Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/r2Z-6B7wzSFh8CFa58Ppt1a-Jd0.roa
File: r2Z-6B7wzSFh8CFa58Ppt1a-Jd0.roa (raw, json)
Hash identifier: xfkbqEdmN7XjFZmN6oSuaNI7G5H9sMv6GRd/iC9k870=
Subject key identifier: AF:66:7E:E8:1E:F0:CD:21:61:F0:21:5A:E7:C3:E9:B7:56:BE:25:DD
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0198B327C3D2C579466CABA92C35B5921AA7
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/r2Z-6B7wzSFh8CFa58Ppt1a-Jd0.roa
Signing time: Sat 16 Aug 2025 13:53:04 +0000
ROA not before: Sat 16 Aug 2025 13:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.163.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
45.248.164.0/22 maxlen: 22
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
80.94.80.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
176.126.223.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
185.255.98.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
193.30.30.0/24 maxlen: 24
193.46.214.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
194.242.22.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b3:27:c3:d2:c5:79:46:6c:ab:a9:2c:35:b5:92:1a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Aug 16 13:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af667ee81ef0cd2161f0215ae7c3e9b756be25dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:2d:69:a7:7d:a7:5f:7a:92:7c:58:20:97:
c0:0d:e0:bc:cd:53:0b:ba:8f:2a:27:97:d0:12:82:
fe:f3:4a:b9:37:49:51:91:5e:fa:b3:90:4e:e1:f6:
1b:92:74:ca:d6:0f:9a:7f:d1:09:4b:46:1c:e7:4c:
e8:a4:23:f6:2a:8c:d8:ed:9f:a7:5c:07:b0:01:5f:
f5:1a:52:07:49:2f:40:3e:bf:05:5b:a8:5a:2a:cb:
4e:0d:37:6b:10:81:26:1c:d1:59:e3:be:93:fb:ea:
cd:d5:fb:2e:8e:c4:66:02:dc:6c:ae:21:dc:0b:78:
52:77:32:e1:9b:84:42:f0:b2:5e:25:7d:42:08:ac:
90:17:c1:20:e8:92:97:b5:a8:c6:e0:0d:56:77:e9:
81:f5:f7:da:3f:df:4b:69:aa:91:4c:a7:8c:0c:6d:
0f:13:78:95:72:85:87:82:f1:83:1e:63:34:76:95:
d5:e8:bc:30:93:c1:1e:5d:40:1e:d3:23:7f:ae:2e:
50:6e:ba:3d:79:9d:2f:2c:8f:95:82:9f:9d:56:9b:
2a:a8:c0:77:35:43:8f:80:e7:a9:44:a1:1e:e1:bc:
d2:a5:6f:8c:bc:cf:cc:a1:8c:4a:b0:b8:81:0e:c9:
aa:b0:67:db:db:0a:4f:e4:1b:81:2e:2f:b8:b0:76:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:7E:E8:1E:F0:CD:21:61:F0:21:5A:E7:C3:E9:B7:56:BE:25:DD
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/r2Z-6B7wzSFh8CFa58Ppt1a-Jd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.83.12.0/22
45.95.88.0/22
45.248.164.0/22
46.36.97.0/24
46.36.100.0-46.36.102.255
46.36.105.0-46.36.106.255
80.94.80.0/23
89.37.0.0/20
89.40.35.0/24
89.43.0.0/20
91.209.183.0-91.209.184.255
91.239.59.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
176.126.223.0/24
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
185.255.98.0/23
188.213.64.0/20
193.30.30.0/24
193.46.214.0/24
194.180.238.0/24
194.242.22.0/24
195.149.127.0/24
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:2d:e1:51:a0:cd:d8:08:54:86:5a:3f:a0:4d:3c:7f:22:59:
ef:8d:fb:27:3f:11:b4:e7:39:0d:d0:22:4c:0b:fb:fa:77:8f:
f4:98:1d:59:39:e6:68:dd:04:6f:f9:6b:8a:68:ca:01:bb:de:
c9:f4:8d:32:b1:74:89:1b:29:a8:84:aa:be:5f:31:08:23:f7:
c2:ee:a6:94:8e:df:0b:7f:44:3c:67:2f:62:77:cf:dc:07:2e:
2d:7f:49:74:77:21:fe:da:d8:fe:1e:9a:32:28:65:a1:eb:8e:
c7:9c:e1:89:1d:11:bf:c1:2c:bd:2e:f4:e1:b8:32:ac:4e:1f:
62:fc:89:c8:39:f1:43:90:ca:29:e8:db:45:6f:ca:27:aa:a3:
f4:f0:af:1c:c9:90:3d:e1:d2:7b:6f:7b:50:bb:89:5f:d0:b7:
77:da:95:1e:2a:ff:ca:1a:bc:ed:e3:c7:7a:7b:6c:84:8b:4e:
74:3f:5b:48:5d:29:9d:df:1d:62:b4:5b:cd:63:94:ba:88:91:
9f:e7:ca:a3:09:a9:a9:0e:ed:94:80:ed:10:34:3e:db:48:58:
0d:a8:d6:e8:3e:92:50:74:e7:35:c4:7b:9f:8f:0d:f5:5a:d3:
3f:13:cf:83:4a:f6:ec:62:f0:fb:6a:e8:53:23:a8:ff:08:7c:
1a:4a:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:53:37 2025 by rpki-client