Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/VgUiEeJIxXgXUKm1I9oyuuQo5mg.roa
File: VgUiEeJIxXgXUKm1I9oyuuQo5mg.roa (raw, json)
Hash identifier: LdjQ6e+wd5+xiGsL6sMOMP76M/CKwsWvczyvuXspblA=
Subject key identifier: 56:05:22:11:E2:48:C5:78:17:50:A9:B5:23:DA:32:BA:E4:28:E6:68
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 0198A30356139A8C7F802FC1620C57F0DA4B
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/VgUiEeJIxXgXUKm1I9oyuuQo5mg.roa
Signing time: Wed 13 Aug 2025 10:39:21 +0000
ROA not before: Wed 13 Aug 2025 10:39:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5617
IP address blocks: 5.184.0.0/15 maxlen: 15
5.184.0.0/16 maxlen: 24
31.60.0.0/14 maxlen: 25
37.47.0.0/16 maxlen: 24
37.108.0.0/16 maxlen: 25
37.225.0.0/16 maxlen: 25
37.228.0.0/18 maxlen: 18
46.134.0.0/16 maxlen: 25
46.170.0.0/15 maxlen: 24
79.162.0.0/15 maxlen: 24
79.163.0.0/16 maxlen: 25
79.163.128.0/17 maxlen: 25
79.184.0.0/13 maxlen: 13
79.184.0.0/16 maxlen: 24
79.185.0.0/16 maxlen: 24
79.186.0.0/16 maxlen: 24
79.187.0.0/16 maxlen: 24
79.188.0.0/16 maxlen: 24
79.189.0.0/16 maxlen: 24
79.190.0.0/16 maxlen: 24
79.191.0.0/16 maxlen: 24
80.48.0.0/13 maxlen: 13
80.48.0.0/14 maxlen: 14
80.48.0.0/16 maxlen: 24
80.49.0.0/16 maxlen: 24
80.50.0.0/16 maxlen: 24
80.51.0.0/16 maxlen: 24
80.51.76.0/24 maxlen: 24
80.52.0.0/16 maxlen: 24
80.53.0.0/16 maxlen: 24
80.54.0.0/16 maxlen: 24
80.55.0.0/16 maxlen: 24
83.0.0.0/11 maxlen: 11
83.0.0.0/13 maxlen: 13
83.0.0.0/16 maxlen: 24
83.1.0.0/16 maxlen: 24
83.2.0.0/16 maxlen: 24
83.3.0.0/16 maxlen: 24
83.4.0.0/16 maxlen: 24
83.5.0.0/16 maxlen: 24
83.6.0.0/16 maxlen: 24
83.7.0.0/16 maxlen: 24
83.8.0.0/13 maxlen: 13
83.8.0.0/16 maxlen: 24
83.9.0.0/16 maxlen: 24
83.10.0.0/16 maxlen: 24
83.11.0.0/16 maxlen: 24
83.12.0.0/16 maxlen: 24
83.13.0.0/16 maxlen: 24
83.14.0.0/16 maxlen: 24
83.15.0.0/16 maxlen: 24
83.16.0.0/13 maxlen: 13
83.16.0.0/16 maxlen: 24
83.17.0.0/16 maxlen: 24
83.18.0.0/16 maxlen: 24
83.19.0.0/16 maxlen: 24
83.20.0.0/16 maxlen: 24
83.21.0.0/16 maxlen: 24
83.22.0.0/16 maxlen: 24
83.23.0.0/16 maxlen: 24
83.24.0.0/13 maxlen: 13
83.24.0.0/16 maxlen: 24
83.25.0.0/16 maxlen: 24
83.26.0.0/16 maxlen: 24
83.27.0.0/16 maxlen: 24
83.28.0.0/16 maxlen: 24
83.29.0.0/16 maxlen: 24
83.30.0.0/16 maxlen: 24
83.31.0.0/16 maxlen: 24
87.96.0.0/17 maxlen: 24
91.94.0.0/16 maxlen: 24
95.48.0.0/14 maxlen: 14
95.48.0.0/16 maxlen: 24
95.49.0.0/16 maxlen: 24
95.50.0.0/16 maxlen: 24
95.51.0.0/16 maxlen: 24
178.42.0.0/15 maxlen: 24
178.56.0.0/16 maxlen: 24
188.47.0.0/16 maxlen: 24
193.110.120.0/22 maxlen: 22
194.204.128.0/18 maxlen: 18
194.204.152.0/24 maxlen: 24
194.204.159.0/24 maxlen: 24
195.116.0.0/16 maxlen: 24
195.117.0.0/16 maxlen: 24
195.205.0.0/16 maxlen: 24
195.205.147.0/24 maxlen: 24
195.205.239.0/24 maxlen: 24
212.160.0.0/16 maxlen: 24
212.160.172.0/24 maxlen: 24
212.244.0.0/16 maxlen: 24
212.244.226.0/24 maxlen: 24
213.25.0.0/16 maxlen: 24
213.25.92.0/24 maxlen: 24
213.25.125.0/24 maxlen: 24
213.25.164.0/24 maxlen: 24
213.25.166.0/24 maxlen: 24
213.76.0.0/16 maxlen: 24
213.76.129.0/24 maxlen: 24
213.76.135.0/24 maxlen: 24
213.76.140.0/24 maxlen: 24
213.76.143.0/24 maxlen: 24
213.76.146.0/24 maxlen: 24
213.77.0.0/16 maxlen: 24
213.77.0.0/17 maxlen: 17
213.77.5.0/24 maxlen: 24
213.77.20.0/24 maxlen: 24
213.77.34.0/24 maxlen: 24
213.77.68.0/24 maxlen: 24
213.77.68.192/26 maxlen: 26
217.96.0.0/14 maxlen: 14
217.96.0.0/16 maxlen: 24
217.97.0.0/16 maxlen: 24
217.98.0.0/16 maxlen: 24
217.99.0.0/16 maxlen: 24
217.116.96.0/20 maxlen: 20
217.116.100.0/22 maxlen: 22
2a00:f40::/29 maxlen: 29
2a01:1000::/21 maxlen: 21
2a01:1100::/28 maxlen: 28
2a01:1110::/28 maxlen: 28
2a01:1120::/28 maxlen: 28
2a01:1130::/28 maxlen: 28
2a01:1140::/28 maxlen: 28
2a01:1150::/28 maxlen: 28
2a01:1160::/28 maxlen: 28
2a01:1170::/28 maxlen: 28
2a01:1180::/28 maxlen: 28
2a01:1190::/28 maxlen: 28
2a01:11a0::/28 maxlen: 28
2a01:11b0::/28 maxlen: 28
2a01:11c0::/28 maxlen: 28
2a01:11d0::/28 maxlen: 28
2a01:1700:2::/48 maxlen: 48
2a01:1700:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:03:56:13:9a:8c:7f:80:2f:c1:62:0c:57:f0:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Aug 13 10:39:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56052211e248c5781750a9b523da32bae428e668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:51:da:a2:85:ab:64:8a:e2:ad:e6:fb:29:
dd:d1:cf:ef:f0:a9:00:fa:6d:2f:a5:6d:5a:23:07:
86:81:98:7d:58:d8:00:98:35:4b:5e:c8:44:1f:fc:
82:62:fb:c5:b1:5e:ab:eb:3c:b1:c5:6a:b0:1d:11:
f1:6f:e4:e4:62:68:a3:29:05:3a:7f:c5:ad:81:6b:
9d:80:3b:aa:e9:14:0e:e2:e7:e3:33:36:11:30:a9:
e5:97:ce:59:de:03:77:c3:16:da:d0:1b:1b:a3:d2:
39:2b:cb:49:9e:43:79:f7:45:86:ad:c5:6f:b1:fa:
ed:96:3e:e9:d7:72:48:ed:39:27:28:ec:64:37:c5:
30:a7:98:b2:e5:8e:89:6f:f6:ca:f4:5c:48:29:28:
50:c9:a8:4d:82:bc:54:5c:92:96:3a:7b:bd:71:57:
f4:ec:b6:70:55:f7:58:76:ea:59:b0:26:4d:d4:27:
dc:a8:09:7c:4c:3d:ff:c7:90:ee:cf:eb:28:69:43:
21:4a:84:9e:64:6b:de:ff:cc:69:a6:b1:49:b5:f3:
a9:7a:b6:78:a7:09:20:6c:02:29:34:42:b0:72:8e:
7b:c5:fb:d5:73:f7:8a:f3:11:4d:09:63:34:81:fa:
c6:90:1c:d1:b9:4f:bb:1b:5c:b1:31:39:87:b8:90:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:22:11:E2:48:C5:78:17:50:A9:B5:23:DA:32:BA:E4:28:E6:68
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/VgUiEeJIxXgXUKm1I9oyuuQo5mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.184.0.0/15
31.60.0.0/14
37.47.0.0/16
37.108.0.0/16
37.225.0.0/16
37.228.0.0/18
46.134.0.0/16
46.170.0.0/15
79.162.0.0/15
79.184.0.0/13
80.48.0.0/13
83.0.0.0/11
87.96.0.0/17
91.94.0.0/16
95.48.0.0/14
178.42.0.0/15
178.56.0.0/16
188.47.0.0/16
193.110.120.0/22
194.204.128.0/18
195.116.0.0/15
195.205.0.0/16
212.160.0.0/16
212.244.0.0/16
213.25.0.0/16
213.76.0.0/15
217.96.0.0/14
217.116.96.0/20
IPv6:
2a00:f40::/29
2a01:1000::/21
Signature Algorithm: sha256WithRSAEncryption
92:d8:d5:62:81:66:47:85:4c:da:2b:d1:24:0e:2d:3c:68:53:
98:12:bc:17:35:91:48:7e:a2:a6:35:9b:7d:31:46:3a:e9:fc:
96:d9:9b:a2:c4:d3:78:a6:86:ca:96:a0:f4:db:58:69:ef:6f:
da:a0:6f:f1:22:fd:91:7b:77:b8:b5:a4:2f:f9:36:e2:b5:7c:
bd:76:fc:aa:01:9b:db:ae:14:85:25:31:15:74:78:48:db:fc:
87:a9:df:a8:61:2c:ff:2c:78:6b:e0:cc:9f:e3:45:54:9f:d6:
bd:61:cc:a2:7c:3c:43:71:c9:ce:a9:06:56:ed:cd:2a:2a:82:
2b:44:0a:f3:08:24:4f:a0:fd:59:0d:bd:b8:cb:b6:a4:c1:8b:
c3:48:9e:ed:d4:8d:0a:82:97:2f:13:f5:33:a5:cd:b1:8b:7d:
f3:03:1e:0c:07:37:62:3f:4e:6e:e6:6f:eb:ef:f4:ab:df:49:
97:8a:73:dc:76:10:11:91:24:5d:a5:cf:55:31:06:c3:9b:4b:
64:66:5e:72:90:0d:0e:2b:de:a3:cb:bb:b7:7f:0a:ee:17:13:
d7:17:83:5e:0e:91:e8:fe:4f:4b:1e:7d:40:8d:5d:6f:a2:d7:
ac:3b:59:1e:2c:dd:30:2f:1c:1d:3a:a1:d5:6d:00:35:a5:fa:
f8:91:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:05 2025 by rpki-client