Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uoSql9eLKO_ZD-7GiX3CDUROtkc.roa
File: uoSql9eLKO_ZD-7GiX3CDUROtkc.roa (raw, json)
Hash identifier: b6b4cVt+35lchtpCtRe3TMmQe29LtJkq1AOE47brSSU=
Subject key identifier: BA:84:AA:97:D7:8B:28:EF:D9:0F:EE:C6:89:7D:C2:0D:44:4E:B6:47
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0198BC37B6A0B535E4042E4C2FA9A7A6522F
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uoSql9eLKO_ZD-7GiX3CDUROtkc.roa
Signing time: Mon 18 Aug 2025 08:07:04 +0000
ROA not before: Mon 18 Aug 2025 08:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.149.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:37:b6:a0:b5:35:e4:04:2e:4c:2f:a9:a7:a6:52:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Aug 18 08:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba84aa97d78b28efd90feec6897dc20d444eb647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:c4:50:2a:86:e9:d2:fc:73:d3:2f:4f:b8:
10:2d:13:53:ab:28:40:85:f2:38:94:77:72:83:bf:
98:ae:0b:5b:f4:a0:dc:04:b2:ba:f6:84:38:9e:2d:
19:48:08:0f:f8:b7:27:90:69:f6:03:23:7c:9a:a4:
c7:34:e8:9f:89:4d:c7:c0:70:6f:09:f4:2e:24:68:
2f:90:6d:5d:4c:4b:5b:b0:ef:f4:e9:f0:54:5a:15:
c4:b9:cb:43:04:fb:cc:96:30:80:05:73:8f:58:c8:
18:da:5d:08:c2:a3:ab:6e:6f:7b:cd:d0:48:74:3e:
23:ef:4f:e6:39:58:18:fc:30:4b:a2:b3:60:a7:74:
86:e8:8d:14:df:63:44:e4:51:a6:40:0e:b1:76:9d:
5c:eb:8b:ea:b8:6b:ad:77:10:99:16:5f:3a:65:60:
53:b6:75:ab:5d:df:44:4d:95:4d:49:7e:cd:f4:7f:
ee:39:d7:7e:b9:de:51:40:e9:31:b0:39:ec:f8:92:
34:de:f9:00:2c:de:25:c2:fe:d6:a5:f4:fb:66:0e:
b0:2e:7c:0a:33:bd:23:f6:2f:8c:01:eb:78:2b:d8:
69:07:ee:09:dc:3c:57:f7:dc:89:d7:1f:57:81:f6:
51:d6:11:1d:10:32:1c:15:e9:e3:bd:4a:68:e9:57:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:AA:97:D7:8B:28:EF:D9:0F:EE:C6:89:7D:C2:0D:44:4E:B6:47
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uoSql9eLKO_ZD-7GiX3CDUROtkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.149.0/24
91.148.160.0/24
91.148.168.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f0:b0:64:d1:61:57:67:36:62:d3:d1:90:44:c5:16:cd:f6:
2d:43:99:ac:71:7c:cb:53:da:36:be:0f:47:d9:22:17:67:da:
40:13:b5:8d:2c:21:5c:d2:d2:fc:20:ed:10:13:af:ad:0c:68:
3f:a7:1c:52:ca:77:7a:8e:4f:48:15:e5:2a:9d:20:b3:82:a9:
a8:65:b8:8f:44:0a:42:52:7a:9b:f5:fc:fc:fc:4b:94:06:2b:
b2:d4:ea:a6:f7:68:3e:15:ff:7e:21:dd:84:ef:2d:97:c1:c6:
4f:b4:99:9b:bd:93:a2:10:8c:44:2b:1e:0d:ac:b3:f1:cf:87:
f2:7e:b8:6d:6d:7a:4a:53:e3:5d:e8:99:16:67:6f:e1:12:d7:
84:18:59:73:fc:08:0f:a7:f1:d2:06:f3:cc:5e:33:44:65:8c:
24:b5:6f:04:8c:11:67:c8:d0:56:cd:73:c0:51:07:7f:32:de:
5a:50:6c:b7:ff:82:95:48:37:5f:fd:76:1d:4b:06:77:31:e2:
e2:a0:12:ad:e5:03:1e:11:9e:2a:0b:31:4c:5d:54:81:6d:ae:
6e:1c:92:d2:fd:c0:7b:73:4c:1d:44:b4:80:69:66:49:42:f5:
b6:f3:6a:d4:f3:ee:fc:08:2e:fd:1d:03:5d:c1:df:72:72:24:
65:15:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:11:06 2025 by rpki-client