Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/WzdGPQt0K3kv2z4Btb0EfRMIuaA.roa
File: WzdGPQt0K3kv2z4Btb0EfRMIuaA.roa (raw, json)
Hash identifier: 2ZynSAwhPESiBjw3zy7TtsDlnhrlCAImarD99QQG4xg=
Subject key identifier: 5B:37:46:3D:0B:74:2B:79:2F:DB:3E:01:B5:BD:04:7D:13:08:B9:A0
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 0196A0BD6B6AC973332B329A132AAFBAA91B
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/WzdGPQt0K3kv2z4Btb0EfRMIuaA.roa
Signing time: Mon 05 May 2025 13:58:10 +0000
ROA not before: Mon 05 May 2025 13:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
89.40.216.0/23 maxlen: 23
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.227.0/24 maxlen: 24
89.46.80.0/21 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.86.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 22
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bd:6b:6a:c9:73:33:2b:32:9a:13:2a:af:ba:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: May 5 13:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b37463d0b742b792fdb3e01b5bd047d1308b9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:93:64:18:3e:03:5f:de:ad:e4:67:cc:9b:
c2:39:6f:13:00:7c:ce:a7:33:41:b8:1e:f8:fd:96:
f9:77:7a:4f:c8:65:d7:72:e6:e6:5e:c5:11:64:23:
69:9a:14:54:22:34:d4:36:d2:b2:5f:fa:07:03:d4:
18:1e:d7:53:7b:d9:b2:4f:01:1d:a7:11:56:ea:8b:
6d:48:0a:d3:c7:92:1f:57:a0:6f:ec:3f:5b:a5:f0:
20:17:e1:d2:3c:43:ad:ca:4c:98:bf:51:03:1b:4c:
80:cf:37:b9:e9:a9:be:01:67:f4:fe:2d:4b:a4:51:
c5:39:13:a9:ad:29:00:cf:6a:33:b2:99:3e:eb:60:
d8:8d:67:83:29:3c:3b:55:4c:e2:04:51:0c:61:26:
c5:e1:48:d5:23:de:44:8b:fe:4d:d2:ed:d8:82:76:
80:79:eb:8d:79:f0:52:24:07:ca:cb:79:98:59:40:
33:07:a3:3f:f9:90:04:3e:e4:31:ee:df:cc:c6:41:
d4:47:ff:71:e0:0b:96:25:7d:ac:16:98:af:c1:13:
c7:66:b7:a6:c5:7e:81:b1:83:d6:8a:fe:14:ee:ee:
e7:ab:75:36:76:b4:f3:35:07:d7:72:75:4e:eb:3c:
d6:16:85:2f:e1:72:cd:5b:36:f4:7e:cb:37:17:93:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:46:3D:0B:74:2B:79:2F:DB:3E:01:B5:BD:04:7D:13:08:B9:A0
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/WzdGPQt0K3kv2z4Btb0EfRMIuaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.143.0/24
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/23
185.103.51.0/24
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:600::-2a03:b000:8ff:ffff:ffff:ffff:ffff:ffff
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
2a:a4:4d:13:89:3d:8e:b3:17:e7:90:34:62:ca:fc:a6:09:0b:
41:38:99:4c:e1:6e:f9:90:bd:80:9b:1b:00:91:87:81:84:f2:
42:4b:f9:14:24:cc:2a:97:da:ea:85:6c:2c:df:8a:bf:79:bc:
b0:dd:a1:36:36:c1:6f:0a:ba:c8:52:65:b2:a3:47:b4:c9:ed:
0f:e8:14:98:a7:31:92:a0:0c:c5:60:21:84:3e:2d:7f:f2:1f:
31:a0:04:be:d3:fc:4d:25:f5:18:ba:e9:ad:8f:1c:6d:fe:d0:
32:34:72:70:e9:e2:72:49:da:52:b2:4a:cb:43:45:c2:96:3d:
17:34:a9:58:42:50:6c:f2:e5:01:ed:8b:6a:6c:54:f5:00:3a:
ae:7d:36:3d:8c:08:17:02:aa:38:cc:39:9e:9e:98:42:74:5a:
c2:8b:a2:fd:20:28:54:5e:95:c9:c7:1d:db:a5:0a:b2:09:d0:
19:71:8a:d6:89:e5:1f:fb:ec:9c:81:0c:ec:e5:e7:ce:54:82:
ff:ef:9f:a7:42:c5:cd:06:8e:91:ed:b0:a9:8f:b8:59:1b:91:
ae:29:1d:6e:46:b1:fd:78:a9:1f:98:6a:eb:2e:7d:e2:e7:23:
21:df:35:fd:e2:8c:e6:e9:8c:b0:cc:08:dc:51:6f:e1:31:0c:
a1:eb:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:37:11 2025 by rpki-client