Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/gZlK2vLMIEAsCjAAFdQhYLnTPqM.roa
File: gZlK2vLMIEAsCjAAFdQhYLnTPqM.roa (raw, json)
Hash identifier: WQBwiiapFDfFPPCFOl6dNQz1snBkSmuwItWrJm6xS+g=
Subject key identifier: 81:99:4A:DA:F2:CC:20:40:2C:0A:30:00:15:D4:21:60:B9:D3:3E:A3
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 019885021BCFE3A9D520E10F5FBFA621F28A
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/gZlK2vLMIEAsCjAAFdQhYLnTPqM.roa
Signing time: Thu 07 Aug 2025 14:49:24 +0000
ROA not before: Thu 07 Aug 2025 14:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47764
IP address blocks: 5.61.232.0/21 maxlen: 21
5.181.61.0/24 maxlen: 24
5.188.140.0/22 maxlen: 22
37.139.32.0/22 maxlen: 22
37.139.40.0/22 maxlen: 22
45.84.128.0/22 maxlen: 22
62.217.160.0/20 maxlen: 20
83.166.232.0/21 maxlen: 21
83.166.248.0/21 maxlen: 21
83.217.216.0/22 maxlen: 22
85.192.32.0/22 maxlen: 22
87.239.104.0/21 maxlen: 21
89.208.196.0/22 maxlen: 22
89.208.208.0/22 maxlen: 22
89.208.216.0/23 maxlen: 23
89.208.218.0/23 maxlen: 23
89.208.220.0/22 maxlen: 22
89.208.228.0/22 maxlen: 22
89.221.235.0/24 maxlen: 24
90.156.148.0/22 maxlen: 22
90.156.151.0/24 maxlen: 24
90.156.212.0/22 maxlen: 22
90.156.216.0/22 maxlen: 22
90.156.232.0/21 maxlen: 21
94.100.176.0/20 maxlen: 20
95.163.32.0/19 maxlen: 19
95.163.180.0/22 maxlen: 22
95.163.208.0/21 maxlen: 21
95.163.216.0/22 maxlen: 22
146.185.208.0/22 maxlen: 22
146.185.240.0/22 maxlen: 22
176.112.168.0/21 maxlen: 21
178.22.88.0/21 maxlen: 21
178.237.16.0/20 maxlen: 20
178.237.29.0/24 maxlen: 24
185.86.144.0/22 maxlen: 22
185.180.200.0/22 maxlen: 22
185.187.63.0/24 maxlen: 24
188.93.56.0/21 maxlen: 21
213.219.212.0/22 maxlen: 22
2a00:1148::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:02:1b:cf:e3:a9:d5:20:e1:0f:5f:bf:a6:21:f2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Aug 7 14:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81994adaf2cc20402c0a300015d42160b9d33ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:a6:00:1e:7e:3a:1d:15:06:09:67:f4:d3:
71:74:b5:2e:00:d9:39:28:10:48:e2:0b:10:3d:38:
d1:d0:85:bd:86:eb:51:14:bf:6e:31:8b:cd:4d:be:
fe:12:f2:f6:86:de:a4:b7:e3:6c:e2:cd:ce:11:dd:
07:a9:d4:73:da:87:86:c8:70:11:f2:40:03:65:02:
b1:92:96:ca:77:e3:e1:57:4c:e8:bd:ce:9b:06:a4:
d8:44:95:80:ab:d0:52:1a:4e:fd:b4:8d:f8:e9:3a:
39:91:af:fb:eb:dc:b9:6a:79:b2:0b:9f:bb:9b:22:
b0:64:7d:3a:19:ab:c4:ac:bf:f5:93:b7:6e:f4:a5:
c0:47:f1:73:d7:95:c2:e7:09:8a:9e:9e:b9:4c:17:
6d:3c:98:d8:5c:43:26:93:9c:10:1c:3f:07:82:73:
01:03:90:aa:d4:93:d4:2f:6f:27:73:5f:c2:a1:a9:
10:ca:84:91:4f:d3:58:7b:39:45:75:e6:ba:0e:26:
4b:85:3f:8e:46:6b:84:fc:8c:09:54:15:62:eb:94:
bc:e0:11:d2:52:91:d9:bd:12:e1:76:9e:21:7d:1e:
f6:6f:52:39:e6:1e:e8:57:77:77:aa:66:ef:d9:75:
68:ec:ef:67:d6:f9:ec:9c:56:75:3d:ac:58:ee:3b:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:4A:DA:F2:CC:20:40:2C:0A:30:00:15:D4:21:60:B9:D3:3E:A3
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/gZlK2vLMIEAsCjAAFdQhYLnTPqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.232.0/21
5.181.61.0/24
5.188.140.0/22
37.139.32.0/22
37.139.40.0/22
45.84.128.0/22
62.217.160.0/20
83.166.232.0/21
83.166.248.0/21
83.217.216.0/22
85.192.32.0/22
87.239.104.0/21
89.208.196.0/22
89.208.208.0/22
89.208.216.0/21
89.208.228.0/22
89.221.235.0/24
90.156.148.0/22
90.156.212.0-90.156.219.255
90.156.232.0/21
94.100.176.0/20
95.163.32.0/19
95.163.180.0/22
95.163.208.0-95.163.219.255
146.185.208.0/22
146.185.240.0/22
176.112.168.0/21
178.22.88.0/21
178.237.16.0/20
185.86.144.0/22
185.180.200.0/22
185.187.63.0/24
188.93.56.0/21
213.219.212.0/22
IPv6:
2a00:1148::/32
Signature Algorithm: sha256WithRSAEncryption
28:86:6c:8e:08:e3:85:16:29:8f:c1:59:4e:d9:35:5b:6c:90:
9f:9e:80:c9:4e:19:d5:76:3f:6f:02:ed:21:4f:6b:a4:56:c5:
99:70:60:7e:70:f5:3d:3e:91:e8:7c:f2:e7:c3:64:17:b4:6a:
8e:2c:80:1a:a6:e1:0a:81:85:11:5c:b5:bb:68:fc:93:2c:67:
01:6e:62:9d:3e:9b:96:bd:30:be:d8:07:08:26:95:e8:ba:4a:
02:b0:dd:9e:9e:66:2c:aa:0c:7d:f7:50:fc:8a:29:73:11:77:
4b:21:12:74:fc:7a:6a:d0:a7:26:be:fa:56:2e:7d:2e:be:05:
9f:26:00:21:d8:59:ea:95:1f:9d:51:49:dc:b1:e3:ee:88:a7:
92:f7:b2:9c:3a:c1:ce:1d:b4:68:46:a7:9c:a0:1c:6c:f9:5f:
1e:79:75:7a:d7:af:14:e3:5e:4b:3d:3c:39:45:0b:dc:ea:e6:
f0:dc:46:07:92:7b:c7:e1:9b:56:67:f1:e4:4b:db:a4:88:fa:
b9:c3:30:a4:a2:81:5a:20:6a:84:69:37:3c:55:9c:76:7f:46:
f7:78:11:1d:db:50:a0:b5:f5:4e:c0:a1:2e:53:c0:11:a8:63:
04:86:d6:fe:67:7f:7b:d6:89:2b:2f:e4:51:62:bb:fa:e0:16:
e3:0c:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:03:22 2025 by rpki-client