Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/lJ6fQmJpUrygjwQ7p4vFNR2IY6U.roa
File: lJ6fQmJpUrygjwQ7p4vFNR2IY6U.roa (raw, json)
Hash identifier: snpJIFfEXOeeZi2wyUsc1W2H/jHRZEfTq7mq/daKXhA=
Subject key identifier: 94:9E:9F:42:62:69:52:BC:A0:8F:04:3B:A7:8B:C5:35:1D:88:63:A5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01977CA28FE737230ECF209D93EEC77EF4C6
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/lJ6fQmJpUrygjwQ7p4vFNR2IY6U.roa
Signing time: Tue 17 Jun 2025 06:45:17 +0000
ROA not before: Tue 17 Jun 2025 06:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
79.150.0.0/16 maxlen: 24
79.151.0.0/16 maxlen: 24
79.152.0.0/16 maxlen: 24
79.153.0.0/16 maxlen: 24
79.154.0.0/16 maxlen: 24
79.155.0.0/16 maxlen: 24
79.156.0.0/16 maxlen: 24
79.157.0.0/16 maxlen: 24
79.158.0.0/16 maxlen: 24
79.159.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.58.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.46.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.40.0.0/16 maxlen: 24
83.41.0.0/16 maxlen: 24
83.42.0.0/16 maxlen: 24
83.43.0.0/16 maxlen: 24
83.44.0.0/16 maxlen: 24
83.45.0.0/16 maxlen: 24
83.46.0.0/16 maxlen: 24
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.49.0.0/16 maxlen: 24
83.50.0.0/16 maxlen: 24
83.51.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.4.0.0/16 maxlen: 24
88.5.0.0/16 maxlen: 24
88.6.0.0/16 maxlen: 24
88.7.0.0/16 maxlen: 24
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.17.0.0/16 maxlen: 24
88.18.0.0/16 maxlen: 24
88.19.0.0/16 maxlen: 24
88.20.0.0/16 maxlen: 24
88.21.0.0/16 maxlen: 24
88.22.0.0/16 maxlen: 24
88.23.0.0/16 maxlen: 24
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.120.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.84.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.76.240.0/24 maxlen: 24
195.76.241.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.77.198.0/24 maxlen: 24
195.77.199.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
2a02:9000::/23 maxlen: 23
2a02:9144::/32 maxlen: 32
2a02:9145::/32 maxlen: 32
2a02:9146::/32 maxlen: 32
2a02:9147::/32 maxlen: 32
2a02:9148::/32 maxlen: 32
2a02:9149::/32 maxlen: 32
2a02:914a::/32 maxlen: 32
2a02:914b::/32 maxlen: 32
2a02:914c::/32 maxlen: 32
2a02:914d::/32 maxlen: 32
2a02:914e::/32 maxlen: 32
2a02:914f::/32 maxlen: 32
2a02:9150::/32 maxlen: 32
2a02:9151::/32 maxlen: 32
2a02:9152::/32 maxlen: 32
2a02:9153::/32 maxlen: 32
2a02:9154::/32 maxlen: 32
2a02:9155::/32 maxlen: 32
2a02:9156::/32 maxlen: 32
2a02:9157::/32 maxlen: 32
2a02:9158::/32 maxlen: 32
2a02:9159::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:a2:8f:e7:37:23:0e:cf:20:9d:93:ee:c7:7e:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jun 17 06:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949e9f42626952bca08f043ba78bc5351d8863a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:e4:29:da:20:53:d0:3d:f2:a5:a6:81:94:
03:c9:cf:1a:bf:02:8c:1a:44:46:f8:58:b7:3e:f6:
dd:ad:86:2e:07:05:9f:87:fb:fa:f5:31:3c:8b:13:
5a:ff:d4:2b:2e:65:69:61:a4:a1:69:6e:d8:87:20:
01:8b:5d:e6:da:94:75:cd:84:5d:bc:e0:db:38:0f:
39:8b:33:d7:b1:f9:a4:e1:e9:40:01:84:ef:8d:a7:
63:e1:7e:4a:54:df:07:26:93:27:7d:94:e8:2e:b8:
f9:8c:ce:72:f0:4f:b3:09:1a:d0:3b:bc:e5:42:4d:
36:44:7d:1a:43:fd:7b:ba:c8:43:13:4c:b2:aa:c1:
b4:e8:69:76:88:47:24:f9:6c:cc:80:50:1d:9f:f5:
44:4a:59:e4:13:80:29:8c:3d:e3:e7:f3:e6:38:63:
10:b5:55:2d:f6:f4:04:46:7f:aa:db:e1:b2:b0:ae:
4a:57:3d:d3:db:32:df:7e:6d:79:b3:75:05:8f:08:
bf:a8:9b:ba:c0:76:93:cd:37:fb:d1:d7:45:14:76:
91:5a:d0:62:34:c1:cd:a6:79:05:06:38:c4:d5:36:
d9:db:d4:f8:b6:ba:fe:c8:ff:b6:f1:3d:54:9a:38:
99:90:4d:ac:32:44:2a:3b:83:1f:9f:1e:43:73:a0:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:9F:42:62:69:52:BC:A0:8F:04:3B:A7:8B:C5:35:1D:88:63:A5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/lJ6fQmJpUrygjwQ7p4vFNR2IY6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0/12
80.24.0.0-80.39.255.255
80.58.0.0/15
81.32.0.0/12
83.32.0.0/11
88.0.0.0/11
95.120.0.0/13
176.80.0.0/13
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
IPv6:
2a02:9000::/23
Signature Algorithm: sha256WithRSAEncryption
43:21:42:fc:fe:c8:b1:85:8c:38:ca:b9:29:cf:87:5d:2b:c3:
3e:ed:1e:4c:23:aa:e6:56:3b:79:96:69:0c:bf:2d:d2:f5:46:
ed:a1:18:b2:13:55:2e:6f:23:49:53:cc:bd:95:e5:7f:4b:83:
93:de:eb:21:22:3b:47:7d:b3:40:d9:d9:4f:e9:e1:74:c5:c4:
72:a8:53:0d:cf:9a:35:15:16:42:cd:52:fb:a0:96:29:2c:c2:
70:c7:d5:4d:8b:0a:32:ff:d1:8b:99:49:58:a4:58:06:be:a1:
9c:fa:0f:af:ff:2a:9b:62:b4:15:47:9f:bd:2d:9a:f6:f8:31:
97:68:0b:ca:f7:bc:35:c2:bf:cd:0f:14:fa:84:d1:23:39:78:
a6:a3:01:70:a3:b9:c3:0c:2e:e9:fa:70:fa:ee:bc:1b:99:20:
73:55:52:74:f9:28:9b:37:ef:86:6a:58:75:20:1f:f8:07:2d:
bd:31:70:5f:af:32:ed:99:06:3d:11:5c:fe:5e:2a:91:32:8d:
cd:59:86:3e:7f:bb:46:82:7c:60:d7:da:ae:cf:0e:df:83:b0:
6a:d0:63:2e:a1:66:94:11:59:d7:cc:9d:85:54:d7:da:f4:fd:
08:e6:51:72:b0:97:91:5c:d5:16:45:c4:b2:bf:12:3c:d3:1e:
c9:af:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:15 2025 by rpki-client