Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nF7vKG71SYgVThAV205KiZAVhiQ.roa
File: nF7vKG71SYgVThAV205KiZAVhiQ.roa (raw, json)
Hash identifier: tICr/OPD0mq3VgwdJ8cbLbhFaBaS2mbUzCxZWcniac0=
Subject key identifier: 9C:5E:EF:28:6E:F5:49:88:15:4E:10:15:DB:4E:4A:89:90:15:86:24
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01968595D2188BCF5D401E3462E4B0EC8077
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nF7vKG71SYgVThAV205KiZAVhiQ.roa
Signing time: Wed 30 Apr 2025 07:25:10 +0000
ROA not before: Wed 30 Apr 2025 07:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27882
IP address blocks: 49.0.184.0/21 maxlen: 21
49.0.184.0/22 maxlen: 22
49.0.184.0/23 maxlen: 23
49.0.184.0/24 maxlen: 24
49.0.185.0/24 maxlen: 24
49.0.186.0/23 maxlen: 23
49.0.186.0/24 maxlen: 24
49.0.187.0/24 maxlen: 24
49.0.188.0/22 maxlen: 22
49.0.188.0/23 maxlen: 23
49.0.188.0/24 maxlen: 24
49.0.189.0/24 maxlen: 24
49.0.190.0/23 maxlen: 23
49.0.190.0/24 maxlen: 24
49.0.191.0/24 maxlen: 24
181.41.144.0/21 maxlen: 21
181.41.144.0/22 maxlen: 24
181.41.144.0/23 maxlen: 23
181.41.144.0/24 maxlen: 24
181.41.145.0/24 maxlen: 24
181.41.146.0/23 maxlen: 23
181.41.146.0/24 maxlen: 24
181.41.147.0/24 maxlen: 24
181.41.148.0/22 maxlen: 22
181.41.148.0/23 maxlen: 23
181.41.148.0/24 maxlen: 24
181.41.149.0/24 maxlen: 24
181.41.150.0/23 maxlen: 23
181.41.150.0/24 maxlen: 24
181.41.151.0/24 maxlen: 24
181.41.156.0/22 maxlen: 22
181.41.156.0/23 maxlen: 23
181.41.156.0/24 maxlen: 24
181.41.157.0/24 maxlen: 24
181.41.158.0/23 maxlen: 23
181.41.158.0/24 maxlen: 24
181.41.159.0/24 maxlen: 24
189.28.64.0/19 maxlen: 19
189.28.64.0/20 maxlen: 20
189.28.64.0/21 maxlen: 21
189.28.64.0/22 maxlen: 22
189.28.64.0/23 maxlen: 23
189.28.64.0/24 maxlen: 24
189.28.65.0/24 maxlen: 24
189.28.66.0/23 maxlen: 23
189.28.66.0/24 maxlen: 24
189.28.67.0/24 maxlen: 24
189.28.68.0/22 maxlen: 22
189.28.68.0/23 maxlen: 23
189.28.68.0/24 maxlen: 24
189.28.69.0/24 maxlen: 24
189.28.70.0/23 maxlen: 23
189.28.70.0/24 maxlen: 24
189.28.71.0/24 maxlen: 24
189.28.72.0/21 maxlen: 21
189.28.72.0/22 maxlen: 22
189.28.72.0/23 maxlen: 23
189.28.72.0/24 maxlen: 24
189.28.73.0/24 maxlen: 24
189.28.74.0/23 maxlen: 23
189.28.74.0/24 maxlen: 24
189.28.75.0/24 maxlen: 24
189.28.76.0/22 maxlen: 22
189.28.76.0/23 maxlen: 23
189.28.76.0/24 maxlen: 24
189.28.77.0/24 maxlen: 24
189.28.78.0/23 maxlen: 23
189.28.78.0/24 maxlen: 24
189.28.79.0/24 maxlen: 24
189.28.80.0/20 maxlen: 20
189.28.80.0/21 maxlen: 21
189.28.80.0/22 maxlen: 22
189.28.80.0/23 maxlen: 23
189.28.80.0/24 maxlen: 24
189.28.81.0/24 maxlen: 24
189.28.82.0/23 maxlen: 23
189.28.82.0/24 maxlen: 24
189.28.83.0/24 maxlen: 24
189.28.84.0/22 maxlen: 22
189.28.84.0/23 maxlen: 23
189.28.84.0/24 maxlen: 24
189.28.85.0/24 maxlen: 24
189.28.86.0/23 maxlen: 23
189.28.86.0/24 maxlen: 24
189.28.87.0/24 maxlen: 24
189.28.88.0/21 maxlen: 21
189.28.88.0/22 maxlen: 22
189.28.88.0/23 maxlen: 23
189.28.88.0/24 maxlen: 24
189.28.89.0/24 maxlen: 24
189.28.90.0/23 maxlen: 23
189.28.90.0/24 maxlen: 24
189.28.91.0/24 maxlen: 24
189.28.92.0/22 maxlen: 22
189.28.92.0/23 maxlen: 23
189.28.92.0/24 maxlen: 24
189.28.93.0/24 maxlen: 24
189.28.94.0/23 maxlen: 23
189.28.94.0/24 maxlen: 24
189.28.95.0/24 maxlen: 24
203.88.96.0/22 maxlen: 22
203.88.96.0/23 maxlen: 23
203.88.96.0/24 maxlen: 24
203.88.97.0/24 maxlen: 24
203.88.98.0/23 maxlen: 23
203.88.98.0/24 maxlen: 24
203.88.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:95:d2:18:8b:cf:5d:40:1e:34:62:e4:b0:ec:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 30 07:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c5eef286ef54988154e1015db4e4a8990158624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:48:b0:85:0a:22:11:6e:f8:5d:e0:d6:3e:
60:76:0a:37:ef:80:0b:5c:d3:3f:10:36:29:d0:b8:
f4:2d:72:9c:5e:7d:2f:4a:37:47:7c:bb:7d:df:bf:
fc:1d:c4:a1:8a:12:57:3a:7e:2b:0c:ca:4d:52:1c:
26:2c:23:9e:95:b2:3c:6d:bd:dc:3a:f6:82:ee:2e:
ea:67:7e:9f:c2:c5:63:71:0f:24:3d:4b:35:29:39:
7d:b2:57:4f:8f:2c:d2:a9:37:70:38:3f:2d:ce:d8:
c4:5e:35:cf:14:0b:d8:f3:78:02:03:12:cf:2b:06:
b4:91:22:87:66:bf:ff:4e:48:72:c2:7c:29:6e:09:
85:bf:ae:7e:53:02:fc:f0:77:e1:66:66:ee:87:50:
4b:fb:7c:69:32:21:91:84:b6:b8:28:19:bf:08:5b:
f5:96:80:b1:25:0b:03:d9:26:3a:72:3b:d0:a9:79:
86:89:d7:48:a9:22:ba:f6:9c:65:34:80:20:d2:47:
17:f8:b8:cd:5c:8d:63:70:8a:ec:ed:24:d7:ee:8b:
3a:15:dd:7b:54:92:96:5a:dc:15:28:61:3a:e9:47:
f6:af:27:a4:e6:09:85:70:a9:c5:60:51:cb:8b:53:
89:e5:b4:71:8d:5e:20:73:88:93:e6:2c:8b:99:0d:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5E:EF:28:6E:F5:49:88:15:4E:10:15:DB:4E:4A:89:90:15:86:24
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nF7vKG71SYgVThAV205KiZAVhiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.184.0/21
181.41.144.0/21
181.41.156.0/22
189.28.64.0/19
203.88.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:dd:de:ba:4d:78:7a:c2:ee:b2:d1:61:90:ce:a5:55:83:53:
e8:3b:35:7e:a2:eb:9d:35:92:52:f1:d6:53:1e:36:78:40:99:
1d:b4:1d:2e:26:3d:6e:71:00:12:7a:1c:2a:20:95:28:6f:98:
e9:c6:48:3c:b1:8e:65:25:8c:da:0f:c4:07:b8:eb:7d:1d:d4:
e2:d3:85:19:96:6c:5a:df:88:b8:9d:0d:61:0d:92:a5:9a:d9:
df:00:1a:5c:28:ef:4b:b0:ce:7f:52:9a:84:7d:54:c5:28:4e:
cf:c2:98:8a:9a:3e:a2:36:04:47:ee:fe:40:1c:47:37:1b:80:
10:26:5d:9f:d5:84:e0:d9:0b:1b:ba:d3:30:c6:e4:1c:a3:0f:
9a:72:4f:32:5a:64:e2:90:a3:a5:73:be:19:7e:47:3f:11:46:
1b:30:af:5a:27:e2:5c:df:f6:4b:f8:5f:9d:ff:a4:a5:a0:cc:
88:7f:9d:60:69:c1:ba:71:3d:b7:9e:4f:e9:19:f1:cb:8e:e8:
c3:c2:06:a2:c9:de:16:d7:30:de:68:de:73:a5:51:b3:b4:6f:
ec:e3:f0:61:25:54:c2:35:35:60:09:55:0c:5b:bd:c2:89:07:
39:67:02:d1:5a:41:43:4c:57:2e:50:90:d4:17:40:7a:e1:fe:
b3:02:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:07:05 2025 by rpki-client