Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I1vQsAy86T6lFtHX5PTa5VsKN5U.roa
File: I1vQsAy86T6lFtHX5PTa5VsKN5U.roa (raw, json)
Hash identifier: JEGpo5VoWqs5+eR4zlxuQiF4RpxSw4P2CXHWUNUwXOY=
Subject key identifier: 23:5B:D0:B0:0C:BC:E9:3E:A5:16:D1:D7:E4:F4:DA:E5:5B:0A:37:95
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0197BFBA3CBD48F183EFC5CB4C1424392C3D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I1vQsAy86T6lFtHX5PTa5VsKN5U.roa
Signing time: Mon 30 Jun 2025 07:25:42 +0000
ROA not before: Mon 30 Jun 2025 07:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:ba:3c:bd:48:f1:83:ef:c5:cb:4c:14:24:39:2c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 30 07:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=235bd0b00cbce93ea516d1d7e4f4dae55b0a3795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:51:f3:a4:f8:37:9c:95:63:95:28:c1:32:
25:ef:41:a2:18:d0:86:f4:43:a6:8a:1b:0c:cb:e5:
ac:94:45:39:4e:46:1b:70:3e:85:a3:d3:0e:92:bb:
a4:45:99:6f:bd:ce:a1:ec:eb:6b:a7:d6:63:a0:6d:
96:e1:75:27:a5:ee:c7:c8:b4:75:8e:ad:ad:53:45:
0a:ee:86:84:ba:7c:61:cd:42:e3:2d:30:da:5d:0d:
3a:56:21:47:2f:6f:c0:ff:c5:c6:37:97:dd:10:d4:
35:75:5f:d4:83:0c:26:c3:46:b5:92:c0:f0:2d:ca:
28:a1:d4:f7:8c:9b:5c:11:4c:d7:b5:5c:b0:63:e4:
3f:a5:9c:67:6d:a3:c2:09:ef:18:ab:d6:a6:c1:55:
88:54:0c:80:99:ba:0a:cb:8e:ad:61:1b:87:aa:dc:
fe:96:1b:b5:f5:85:8a:60:79:d2:ab:d9:98:43:19:
b6:5c:0d:07:59:df:06:2a:de:7b:81:6f:ab:f1:da:
91:fc:ac:7d:e7:86:f1:09:44:b1:96:a7:27:39:40:
8d:67:dc:37:f3:ca:58:0e:df:b1:35:3f:3c:c5:ad:
4b:89:60:08:3f:d4:6b:a6:e3:d5:b7:08:74:6c:74:
c0:f0:0e:64:c8:3a:e4:26:05:f8:c2:95:9d:2e:52:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:D0:B0:0C:BC:E9:3E:A5:16:D1:D7:E4:F4:DA:E5:5B:0A:37:95
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I1vQsAy86T6lFtHX5PTa5VsKN5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.32.74.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:cf:0e:15:a4:4d:39:57:03:83:14:19:9c:27:49:f4:80:6f:
45:18:f8:ee:9f:23:0e:28:41:60:8b:0d:93:0f:45:05:9a:5c:
ae:f8:ef:23:98:ae:06:f0:91:2d:93:18:0b:2c:b2:86:9d:f5:
00:58:49:e4:74:fc:1a:3c:aa:17:c0:ac:06:fe:6b:0b:fa:c4:
d0:66:6e:8e:a6:55:4e:96:7e:d3:41:98:ba:1b:db:de:28:8e:
21:95:da:46:3f:eb:21:bd:89:b4:c4:d7:26:67:47:be:8e:85:
cd:27:a5:f8:02:cb:00:f8:7d:85:6b:cd:61:29:1f:1a:70:8f:
65:73:cd:75:9c:fb:46:73:9c:21:f8:96:ab:32:4d:18:4c:e5:
5b:04:7a:a3:bc:38:04:12:8c:5c:a5:33:d7:2f:09:8c:59:19:
58:e6:3f:f7:14:cb:13:6d:85:88:46:62:39:14:92:8c:5e:6e:
8c:4d:a6:2e:3b:26:09:bf:f3:14:d3:b2:76:15:9a:d6:5c:0a:
4a:0c:cc:b0:19:38:0c:52:df:17:e7:6b:1f:ce:c5:1f:bd:e1:
2f:52:0e:4c:0c:0e:b3:19:90:9b:65:7e:d9:0e:de:53:f2:66:
51:e8:91:8a:4d:94:67:6c:94:54:61:b6:29:ce:b6:7c:f4:dc:
b3:ce:26:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:49:51 2025 by rpki-client