Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/fNqFZcYF2_1HXtKP3YAnMJiL05k.roa
File: fNqFZcYF2_1HXtKP3YAnMJiL05k.roa (raw, json)
Hash identifier: LBsyuYKuMmHv7pIk5htHzQ/YfVLMUXTLZXL7cSsvShQ=
Subject key identifier: 7C:DA:85:65:C6:05:DB:FD:47:5E:D2:8F:DD:80:27:30:98:8B:D3:99
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 0198CEE2C2604BD51B8F7963709782D511CF
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/fNqFZcYF2_1HXtKP3YAnMJiL05k.roa
Signing time: Thu 21 Aug 2025 23:07:04 +0000
ROA not before: Thu 21 Aug 2025 23:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 22
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 19
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.178.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:e2:c2:60:4b:d5:1b:8f:79:63:70:97:82:d5:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Aug 21 23:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cda8565c605dbfd475ed28fdd802730988bd399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:46:61:6d:c0:9d:11:26:70:3d:1f:cd:95:
05:52:44:b7:de:8b:32:1c:a1:cb:67:20:0a:22:6c:
ff:13:a1:19:1b:55:61:c5:ab:bf:6b:84:56:c7:d8:
33:4f:9d:9c:2e:90:ed:b6:cb:10:15:63:20:ad:53:
b4:0e:3b:ea:bf:fd:6b:c5:38:ab:77:e6:a3:73:96:
36:f1:b0:0c:5c:06:35:80:da:e7:06:19:d7:64:32:
f4:8a:70:22:85:f5:06:ae:40:13:7e:65:01:75:a8:
a2:74:b9:16:0e:6e:1f:0a:ed:58:cd:be:18:a5:f7:
77:e5:e0:a9:83:94:52:44:21:b6:aa:5b:f9:80:e8:
8c:19:7a:ae:ce:c6:24:bf:2d:54:8b:53:09:67:c8:
ad:c0:75:80:a2:ef:eb:fb:dd:fa:ba:28:20:d8:d4:
ca:68:d4:e6:64:f5:d9:a4:ac:eb:44:01:b9:45:1e:
4a:ff:68:c1:d5:a8:2d:58:7c:43:ac:a7:f8:74:fd:
e9:e5:2d:e5:6d:94:c3:7a:88:ea:f9:64:e3:5e:be:
1e:ea:dd:0d:dd:a3:a9:78:b2:81:14:83:1e:bd:0d:
99:0e:9e:50:22:0a:fa:b1:a4:e9:a8:4f:f1:a6:99:
16:16:55:46:3b:62:b9:79:c0:40:56:92:56:24:f3:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DA:85:65:C6:05:DB:FD:47:5E:D2:8F:DD:80:27:30:98:8B:D3:99
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/fNqFZcYF2_1HXtKP3YAnMJiL05k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.192.0/18
81.208.160.0/20
81.208.188.0/22
84.8.64.0/20
84.8.88.0/23
84.8.96.0-84.8.159.255
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.5.0.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.206.0-130.110.214.255
130.110.216.0/24
130.110.218.0-130.110.221.255
130.110.223.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
141.253.96.0/19
141.253.192.0/19
145.241.112.0/20
145.241.144.0-145.241.175.255
145.241.178.0/23
145.241.182.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:01:e1:f7:46:d3:53:07:f5:b5:75:b2:45:19:3a:8a:e4:dd:
ba:02:e4:e0:40:5a:19:d4:6b:b2:40:f4:b9:23:0e:33:b2:a8:
bb:d7:13:15:cd:b6:ef:fb:1f:47:1f:64:81:a0:83:e6:45:88:
37:d4:23:aa:a2:9d:f5:7c:4d:ee:98:80:4a:15:46:a0:1b:06:
8e:40:be:b7:7d:5d:3f:69:68:5f:b8:e6:ae:76:b6:fe:c7:bc:
be:9e:d2:ca:03:5d:e3:4a:65:a4:d6:77:20:f3:dd:4d:4f:81:
20:ca:ce:28:72:bc:b8:c6:f9:ad:b2:61:9e:38:c7:cc:a8:ef:
39:82:b2:2c:75:f1:a6:d3:dc:0e:d7:ca:5d:19:31:59:5c:90:
b0:a9:63:a4:ef:73:1d:88:89:6b:58:4c:0c:db:fe:5d:d8:da:
69:34:8e:85:ec:00:41:05:10:8e:83:5f:b6:5b:1c:58:14:e9:
90:15:f1:a9:65:fd:35:11:d9:27:17:0f:3a:3e:4d:a2:89:4d:
57:e6:e0:9c:4b:37:de:d6:32:bd:39:d1:64:46:1d:ca:4b:69:
ec:fd:62:2b:18:ab:7d:33:b4:62:46:78:36:bd:b1:c8:d9:c2:
8b:4e:13:b8:70:8a:12:50:ea:37:17:cf:e6:96:fd:cb:9d:7c:
75:67:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:34 2025 by rpki-client