Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/CPrj1X9dAhSu9uVuonAqGons7MU.roa
File: CPrj1X9dAhSu9uVuonAqGons7MU.roa (raw, json)
Hash identifier: 7KsCSCrGKFtA8Wm5mKiQkQP5JAp3U0rN3HIx4A3ASgk=
Subject key identifier: 08:FA:E3:D5:7F:5D:02:14:AE:F6:E5:6E:A2:70:2A:1A:89:EC:EC:C5
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019787C63547A141C55A4F49AFEB7CD3F3F8
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/CPrj1X9dAhSu9uVuonAqGons7MU.roa
Signing time: Thu 19 Jun 2025 10:40:03 +0000
ROA not before: Thu 19 Jun 2025 10:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:c6:35:47:a1:41:c5:5a:4f:49:af:eb:7c:d3:f3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jun 19 10:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08fae3d57f5d0214aef6e56ea2702a1a89ececc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:9a:f1:ed:c6:97:bd:8e:dd:0a:05:f0:fe:
53:74:5f:5c:2a:20:e2:84:15:8f:27:b0:fe:15:e5:
83:57:55:ff:ed:77:90:de:29:a1:8d:da:6a:7b:21:
9a:70:0c:f4:3e:65:8f:e0:7c:fd:c8:8c:09:3d:8e:
7b:7e:c3:23:72:1f:05:4b:cf:4f:ec:58:c0:69:1a:
ca:fc:5d:3d:0d:41:3d:bb:b4:2c:f6:be:4d:f7:96:
72:21:f9:bb:18:48:e8:37:b6:25:dc:77:1c:16:89:
e4:1b:4f:76:95:7e:d8:7f:e5:b5:5e:ff:e7:4d:1a:
ad:26:65:14:03:f6:1f:5f:0a:41:1f:fc:6c:4c:06:
70:38:ca:14:14:ad:41:fb:97:cf:d1:bd:10:4d:19:
57:a9:a0:3b:8c:d2:13:b1:e2:82:67:9e:9c:8b:4b:
a4:f2:7a:e5:d6:bf:df:06:3f:c4:79:5d:9a:55:41:
31:31:b5:e5:7d:69:26:0e:6c:82:00:13:14:96:b9:
27:f7:38:03:24:8c:94:65:98:86:58:a7:d5:bc:b6:
7c:37:8d:75:1e:08:16:96:e5:0c:b0:5d:c8:cc:a5:
66:73:40:ad:c2:ab:79:07:22:22:b8:f4:57:95:86:
6c:eb:c4:5a:c8:46:bc:ed:62:ef:98:68:2b:09:67:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FA:E3:D5:7F:5D:02:14:AE:F6:E5:6E:A2:70:2A:1A:89:EC:EC:C5
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/CPrj1X9dAhSu9uVuonAqGons7MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:4d:3a:a7:19:a2:2a:ae:21:ea:6a:f8:ff:15:b0:e3:13:0f:
d1:3c:10:56:2b:5b:4b:4e:89:7f:1a:80:e0:15:6b:78:7e:11:
cd:bf:42:0c:31:bb:89:4c:38:7b:db:74:88:4a:2d:28:5c:ba:
66:51:60:98:4a:ed:47:2c:3b:c8:ba:cb:72:cb:d2:13:f8:26:
0d:2b:30:89:7b:86:b7:92:4c:a8:45:9e:3e:ad:8c:3d:7f:04:
26:40:d5:da:ef:dd:14:d0:18:1b:9a:c4:71:9a:58:37:5f:7e:
2e:60:95:ba:65:42:fa:41:87:05:8c:ed:3c:c3:8f:5a:25:e6:
3a:43:d8:f2:a0:39:00:41:17:54:c3:a4:5f:cd:75:dd:6d:11:
62:4e:1a:b7:15:3c:f1:c7:ac:8e:34:b5:01:23:79:b7:7d:25:
3e:48:6e:d1:35:19:02:90:35:6c:ae:54:14:10:45:f5:af:4b:
48:39:55:b1:f8:7b:94:7f:15:d8:92:5f:cf:9a:11:ea:fd:30:
a1:92:76:18:91:4b:4e:a4:af:d7:49:5b:e1:b0:af:4c:75:3e:
1d:d0:f4:94:bb:9b:2e:93:0e:68:6f:11:31:ae:af:3a:d5:c8:
f9:08:4f:2f:09:36:8b:49:ad:ba:87:77:f2:9e:e9:99:ae:9b:
58:10:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:23:11 2025 by rpki-client