Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ecf817WnJwsGfmatFeQyUhb3Llc.roa
File: ecf817WnJwsGfmatFeQyUhb3Llc.roa (raw, json)
Hash identifier: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=
Subject key identifier: 79:C7:FC:D7:B5:A7:27:0B:06:7E:66:AD:15:E4:32:52:16:F7:2E:57
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 01977CAE76E1234E1BABCCF4E6F16EB3BC26
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ecf817WnJwsGfmatFeQyUhb3Llc.roa
Signing time: Tue 17 Jun 2025 06:58:17 +0000
ROA not before: Tue 17 Jun 2025 06:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13097
IP address blocks: 46.229.80.0/20 maxlen: 20
46.229.80.0/24 maxlen: 24
46.229.81.0/24 maxlen: 24
46.229.82.0/24 maxlen: 24
46.229.83.0/24 maxlen: 24
46.229.84.0/24 maxlen: 24
46.229.85.0/24 maxlen: 24
46.229.86.0/24 maxlen: 24
46.229.87.0/24 maxlen: 24
46.229.88.0/24 maxlen: 24
46.229.89.0/24 maxlen: 24
46.229.90.0/24 maxlen: 24
46.229.91.0/24 maxlen: 24
46.229.92.0/24 maxlen: 24
46.229.93.0/24 maxlen: 24
46.229.94.0/24 maxlen: 24
46.229.95.0/24 maxlen: 24
80.70.116.0/22 maxlen: 22
80.70.116.0/24 maxlen: 24
80.70.117.0/24 maxlen: 24
80.70.118.0/24 maxlen: 24
80.70.119.0/24 maxlen: 24
82.163.32.0/22 maxlen: 22
82.163.32.0/24 maxlen: 24
82.163.33.0/24 maxlen: 24
82.163.34.0/24 maxlen: 24
82.163.35.0/24 maxlen: 24
84.234.100.0/22 maxlen: 22
84.234.100.0/24 maxlen: 24
84.234.101.0/24 maxlen: 24
84.234.102.0/24 maxlen: 24
84.234.103.0/24 maxlen: 24
89.189.32.0/20 maxlen: 20
89.189.32.0/24 maxlen: 24
89.189.33.0/24 maxlen: 24
89.189.34.0/24 maxlen: 24
89.189.35.0/24 maxlen: 24
89.189.36.0/24 maxlen: 24
89.189.37.0/24 maxlen: 24
89.189.38.0/24 maxlen: 24
89.189.39.0/24 maxlen: 24
89.189.40.0/24 maxlen: 24
89.189.41.0/24 maxlen: 24
89.189.42.0/24 maxlen: 24
89.189.43.0/24 maxlen: 24
89.189.44.0/24 maxlen: 24
89.189.45.0/24 maxlen: 24
89.189.46.0/24 maxlen: 24
89.189.47.0/24 maxlen: 24
89.189.56.0/21 maxlen: 21
89.189.56.0/24 maxlen: 24
89.189.57.0/24 maxlen: 24
89.189.58.0/24 maxlen: 24
89.189.59.0/24 maxlen: 24
89.189.60.0/24 maxlen: 24
89.189.61.0/24 maxlen: 24
89.189.62.0/24 maxlen: 24
89.189.63.0/24 maxlen: 24
185.138.36.0/22 maxlen: 22
185.138.36.0/23 maxlen: 23
185.138.36.0/24 maxlen: 24
185.138.37.0/24 maxlen: 24
185.138.38.0/23 maxlen: 23
185.138.38.0/24 maxlen: 24
185.138.39.0/24 maxlen: 24
185.178.12.0/22 maxlen: 22
185.178.12.0/24 maxlen: 24
185.178.13.0/24 maxlen: 24
185.178.14.0/24 maxlen: 24
185.178.15.0/24 maxlen: 24
213.178.192.0/20 maxlen: 20
213.178.192.0/24 maxlen: 24
213.178.193.0/24 maxlen: 24
213.178.194.0/24 maxlen: 24
213.178.195.0/24 maxlen: 24
213.178.196.0/24 maxlen: 24
213.178.197.0/24 maxlen: 24
213.178.198.0/24 maxlen: 24
213.178.199.0/24 maxlen: 24
213.178.200.0/24 maxlen: 24
213.178.201.0/24 maxlen: 24
213.178.202.0/24 maxlen: 24
213.178.203.0/24 maxlen: 24
213.178.204.0/24 maxlen: 24
213.178.205.0/24 maxlen: 24
213.178.206.0/24 maxlen: 24
213.178.207.0/24 maxlen: 24
2a01:7540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:ae:76:e1:23:4e:1b:ab:cc:f4:e6:f1:6e:b3:bc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 17 06:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79c7fcd7b5a7270b067e66ad15e4325216f72e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:f0:cb:4f:e2:e4:43:da:64:22:57:04:8e:
d4:95:1b:1e:b9:f3:07:ff:86:7e:df:72:be:d4:2c:
bf:d0:6a:b2:7e:59:d2:0d:47:6c:d0:b5:81:06:84:
e3:b9:d5:1a:c0:47:3b:56:90:87:0a:44:0b:76:4b:
93:c2:fb:10:3d:33:a3:3b:60:1a:53:19:f5:a1:ea:
39:f5:f6:77:04:0a:e1:60:0d:ba:4d:b2:bb:ad:26:
3a:31:54:b2:9d:79:61:b0:a4:5d:6f:53:6f:8f:b4:
da:bc:3e:7d:e8:6e:a6:c6:7a:54:a2:1f:ef:fd:6d:
19:e8:9a:42:76:64:09:41:62:17:a4:2b:35:d6:86:
e7:59:71:6c:91:a6:37:fc:a5:b6:ac:8e:36:3d:5a:
81:78:ed:3c:67:28:36:be:77:fd:40:2e:81:88:cd:
47:fc:29:27:2b:1d:36:90:57:f3:35:ce:69:97:df:
10:6f:94:1f:49:5d:71:7f:79:b8:82:98:21:c5:c7:
2f:2c:43:7b:3e:90:30:56:ce:f9:62:d2:29:3e:5e:
6c:03:a7:1a:3b:37:1e:71:f2:a7:90:e2:1c:4d:a2:
78:15:2f:f2:76:52:72:bd:4b:27:60:a2:81:2d:1b:
16:1c:85:24:0f:5d:84:2e:20:c7:97:f5:7b:78:49:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:FC:D7:B5:A7:27:0B:06:7E:66:AD:15:E4:32:52:16:F7:2E:57
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ecf817WnJwsGfmatFeQyUhb3Llc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
185.138.36.0/22
185.178.12.0/22
213.178.192.0/20
IPv6:
2a01:7540::/32
Signature Algorithm: sha256WithRSAEncryption
4d:5b:fa:e7:d4:96:79:ad:17:76:96:03:16:75:c7:f2:c4:29:
67:db:2a:37:e3:b4:20:c7:5a:9b:34:9e:d5:d3:b4:32:a5:26:
37:3e:67:f6:00:29:3e:01:a0:73:22:2c:72:64:d2:47:1d:98:
77:3c:60:19:f3:58:88:d8:ce:94:fa:c5:b6:ff:b6:bf:af:44:
4c:0e:87:63:d0:e3:3c:41:5c:2c:be:3a:33:d3:10:e2:ef:f5:
3c:0a:26:0c:44:68:72:c5:29:99:fe:c8:a9:d6:db:83:15:81:
58:2c:68:0f:e9:b9:02:b6:65:e5:65:e1:cb:a3:84:0e:f3:ec:
98:ac:43:68:87:1d:d7:74:fd:9a:90:4a:d4:7d:2f:1d:91:04:
6d:46:e5:17:66:e7:a9:08:8b:b2:99:fc:3b:f0:c6:1a:cd:7a:
88:e3:20:2d:e0:c0:aa:2b:74:6d:2b:bb:28:16:10:aa:4b:d8:
36:a6:24:04:55:4f:bd:14:52:13:ac:5d:0d:ec:25:12:6f:65:
83:97:2b:71:bf:ee:e6:7f:82:b5:ce:05:9d:85:a2:4d:03:83:
9a:bc:65:3a:c8:98:1c:4c:4a:15:d3:c5:18:7b:5f:f8:99:40:
eb:92:64:1f:d1:75:a8:d2:2d:69:b6:68:68:cc:27:f5:5c:12:
24:af:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:19:38 2025 by rpki-client