82:
e7:66:81:cf:4a:ab:59:c0:30:3e:3d:be:1b:98:9e:64:e7:76:
be:db:24:49:22:9d:e9:34:e0:3d:cb:87:6a:fb:c0:c4:72:6a:
b8:e0:d0:02:22:df:af:97:2c:4f:fd:77:2e:8e:f0:7a:90:d0:
2c:85:51:8a:29:bb:61:0c:84:e4:66:ab:8f:d1:5a:e0:11:c1:
72:ff:23:8c:22:74:f4:7f:c8:d8:7a:b0:0a:c8:40:76:4c:9d:
fb:a8:35:b6:bd:c7:46:e1:bd:97:48:a7:94:d8:a8:c5:7f:a6:
e6:bc:61:9a:b8:62:e8:be:94:97:08:2a:c8:d7:52:a2:a9:5d:
7d:6f:bb:c3:31:36:2d:9e:02:70:42:fc:c0:62:45:c1:81:3b:
b5:0c:ac:ce:3a:cc:63:7b:e4:7c:17:e3:85:60:31:e0:67:09:
8b:30:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:05 2025 by rpki-client