Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/_8fFCRHPoQaRI1mjW0xFA_HxwGg.roa
File: _8fFCRHPoQaRI1mjW0xFA_HxwGg.roa (raw, json)
Hash identifier: aFIPG5ynKuIs+c7Hkko3DBWslG70WfRTVWfqasGNQUU=
Subject key identifier: FF:C7:C5:09:11:CF:A1:06:91:23:59:A3:5B:4C:45:03:F1:F1:C0:68
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0198BC942D314D0ADF3E68446616D38F5FE6
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/_8fFCRHPoQaRI1mjW0xFA_HxwGg.roa
Signing time: Mon 18 Aug 2025 09:48:04 +0000
ROA not before: Mon 18 Aug 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198610
IP address blocks: 2.56.240.0/23 maxlen: 24
5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
31.207.74.0/23 maxlen: 24
31.207.76.0/23 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.144.176.0/22 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
46.173.16.0/22 maxlen: 24
46.173.24.0/22 maxlen: 24
46.173.28.0/23 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
82.202.128.0/22 maxlen: 24
83.222.16.0/22 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
91.229.90.0/23 maxlen: 24
93.189.228.0/22 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
109.172.36.0/22 maxlen: 24
109.172.46.0/23 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.23.34.0/23 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.207.0.0/23 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.8.226.0/23 maxlen: 24
212.8.228.0/23 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.114.8.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:94:2d:31:4d:0a:df:3e:68:44:66:16:d3:8f:5f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Aug 18 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc7c50911cfa106912359a35b4c4503f1f1c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:04:98:3a:22:0a:7f:1b:ec:84:ee:e9:de:
0b:1a:98:97:37:92:c1:dc:ce:de:74:af:1f:ed:a5:
92:6a:d2:ed:0d:2c:63:ed:2b:dd:af:38:66:db:7c:
1f:70:82:f0:81:bf:d1:e5:09:46:bd:a4:3c:9f:a3:
61:d9:a0:26:a2:3a:59:f8:42:11:1b:67:3f:3a:08:
22:bc:a6:38:4f:6a:d2:6a:7d:84:8b:19:1d:4e:c5:
56:a8:79:e5:e9:ae:8f:69:56:64:f0:57:a3:fd:e7:
2e:62:61:08:aa:52:a8:d9:f0:a7:16:1e:ad:91:7d:
79:bc:84:32:24:14:f8:5c:af:d1:5e:ca:55:aa:c4:
8a:0f:28:10:83:f9:16:26:5e:6a:ab:a8:e8:c1:e7:
b5:58:1b:cc:8f:2f:84:0e:ec:b0:4e:26:19:16:54:
cf:17:af:37:35:7b:94:a6:cd:38:52:12:ad:fd:68:
00:af:8c:bf:a0:93:95:e7:da:0f:56:5e:1e:5f:e5:
07:a6:30:06:66:d5:70:df:21:04:24:26:5b:5f:bc:
a5:bd:57:ec:ec:d1:fd:ef:68:ba:cc:ac:58:15:18:
03:4a:12:58:07:35:d8:32:84:85:4e:ec:51:7a:7d:
06:9b:5a:59:10:cf:79:cc:00:05:74:bf:9b:9a:fd:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:C5:09:11:CF:A1:06:91:23:59:A3:5B:4C:45:03:F1:F1:C0:68
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/_8fFCRHPoQaRI1mjW0xFA_HxwGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.240.0/23
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
31.207.74.0-31.207.77.255
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.144.176.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
46.173.16.0/22
46.173.24.0-46.173.29.255
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
82.202.128.0/22
83.222.16.0/22
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
91.229.90.0/23
93.189.228.0/22
95.214.60.0/22
109.172.36.0/22
109.172.46.0/23
185.19.204.0/22
185.23.34.0/23
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.207.0.0/23
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.8.226.0-212.8.229.255
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/20
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
95:9f:e6:aa:9a:58:aa:ca:73:09:9f:62:0a:6b:ab:da:55:27:
eb:38:0c:6e:03:bf:ca:9d:a5:b4:84:a6:ea:87:04:6d:cb:23:
97:7a:8f:99:8c:3d:65:ba:13:39:4a:f2:27:73:4a:96:41:0e:
8b:21:1a:1a:00:7f:4b:17:9a:33:81:47:dd:ce:98:e6:57:5a:
aa:77:96:a5:64:2f:f5:ae:7c:18:ef:fd:b7:98:b4:56:3c:da:
f3:de:45:ec:06:f5:d5:19:ca:4e:89:c5:d5:d9:ca:ed:64:76:
da:a7:70:93:d3:be:cc:98:b4:64:91:7e:e3:d7:c8:47:ed:20:
e9:c6:5a:52:66:bd:e5:6f:45:50:62:2a:fa:4c:67:37:95:1e:
f2:d6:cb:a4:84:c8:6f:e5:33:8c:b4:03:f5:03:03:5c:ef:a4:
99:b8:ee:06:e7:6f:88:65:82:67:2f:77:ff:0a:12:22:29:20:
c3:73:b3:ac:86:75:ed:20:7e:ce:a7:7e:c0:09:51:f5:60:a3:
dc:20:da:64:47:5e:60:35:c0:d4:6c:4c:0f:11:85:99:a5:90:
1f:d4:12:18:c6:88:62:28:0e:e7:58:da:0e:c4:af:d1:92:74:
17:d3:f2:fb:35:23:9e:27:20:8a:7d:fe:57:8e:19:c2:5b:e4:
0a:24:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:04 2025 by rpki-client