Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/asCMHwRsfFwCKLi99bMyFo21krk.roa
File: asCMHwRsfFwCKLi99bMyFo21krk.roa (raw, json)
Hash identifier: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=
Subject key identifier: 6A:C0:8C:1F:04:6C:7C:5C:02:28:B8:BD:F5:B3:32:16:8D:B5:92:B9
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0197C0A3B0DC25EDBD90C18C52EA8F04C8BE
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/asCMHwRsfFwCKLi99bMyFo21krk.roa
Signing time: Mon 30 Jun 2025 11:40:42 +0000
ROA not before: Mon 30 Jun 2025 11:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.62.0/24 maxlen: 24
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:a3:b0:dc:25:ed:bd:90:c1:8c:52:ea:8f:04:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 30 11:40:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac08c1f046c7c5c0228b8bdf5b332168db592b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:fb:a7:e9:66:45:2e:a3:07:56:a2:d4:7d:
de:3c:46:aa:57:ea:cc:61:e4:dd:d0:07:5e:80:92:
3a:57:1a:c0:9c:b1:63:97:dd:b7:8c:e6:84:b2:00:
90:1b:b3:7c:aa:3b:d8:e7:58:f9:31:0f:40:60:a0:
99:98:99:9b:29:7f:f9:37:12:4d:28:02:14:31:aa:
4a:88:ab:41:ed:24:80:2d:8f:b5:b8:fa:ca:f0:07:
00:26:e8:3e:22:21:4b:05:0e:1b:d6:7d:a1:85:9c:
73:8f:1b:d5:80:8b:f3:f3:a6:26:69:1c:0e:cd:f7:
84:a0:aa:de:78:2a:72:63:f8:a8:37:c8:45:d5:db:
25:d8:99:99:e6:83:f0:dd:79:9e:c0:09:28:8d:a3:
bf:f4:2d:70:8d:50:20:68:44:0b:09:ce:04:83:e2:
f5:e7:75:f3:5a:29:5e:92:c3:41:7f:bb:e4:4b:7a:
84:2e:d1:08:07:b8:24:27:aa:67:76:1b:52:fb:84:
5a:58:d4:90:3a:ed:aa:4e:43:12:87:9f:27:40:94:
cd:d6:bd:0b:2c:87:b3:70:4c:af:f8:dc:d1:58:46:
7b:e2:1f:d8:66:6b:c9:88:0a:29:e4:7a:c9:af:d6:
b5:73:40:7a:bb:1e:5e:61:3c:36:87:2c:b8:8e:90:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:8C:1F:04:6C:7C:5C:02:28:B8:BD:F5:B3:32:16:8D:B5:92:B9
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/asCMHwRsfFwCKLi99bMyFo21krk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
64:89:cd:32:93:37:4f:25:a1:85:44:9f:df:c6:0e:ac:9f:2e:
ac:de:b1:59:37:32:bc:c2:ad:1b:8a:60:d2:52:83:64:30:64:
fd:dd:57:7a:e0:57:9e:88:36:51:a1:ad:2a:61:71:ee:1d:e6:
98:6a:b3:25:05:22:10:33:83:37:13:08:9f:db:f2:b5:ca:ad:
32:8b:76:be:c3:d1:bd:48:e3:96:68:25:9e:a7:1f:94:73:35:
7a:95:f2:89:92:a3:85:9c:c7:f0:bd:10:50:de:fc:cf:da:a5:
36:34:c6:c3:1d:75:e7:34:67:b2:ac:01:fd:dd:50:c7:7b:9b:
97:06:ea:41:31:ff:7a:f5:6a:5e:a9:61:f2:f0:08:dc:11:e8:
ff:92:d3:5d:80:1d:ba:fe:ba:31:67:5c:b5:55:4e:9c:89:78:
ba:73:51:87:d7:4d:77:fa:37:51:52:67:b8:f3:5d:7f:21:4c:
5f:06:23:33:30:b1:d6:d5:6d:ca:2e:11:c8:55:71:44:49:9d:
55:ae:db:cb:c3:02:28:51:e8:84:72:53:32:bb:8b:24:de:46:
30:7e:35:2d:c4:b2:29:71:32:83:0a:c2:70:c5:7d:6f:b7:31:
9d:4b:de:2e:a3:93:cf:23:5e:67:32:79:1b:d9:11:36:3a:8b:
3e:1f:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:29:51 2025 by rpki-client