Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5qSGIBF9dXgJgpJ6pMVovkaGhlw.roa
File: 5qSGIBF9dXgJgpJ6pMVovkaGhlw.roa (raw, json)
Hash identifier: uQlhvppO13yBg3F6BRNaBDpCV30/Wq4dywebwseRnJY=
Subject key identifier: E6:A4:86:20:11:7D:75:78:09:82:92:7A:A4:C5:68:BE:46:86:86:5C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0196866A3B881A5A84C22502E3A264DB5EB3
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5qSGIBF9dXgJgpJ6pMVovkaGhlw.roa
Signing time: Wed 30 Apr 2025 11:17:11 +0000
ROA not before: Wed 30 Apr 2025 11:17:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:6a:3b:88:1a:5a:84:c2:25:02:e3:a2:64:db:5e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 30 11:17:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6a48620117d75780982927aa4c568be4686865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:29:af:48:c3:c2:47:37:15:d9:84:30:28:
25:95:81:9a:7f:59:c8:81:4e:ef:b1:d5:63:de:12:
9a:5c:23:6f:37:13:39:48:c9:10:4a:52:06:6e:4f:
7a:b5:eb:e5:0f:48:49:3f:53:95:f7:f1:05:a4:cb:
d2:ef:79:29:2e:19:da:36:6a:d5:f2:ed:1b:ed:2c:
5c:5b:9f:fe:60:a0:f8:46:fd:d7:ac:ac:9a:c4:78:
4e:cb:00:75:e0:80:63:a3:63:5a:fe:e7:af:dc:21:
03:2e:93:a3:4a:01:89:e0:f9:00:e8:b4:6a:0b:35:
cf:0a:9b:c0:6d:79:5f:a9:96:ed:5c:19:e2:a4:9c:
ad:06:db:16:3c:b6:e0:8e:e5:f7:ca:c7:b2:48:88:
dc:e1:32:f9:81:da:36:b0:02:80:81:00:80:13:28:
d2:9c:2b:20:30:98:9f:b9:ef:b7:df:f1:7f:7c:ff:
db:61:7f:9a:b3:d9:61:e7:35:c0:74:a2:cd:a3:65:
d4:52:e5:56:a4:a0:73:9b:93:2a:ac:13:2b:30:cf:
74:fe:3d:c1:46:6e:9e:68:b8:13:8c:48:fd:d8:ac:
fa:6d:90:d2:9f:b8:9f:88:42:d7:a0:02:01:9d:be:
c3:cf:c9:37:d8:ac:4c:b1:0a:f2:f3:be:6b:93:f3:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:86:20:11:7D:75:78:09:82:92:7A:A4:C5:68:BE:46:86:86:5C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5qSGIBF9dXgJgpJ6pMVovkaGhlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
72:23:f7:a5:2f:b6:a8:e3:2d:34:be:0c:b4:b2:44:c2:68:a3:
8c:6c:00:62:58:d5:db:89:69:d8:c3:d2:9f:bc:0b:f1:60:9a:
92:8e:8e:ab:12:e4:78:37:2a:4d:fb:d4:ce:84:74:a0:9b:47:
ba:4a:78:99:a0:4e:b1:53:79:e5:a8:f5:29:31:58:85:f6:f8:
58:1a:ed:1f:30:47:1d:90:9d:25:64:fa:c7:04:05:62:f2:f7:
10:94:48:04:97:5c:a8:bf:59:6b:d2:71:fd:32:5a:6c:6d:3a:
f8:ee:59:43:81:65:fb:a4:ab:9b:a8:b3:81:54:e9:3e:c5:10:
87:11:01:fb:1a:38:b2:33:31:4c:0f:6d:af:1e:60:dd:e3:4f:
4e:7a:f0:17:62:bf:65:de:d4:84:b8:ff:10:64:42:5e:fd:ae:
68:ad:bc:47:f0:d6:02:7d:fe:22:4e:78:9e:57:31:32:64:0e:
bc:75:c9:1b:ec:3b:56:91:2d:9a:92:ec:04:bb:7c:5e:dc:e7:
4f:c1:95:de:fb:64:41:aa:6a:6d:89:06:9b:65:8c:c9:a9:97:
27:56:18:4c:69:fb:6b:bb:1b:d7:b4:24:1a:a9:6c:93:22:a6:
e7:a7:97:d4:03:8a:87:bb:08:0f:74:e9:92:b1:9f:af:15:0d:
ae:2b:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:04:48 2025 by rpki-client