Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/56UjSrUdIN3vbF3kVlC5ewmV6Wk.roa
File: 56UjSrUdIN3vbF3kVlC5ewmV6Wk.roa (raw, json)
Hash identifier: hQTuBY1O2+bpDfeffcBzB+nOQ7PZT7APSW87Pw2HbSU=
Subject key identifier: E7:A5:23:4A:B5:1D:20:DD:EF:6C:5D:E4:56:50:B9:7B:09:95:E9:69
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197A2FDF10951EF65BFD44EA7D5A29B5F0A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/56UjSrUdIN3vbF3kVlC5ewmV6Wk.roa
Signing time: Tue 24 Jun 2025 17:30:40 +0000
ROA not before: Tue 24 Jun 2025 17:30:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
37.252.24.0/21 maxlen: 24
77.93.128.0/19 maxlen: 24
77.107.64.0/18 maxlen: 24
79.99.72.0/21 maxlen: 24
79.99.144.0/21 maxlen: 24
80.240.80.0/20 maxlen: 24
81.5.128.0/18 maxlen: 24
81.168.0.0/17 maxlen: 24
82.152.0.0/15 maxlen: 24
82.152.0.0/16 maxlen: 24
82.163.0.0/19 maxlen: 24
85.159.128.0/21 maxlen: 24
89.28.232.0/21 maxlen: 24
89.31.232.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
89.213.64.0/18 maxlen: 24
89.213.192.0/18 maxlen: 24
95.130.96.0/21 maxlen: 24
109.176.0.0/16 maxlen: 24
158.255.8.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
185.24.84.0/24 maxlen: 24
185.24.86.0/23 maxlen: 24
185.101.44.0/22 maxlen: 24
193.27.212.0/23 maxlen: 24
194.105.64.0/19 maxlen: 24
195.128.138.0/24 maxlen: 24
212.38.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
213.152.32.0/19 maxlen: 24
213.210.0.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
213.218.224.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
2001:1a90::/32 maxlen: 48
2a00:c60::/32 maxlen: 48
2a00:1c40::/29 maxlen: 48
2a02:21f8::/32 maxlen: 48
2a02:6f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:fd:f1:09:51:ef:65:bf:d4:4e:a7:d5:a2:9b:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 17:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a5234ab51d20ddef6c5de45650b97b0995e969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:2d:39:0c:fb:9d:3b:bf:b4:c2:87:4c:9e:
1e:c0:aa:a6:ec:77:61:b7:30:5d:8f:76:bc:6f:bc:
2d:a8:97:c4:14:4c:a5:1b:25:72:4f:f5:cc:5c:ba:
22:a4:f4:d0:58:8d:ff:18:97:fe:57:3d:b9:82:44:
fe:5c:03:65:ec:62:96:89:00:7d:e3:96:5b:cb:81:
da:68:c8:ab:76:86:72:5b:34:9c:68:33:a2:76:3c:
37:ac:9a:b5:e8:4c:16:04:7b:ea:37:03:8e:b4:2f:
f3:f8:77:f0:6f:11:fb:e5:7a:45:c2:0c:d3:51:ad:
1f:38:be:1e:ee:f9:a5:48:1b:b0:14:6a:c5:81:b8:
50:f9:4b:4e:25:d7:93:9f:26:9e:88:2c:f9:a9:ff:
06:fb:a8:48:06:61:22:fe:e4:ed:b5:b2:1e:b8:8a:
66:4f:75:62:5f:7a:26:91:5d:e4:b5:a3:b4:a8:f3:
1e:12:3d:80:e9:ef:92:f3:b3:f2:2b:ce:49:60:e9:
6c:f8:ce:d5:bd:67:35:40:85:0c:88:13:6a:78:b0:
8f:19:7b:b8:5e:4c:fa:9b:69:90:9c:13:a6:77:7f:
11:93:ea:5b:99:85:11:9e:17:e9:52:5f:ff:5a:86:
a1:aa:dd:6b:23:ab:9a:a7:0f:d1:6a:ba:e5:52:0a:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:23:4A:B5:1D:20:DD:EF:6C:5D:E4:56:50:B9:7B:09:95:E9:69
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/56UjSrUdIN3vbF3kVlC5ewmV6Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
185.101.44.0/22
193.27.212.0/23
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a02:21f8::/32
2a02:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
10:5a:ac:16:66:65:c7:df:db:06:8f:54:10:bd:1b:62:e0:f4:
a2:7a:61:c8:ba:f8:72:2e:20:71:20:9a:2a:e4:6c:76:66:79:
86:68:f6:f4:7e:8e:09:cd:ce:6a:2c:16:8a:cf:d4:b7:bd:44:
53:a4:b9:19:e9:4c:43:37:be:7a:f2:9b:db:34:99:ad:34:bc:
96:63:1a:67:09:11:88:4e:33:09:0b:0f:af:fd:75:63:de:96:
d9:74:59:76:41:0e:8f:21:31:cf:39:77:68:88:50:7a:37:f3:
f3:70:88:3f:4e:84:48:d4:87:53:f8:d4:f9:82:94:d8:fa:fc:
38:cc:a7:d5:44:66:43:09:19:de:b1:7f:24:80:f8:14:95:d1:
82:47:7d:38:c3:68:38:d3:7e:a3:6d:db:3f:1d:47:91:86:ec:
eb:48:bb:73:c3:f9:c4:23:9d:e6:35:cb:f1:01:60:aa:a1:06:
c3:9d:82:2d:5b:04:29:50:1f:93:fd:4a:37:6d:f1:13:00:59:
19:e4:6b:33:0b:de:cd:a7:5f:ce:34:2f:4a:78:e4:67:d7:59:
8b:76:c7:cc:df:c5:dc:09:8f:77:19:82:da:cf:41:38:ba:11:
99:00:f4:47:13:96:e0:2a:44:f7:2a:60:8a:4f:f7:5c:78:8c:
cc:ac:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:42:16 2025 by rpki-client