Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/f-F8l0cH9l2JC8CaYCu5zkEyyRY.roa
File: f-F8l0cH9l2JC8CaYCu5zkEyyRY.roa (raw, json)
Hash identifier: ySgIqgk7JZDlXDIu42q8Lk8iY2QRZnL5gTXIvXblACQ=
Subject key identifier: 7F:E1:7C:97:47:07:F6:5D:89:0B:C0:9A:60:2B:B9:CE:41:32:C9:16
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01966D568CC2E2337B620E918B51E28C90F2
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/f-F8l0cH9l2JC8CaYCu5zkEyyRY.roa
Signing time: Fri 25 Apr 2025 14:25:10 +0000
ROA not before: Fri 25 Apr 2025 14:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.94.160.0/19 maxlen: 19
77.94.175.0/24 maxlen: 24
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.150.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
91.197.183.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.135.92.0/24 maxlen: 24
213.135.95.0/24 maxlen: 24
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:56:8c:c2:e2:33:7b:62:0e:91:8b:51:e2:8c:90:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 25 14:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe17c974707f65d890bc09a602bb9ce4132c916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:54:4b:9a:4d:71:97:62:3b:3b:1d:49:24:
68:61:fc:02:c8:a3:02:3e:e3:82:98:03:d1:4c:55:
01:b2:1a:68:de:9a:6d:92:63:b5:2d:fe:5f:9a:38:
a9:e5:64:be:0c:56:3d:d9:82:29:5e:c6:fb:3c:b7:
b5:3a:0f:80:bc:68:0c:f0:c2:26:18:a5:7d:95:da:
28:2b:61:a0:a1:11:43:3a:9a:b6:e0:36:47:38:da:
b5:35:66:f7:ba:0d:ce:6c:02:f3:10:ef:1d:c2:55:
3b:43:ed:b0:d6:b3:7b:ae:47:47:78:6f:b9:70:27:
26:96:d5:56:52:c6:83:cd:17:01:51:b4:5b:08:63:
a4:a3:ab:4a:fd:cd:3b:c0:d9:ff:c4:a9:de:aa:94:
02:bf:49:d7:52:9d:09:d1:99:5a:e2:b1:93:be:f4:
c2:09:d3:1b:f7:dc:40:66:08:52:15:e9:ff:d1:28:
c2:0b:b1:67:d0:70:20:be:6a:6d:5a:3c:1f:e1:39:
36:2f:39:b8:a5:cb:d2:64:6a:f5:1a:fe:17:08:b8:
7b:55:5f:56:99:ff:c9:40:5e:8c:00:6e:d6:be:69:
ce:6b:ae:74:31:a4:ef:6d:d3:69:18:a6:98:21:d7:
19:02:75:05:e6:fc:b0:eb:fc:a4:38:34:af:5d:c7:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:7C:97:47:07:F6:5D:89:0B:C0:9A:60:2B:B9:CE:41:32:C9:16
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/f-F8l0cH9l2JC8CaYCu5zkEyyRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
91.197.183.0/24
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.82.0-213.135.92.255
213.135.95.0/24
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.188.0/22
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
18:ed:9e:d1:a5:78:73:cf:de:a6:f7:c8:ed:05:f5:86:64:72:
69:74:9f:36:a7:98:6c:42:61:8d:3a:9a:e2:bc:53:e8:44:5d:
62:58:50:15:9c:ce:6c:08:94:34:0f:92:34:11:94:45:d0:cb:
2d:49:8d:26:54:b1:a1:8a:4f:13:5d:3c:3b:76:c2:69:04:69:
ea:15:61:42:a3:27:3a:0d:c3:e1:e8:4a:8a:14:d3:06:2e:85:
d5:4d:46:67:56:d6:74:34:18:43:be:64:d9:ed:45:d0:99:db:
83:08:87:ca:b6:89:94:7a:09:ee:44:92:18:9a:ff:28:fc:14:
c6:df:6a:c6:43:4b:53:36:2a:81:eb:4d:de:ff:af:aa:56:ef:
7d:e6:62:4a:4e:bf:89:d8:e7:13:71:a4:a2:34:1d:06:7e:b9:
ef:1c:6a:c1:2d:68:1f:47:62:e2:9f:db:87:47:0d:6e:b0:c7:
20:26:af:b8:c6:71:87:9b:0e:a8:b6:ac:97:48:f7:42:df:21:
09:46:62:58:a0:a8:bd:83:43:93:ec:61:c0:2e:59:3e:71:a3:
cc:87:cf:07:d6:3f:3c:49:13:55:d2:25:5a:88:e9:de:ce:0d:
b1:b4:b0:1b:52:59:02:00:9c:ef:8a:fc:8b:61:9a:b8:56:bb:
59:68:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:32:46 2025 by rpki-client