Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/p6unvRZtM06ef-e-QI-lA8qybrM.roa
File: p6unvRZtM06ef-e-QI-lA8qybrM.roa (raw, json)
Hash identifier: JE9tA5YpoDn+SnPhMOoiS7WIHpsb7iFxCjvbF9DfTuM=
Subject key identifier: A7:AB:A7:BD:16:6D:33:4E:9E:7F:E7:BE:40:8F:A5:03:CA:B2:6E:B3
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01979C593C6F7D73C48772223C717AF5FCAB
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/p6unvRZtM06ef-e-QI-lA8qybrM.roa
Signing time: Mon 23 Jun 2025 10:33:03 +0000
ROA not before: Mon 23 Jun 2025 10:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20857
IP address blocks: 5.61.248.0/21 maxlen: 24
31.3.96.0/22 maxlen: 24
31.3.101.0/24 maxlen: 24
31.3.102.0/23 maxlen: 24
31.14.96.0/22 maxlen: 24
37.34.48.0/21 maxlen: 24
37.34.56.0/21 maxlen: 24
37.97.128.0/17 maxlen: 24
37.230.96.0/21 maxlen: 24
77.72.144.0/21 maxlen: 24
79.170.88.0/24 maxlen: 24
79.170.90.0/23 maxlen: 24
79.170.93.0/24 maxlen: 24
79.170.94.0/23 maxlen: 24
80.69.64.0/19 maxlen: 24
84.247.8.0/21 maxlen: 24
85.10.128.0/19 maxlen: 24
85.222.228.0/22 maxlen: 24
86.105.244.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
89.31.96.0/23 maxlen: 24
89.31.100.0/24 maxlen: 24
89.31.102.0/23 maxlen: 24
89.41.168.0/22 maxlen: 24
91.142.254.0/23 maxlen: 23
93.119.0.0/20 maxlen: 24
93.191.128.0/22 maxlen: 24
93.191.132.0/23 maxlen: 24
95.170.64.0/19 maxlen: 24
141.138.136.0/21 maxlen: 24
141.138.192.0/21 maxlen: 24
141.138.200.0/22 maxlen: 24
141.138.204.0/23 maxlen: 24
141.138.206.0/24 maxlen: 24
149.210.128.0/17 maxlen: 24
178.18.80.0/20 maxlen: 24
185.10.48.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.96.4.0/22 maxlen: 24
185.108.112.0/22 maxlen: 24
188.240.52.0/22 maxlen: 22
188.241.148.0/22 maxlen: 22
193.138.204.0/24 maxlen: 24
195.8.195.0/24 maxlen: 24
195.135.195.0/24 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:7000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:e000::/36 maxlen: 36
2a01:7860::/32 maxlen: 32
2a02:348:3::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:59::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:60::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:59:3c:6f:7d:73:c4:87:72:22:3c:71:7a:f5:fc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 23 10:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7aba7bd166d334e9e7fe7be408fa503cab26eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:d3:c8:af:9a:0d:0d:ce:a7:1b:94:ef:36:
da:c7:63:92:74:03:2c:42:f2:7a:f8:01:33:29:2e:
87:4a:b3:c2:bc:d2:de:7e:ca:78:b9:75:a0:9c:c2:
98:ba:04:ed:ea:3c:37:e0:b7:ee:07:08:42:51:bc:
4a:24:d1:e2:ac:63:1b:c8:cc:3f:4c:2e:44:97:e4:
2c:ef:4f:09:9d:39:37:52:60:61:ae:06:d5:be:53:
58:93:95:03:5d:5a:ef:61:c8:8b:b7:81:61:3a:d8:
f8:3d:b6:da:a9:d8:68:9c:ec:b4:b8:58:eb:c6:7f:
94:98:1f:74:e8:77:f3:93:89:67:b0:a2:a8:fb:85:
23:28:18:6c:49:81:01:a5:fe:80:ca:5f:a7:74:7c:
71:96:27:81:79:b8:db:a4:5b:49:aa:77:9e:d6:07:
78:98:9d:e2:31:fb:29:2f:0a:64:02:46:12:14:d7:
dc:c5:bb:29:19:d6:b1:17:12:bb:ba:96:89:e8:a6:
45:65:ca:5c:9f:7c:10:e7:f3:7a:15:b5:1f:cc:a1:
5e:d3:4b:45:34:48:06:59:54:62:d2:c4:ba:f4:97:
24:35:0a:0b:5f:ac:5c:00:af:19:21:20:d7:56:a7:
2e:e5:e2:4c:69:d9:28:1e:9d:f9:8e:30:e4:63:45:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:A7:BD:16:6D:33:4E:9E:7F:E7:BE:40:8F:A5:03:CA:B2:6E:B3
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/p6unvRZtM06ef-e-QI-lA8qybrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.3.96.0/22
31.3.101.0-31.3.103.255
31.14.96.0/22
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
77.72.144.0/21
79.170.88.0/24
79.170.90.0/23
79.170.93.0-79.170.95.255
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
85.222.228.0/22
86.105.244.0/22
87.253.128.0/19
89.31.96.0/23
89.31.100.0/24
89.31.102.0/23
89.41.168.0/22
91.142.254.0/23
93.119.0.0/20
93.191.128.0-93.191.133.255
95.170.64.0/19
141.138.136.0/21
141.138.192.0-141.138.206.255
149.210.128.0/17
178.18.80.0/20
185.10.48.0/22
185.21.188.0/22
185.96.4.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
193.138.204.0/24
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
2a01:7860::/32
2a02:348:3::/48
2a02:348:33::/48
2a02:348:35::-2a02:348:36:ffff:ffff:ffff:ffff:ffff
2a02:348:39::-2a02:348:3b:ffff:ffff:ffff:ffff:ffff
2a02:348:46::/47
2a02:348:4b::/48
2a02:348:4f::-2a02:348:50:ffff:ffff:ffff:ffff:ffff
2a02:348:53::-2a02:348:5b:ffff:ffff:ffff:ffff:ffff
2a02:348:5d::-2a02:348:63:ffff:ffff:ffff:ffff:ffff
2a02:348:6e::-2a02:348:71:ffff:ffff:ffff:ffff:ffff
2a02:348:73::-2a02:348:79:ffff:ffff:ffff:ffff:ffff
2a02:348:7b::-2a02:348:92:ffff:ffff:ffff:ffff:ffff
2a02:348:94::-2a02:348:9c:ffff:ffff:ffff:ffff:ffff
2a02:348:a0::/46
2a02:348:b1::-2a02:348:b4:ffff:ffff:ffff:ffff:ffff
2a02:348:b9::-2a02:348:bc:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:e6:f0:f2:ff:3a:d5:25:46:c5:47:fa:f2:f2:67:40:a0:37:
14:36:c4:a5:2e:0b:a8:86:f6:dc:ed:ee:6b:37:10:24:53:dd:
38:13:f5:4c:6d:df:99:d4:75:5c:e5:54:68:10:19:97:a3:f1:
51:6b:c4:04:a3:7e:bb:48:d3:c5:cc:f8:f3:d5:75:a5:e3:d6:
f7:c5:35:4a:f8:c5:82:54:de:2a:b2:72:de:c1:e4:fd:da:39:
ec:77:8a:ea:85:6b:28:b8:7c:91:64:63:5a:33:e8:ac:ae:3b:
98:60:9e:70:20:7b:61:99:23:54:1a:83:f4:c7:62:15:41:a1:
58:2e:e5:cb:33:68:e8:8d:63:74:5d:7d:ae:6a:30:ef:b1:f4:
85:c3:79:1f:4b:1f:ca:18:a5:03:fe:85:88:7b:dc:92:7d:43:
9e:fa:b9:3e:14:9d:84:fe:47:20:0f:14:65:1d:77:73:dc:43:
d7:7f:de:47:df:0e:23:b0:ac:84:ab:bc:f7:9a:c1:5a:ef:b6:
3d:44:3a:15:9d:00:14:5f:4f:42:c9:32:46:5e:21:5e:b7:90:
0e:4d:c0:a6:3b:f4:3c:66:9d:eb:1a:cc:55:1f:3b:d4:5f:7e:
d6:b7:5e:8f:5b:2d:3a:68:82:e8:c5:86:2f:23:ac:5c:17:7c:
a5:ce:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:20:11 2025 by rpki-client