Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa
File: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (raw, json)
Hash identifier: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=
Subject key identifier: 82:C7:74:94:DE:99:9C:8A:C8:40:3E:65:23:03:9E:8C:B7:76:0E:FD
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 01965D74AFD0AACE3BF0F97DF6B038933781
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa
Signing time: Tue 22 Apr 2025 12:24:10 +0000
ROA not before: Tue 22 Apr 2025 12:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13156
IP address blocks: 84.90.0.0/15 maxlen: 15
84.90.0.0/21 maxlen: 21
84.90.8.0/22 maxlen: 22
84.90.12.0/22 maxlen: 22
84.90.16.0/22 maxlen: 22
84.90.20.0/24 maxlen: 24
84.90.21.0/24 maxlen: 24
84.90.22.0/24 maxlen: 24
84.90.24.0/21 maxlen: 21
84.90.32.0/22 maxlen: 22
84.90.36.0/22 maxlen: 22
84.90.40.0/21 maxlen: 21
84.90.48.0/21 maxlen: 21
84.90.56.0/22 maxlen: 22
84.90.60.0/22 maxlen: 22
84.90.64.0/24 maxlen: 24
84.90.65.0/24 maxlen: 24
84.90.66.0/23 maxlen: 23
84.90.66.0/24 maxlen: 24
84.90.67.0/24 maxlen: 24
84.90.68.0/22 maxlen: 22
84.90.72.0/21 maxlen: 21
84.90.80.0/21 maxlen: 21
84.90.88.0/21 maxlen: 21
84.90.96.0/21 maxlen: 21
84.90.104.0/21 maxlen: 21
84.90.112.0/21 maxlen: 21
84.90.120.0/22 maxlen: 22
84.90.124.0/22 maxlen: 22
84.90.128.0/21 maxlen: 21
84.90.136.0/21 maxlen: 21
84.90.144.0/22 maxlen: 22
84.90.148.0/22 maxlen: 22
84.90.152.0/22 maxlen: 22
84.90.156.0/22 maxlen: 22
84.90.160.0/21 maxlen: 21
84.90.168.0/22 maxlen: 22
84.90.172.0/22 maxlen: 22
84.90.176.0/22 maxlen: 22
84.90.180.0/22 maxlen: 22
84.90.184.0/22 maxlen: 22
84.90.188.0/23 maxlen: 23
84.90.190.0/23 maxlen: 23
84.90.192.0/22 maxlen: 22
84.90.196.0/23 maxlen: 23
84.90.198.0/24 maxlen: 24
84.90.200.0/21 maxlen: 21
84.90.208.0/21 maxlen: 21
84.90.216.0/22 maxlen: 22
84.90.220.0/22 maxlen: 22
84.90.224.0/22 maxlen: 22
84.90.228.0/23 maxlen: 23
84.90.230.0/23 maxlen: 23
84.90.232.0/22 maxlen: 22
84.90.236.0/22 maxlen: 22
84.90.240.0/22 maxlen: 22
84.90.244.0/22 maxlen: 22
84.90.248.0/22 maxlen: 22
84.90.252.0/22 maxlen: 22
84.91.4.0/22 maxlen: 22
84.91.8.0/21 maxlen: 21
84.91.8.0/22 maxlen: 22
84.91.12.0/23 maxlen: 23
84.91.14.0/23 maxlen: 23
84.91.16.0/22 maxlen: 22
84.91.20.0/22 maxlen: 22
84.91.24.0/22 maxlen: 22
84.91.28.0/22 maxlen: 22
84.91.32.0/22 maxlen: 22
84.91.32.0/23 maxlen: 23
84.91.36.0/22 maxlen: 22
84.91.40.0/22 maxlen: 22
84.91.44.0/22 maxlen: 22
84.91.48.0/22 maxlen: 22
84.91.52.0/22 maxlen: 22
84.91.56.0/21 maxlen: 21
84.91.64.0/21 maxlen: 21
84.91.72.0/22 maxlen: 22
84.91.76.0/22 maxlen: 22
84.91.80.0/22 maxlen: 22
84.91.84.0/22 maxlen: 22
84.91.92.0/24 maxlen: 24
84.91.93.0/24 maxlen: 24
84.91.96.0/22 maxlen: 22
84.91.100.0/22 maxlen: 22
84.91.104.0/22 maxlen: 22
84.91.108.0/22 maxlen: 22
84.91.112.0/22 maxlen: 22
84.91.116.0/22 maxlen: 22
84.91.120.0/22 maxlen: 22
84.91.124.0/22 maxlen: 22
84.91.128.0/22 maxlen: 22
84.91.132.0/22 maxlen: 22
84.91.136.0/22 maxlen: 22
84.91.140.0/22 maxlen: 22
84.91.144.0/22 maxlen: 22
84.91.148.0/22 maxlen: 22
84.91.152.0/24 maxlen: 24
84.91.153.0/24 maxlen: 24
84.91.155.0/24 maxlen: 24
84.91.156.0/22 maxlen: 22
84.91.162.0/23 maxlen: 23
84.91.164.0/23 maxlen: 23
84.91.166.0/23 maxlen: 23
84.91.168.0/23 maxlen: 23
84.91.171.0/24 maxlen: 24
84.91.172.0/24 maxlen: 24
84.91.173.0/24 maxlen: 24
84.91.176.0/22 maxlen: 22
84.91.180.0/22 maxlen: 22
84.91.184.0/22 maxlen: 22
84.91.188.0/23 maxlen: 23
84.91.192.0/22 maxlen: 22
84.91.200.0/24 maxlen: 24
84.91.201.0/24 maxlen: 24
84.91.202.0/24 maxlen: 24
84.91.208.0/23 maxlen: 23
84.91.210.0/24 maxlen: 24
84.91.211.0/24 maxlen: 24
84.91.212.0/22 maxlen: 22
84.91.216.0/22 maxlen: 22
84.91.220.0/22 maxlen: 22
84.91.224.0/23 maxlen: 23
84.91.226.0/24 maxlen: 24
84.91.227.0/24 maxlen: 24
84.91.228.0/22 maxlen: 22
84.91.232.0/22 maxlen: 22
84.91.236.0/22 maxlen: 22
84.91.240.0/24 maxlen: 24
84.91.241.0/24 maxlen: 24
84.91.242.0/24 maxlen: 24
84.91.248.0/22 maxlen: 22
84.91.252.0/22 maxlen: 22
91.194.170.0/23 maxlen: 23
91.194.182.0/23 maxlen: 23
213.228.128.0/18 maxlen: 18
213.228.128.0/19 maxlen: 19
213.228.128.0/22 maxlen: 22
213.228.132.0/24 maxlen: 24
213.228.133.0/24 maxlen: 24
213.228.134.0/24 maxlen: 24
213.228.136.0/24 maxlen: 24
213.228.137.0/24 maxlen: 24
213.228.138.0/24 maxlen: 24
213.228.139.0/24 maxlen: 24
213.228.140.0/24 maxlen: 24
213.228.141.0/24 maxlen: 24
213.228.142.0/24 maxlen: 24
213.228.143.0/24 maxlen: 24
213.228.144.0/24 maxlen: 24
213.228.145.0/24 maxlen: 24
213.228.146.0/24 maxlen: 24
213.228.147.0/24 maxlen: 24
213.228.148.0/24 maxlen: 24
213.228.149.0/24 maxlen: 24
213.228.150.0/24 maxlen: 24
213.228.151.0/24 maxlen: 24
213.228.152.0/24 maxlen: 24
213.228.153.0/24 maxlen: 24
213.228.154.0/24 maxlen: 24
213.228.155.0/24 maxlen: 24
213.228.156.0/24 maxlen: 24
213.228.157.0/24 maxlen: 24
213.228.158.0/24 maxlen: 24
213.228.159.0/24 maxlen: 24
213.228.160.0/24 maxlen: 24
213.228.161.0/24 maxlen: 24
213.228.162.0/24 maxlen: 24
213.228.163.0/24 maxlen: 24
213.228.164.0/24 maxlen: 24
213.228.165.0/24 maxlen: 24
213.228.166.0/24 maxlen: 24
213.228.167.0/24 maxlen: 24
213.228.168.0/24 maxlen: 24
213.228.169.0/24 maxlen: 24
213.228.170.0/24 maxlen: 24
213.228.171.0/24 maxlen: 24
213.228.176.0/23 maxlen: 23
213.228.178.0/24 maxlen: 24
213.228.179.0/24 maxlen: 24
213.228.180.0/24 maxlen: 24
213.228.181.0/24 maxlen: 24
213.228.182.0/23 maxlen: 23
213.228.184.0/24 maxlen: 24
213.228.185.0/24 maxlen: 24
213.228.186.0/24 maxlen: 24
213.228.187.0/24 maxlen: 24
213.228.188.0/23 maxlen: 23
213.228.190.0/24 maxlen: 24
213.228.191.0/24 maxlen: 24
217.129.0.0/16 maxlen: 16
217.129.0.0/21 maxlen: 21
217.129.8.0/21 maxlen: 21
217.129.16.0/21 maxlen: 21
217.129.24.0/21 maxlen: 21
217.129.32.0/21 maxlen: 21
217.129.40.0/21 maxlen: 21
217.129.48.0/20 maxlen: 20
217.129.64.0/21 maxlen: 21
217.129.72.0/21 maxlen: 21
217.129.80.0/22 maxlen: 22
217.129.84.0/22 maxlen: 22
217.129.88.0/22 maxlen: 22
217.129.92.0/22 maxlen: 22
217.129.96.0/21 maxlen: 21
217.129.104.0/21 maxlen: 21
217.129.112.0/20 maxlen: 20
217.129.128.0/20 maxlen: 20
217.129.144.0/22 maxlen: 22
217.129.148.0/22 maxlen: 22
217.129.152.0/22 maxlen: 22
217.129.156.0/22 maxlen: 22
217.129.160.0/21 maxlen: 21
217.129.168.0/21 maxlen: 21
217.129.176.0/21 maxlen: 21
217.129.184.0/21 maxlen: 21
217.129.192.0/21 maxlen: 21
217.129.200.0/21 maxlen: 21
217.129.208.0/21 maxlen: 21
217.129.216.0/21 maxlen: 21
217.129.224.0/20 maxlen: 20
217.129.224.0/21 maxlen: 21
217.129.232.0/22 maxlen: 22
217.129.236.0/22 maxlen: 22
217.129.240.0/21 maxlen: 21
217.129.248.0/22 maxlen: 22
217.129.252.0/22 maxlen: 22
2a02:26c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:74:af:d0:aa:ce:3b:f0:f9:7d:f6:b0:38:93:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Apr 22 12:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82c77494de999c8ac8403e6523039e8cb7760efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:43:94:67:d8:77:f6:f5:ad:ef:49:a8:ca:
b3:10:1d:5f:37:ec:d8:90:e7:64:0d:f2:b3:bc:a2:
1c:53:88:dc:c1:fc:b0:fb:ab:53:35:72:b7:4c:10:
f3:fd:bc:b0:f3:d3:93:04:45:a9:3a:aa:28:aa:15:
23:2e:a8:6c:8a:6c:f6:e7:dd:07:f9:88:ae:8c:76:
e0:6a:f2:fd:5f:8e:cf:2d:93:d5:2e:31:93:d0:0a:
fb:69:8c:15:5d:77:89:2a:ec:75:84:3e:98:e3:ca:
9a:2f:44:c7:86:14:a3:cb:74:d2:19:00:b6:2c:99:
92:3f:1e:62:d1:8e:b6:66:d0:07:ca:17:58:f1:31:
51:10:b1:a5:09:02:45:aa:e5:4e:11:45:49:d3:4c:
b9:99:46:f0:d2:95:9e:c5:29:45:ac:78:6b:b3:e8:
a5:2e:e8:54:88:0a:06:00:1e:34:d3:b6:f7:75:6c:
40:eb:81:ca:ac:7f:3b:20:47:5a:2a:cf:85:64:2c:
96:c0:d9:ab:8d:35:f7:60:de:e3:49:83:52:43:54:
93:30:69:4d:f3:43:48:48:6b:58:1d:b2:f9:14:93:
26:cc:4d:fa:7d:99:f4:b5:8b:30:f2:b0:7b:cf:a6:
f9:79:7f:e1:0d:bd:ad:91:f2:f1:a1:07:98:1b:bc:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:74:94:DE:99:9C:8A:C8:40:3E:65:23:03:9E:8C:B7:76:0E:FD
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.90.0.0/15
91.194.170.0/23
91.194.182.0/23
213.228.128.0/18
217.129.0.0/16
IPv6:
2a02:26c8::/32
Signature Algorithm: sha256WithRSAEncryption
14:b8:66:1d:5e:1a:5a:05:9f:90:e7:1e:bb:fc:57:57:b5:d2:
66:72:bf:1e:c9:e4:f2:d9:e6:c5:e5:69:99:a0:e0:e1:2c:88:
96:50:55:55:a4:c3:0b:47:9b:fa:c1:45:c6:54:ac:bb:04:2a:
7a:61:2f:56:42:30:d4:7e:85:7d:54:cc:ae:a2:3f:70:5a:c4:
96:c5:42:ce:35:66:cc:06:8e:f4:44:37:11:fd:42:ed:39:72:
fc:e1:f6:38:4c:f5:a5:f6:a1:7c:db:9e:d0:00:44:3c:3a:6b:
e1:57:70:5e:82:88:ec:71:f8:ed:41:22:04:21:ff:89:bd:ea:
47:65:b2:40:47:44:25:23:57:ce:99:25:c9:48:88:bb:b8:a8:
5a:a6:b2:5f:a2:d3:9a:de:91:fa:0b:33:21:62:fe:f9:a8:0a:
91:e3:cd:e0:36:d6:cf:2f:d0:0e:e1:06:a4:8e:4d:a8:38:ab:
34:d9:13:3e:ed:f6:be:75:5b:cb:b7:48:ef:f4:c1:1d:49:49:
2c:63:8b:2a:c0:c5:40:a8:50:7e:ce:68:28:a0:7f:b6:f0:44:
74:19:82:59:10:b6:e9:c0:29:bf:47:ee:6b:d4:dd:41:00:ec:
2d:0d:2a:0e:c3:33:8a:7f:77:05:22:c3:22:4a:09:4a:28:40:
04:a7:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:13:11 2025 by rpki-client