Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/fCzm3iDfGNLzSTbcoduj_jsEwe0.roa
File: fCzm3iDfGNLzSTbcoduj_jsEwe0.roa (raw, json)
Hash identifier: pBY7VkXWNq309M84LTxPPh1gnhuSALeJ8x7uuHmSmZ0=
Subject key identifier: 7C:2C:E6:DE:20:DF:18:D2:F3:49:36:DC:A1:DB:A3:FE:3B:04:C1:ED
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 01978DD348FBFCB6BEA0B18715F155042640
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/fCzm3iDfGNLzSTbcoduj_jsEwe0.roa
Signing time: Fri 20 Jun 2025 14:52:03 +0000
ROA not before: Fri 20 Jun 2025 14:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34758
IP address blocks: 31.6.80.0/20 maxlen: 20
31.6.80.0/24 maxlen: 24
31.6.81.0/24 maxlen: 24
31.6.82.0/24 maxlen: 24
31.6.83.0/24 maxlen: 24
31.6.84.0/24 maxlen: 24
31.6.85.0/24 maxlen: 24
31.6.86.0/24 maxlen: 24
31.6.87.0/24 maxlen: 24
31.6.88.0/24 maxlen: 24
31.6.89.0/24 maxlen: 24
31.6.90.0/24 maxlen: 24
31.6.91.0/24 maxlen: 24
31.6.92.0/24 maxlen: 24
31.6.93.0/24 maxlen: 24
31.6.94.0/24 maxlen: 24
31.6.95.0/24 maxlen: 24
45.13.88.0/22 maxlen: 22
45.13.88.0/24 maxlen: 24
45.13.89.0/24 maxlen: 24
45.13.90.0/24 maxlen: 24
45.13.91.0/24 maxlen: 24
45.93.36.0/22 maxlen: 22
45.93.36.0/24 maxlen: 24
45.93.37.0/24 maxlen: 24
45.93.38.0/24 maxlen: 24
45.93.39.0/24 maxlen: 24
46.229.80.0/20 maxlen: 20
46.229.80.0/24 maxlen: 24
46.229.81.0/24 maxlen: 24
46.229.82.0/24 maxlen: 24
46.229.83.0/24 maxlen: 24
46.229.84.0/24 maxlen: 24
46.229.85.0/24 maxlen: 24
46.229.86.0/24 maxlen: 24
46.229.87.0/24 maxlen: 24
46.229.88.0/24 maxlen: 24
46.229.89.0/24 maxlen: 24
46.229.90.0/24 maxlen: 24
46.229.91.0/24 maxlen: 24
46.229.92.0/24 maxlen: 24
46.229.93.0/24 maxlen: 24
46.229.94.0/24 maxlen: 24
46.229.95.0/24 maxlen: 24
80.70.116.0/22 maxlen: 22
80.70.116.0/24 maxlen: 24
80.70.117.0/24 maxlen: 24
80.70.118.0/24 maxlen: 24
80.70.119.0/24 maxlen: 24
82.163.32.0/22 maxlen: 22
82.163.32.0/24 maxlen: 24
82.163.33.0/24 maxlen: 24
82.163.34.0/24 maxlen: 24
82.163.35.0/24 maxlen: 24
84.234.100.0/22 maxlen: 22
84.234.100.0/24 maxlen: 24
84.234.101.0/24 maxlen: 24
84.234.102.0/24 maxlen: 24
84.234.103.0/24 maxlen: 24
89.189.32.0/20 maxlen: 20
89.189.32.0/24 maxlen: 24
89.189.33.0/24 maxlen: 24
89.189.34.0/24 maxlen: 24
89.189.35.0/24 maxlen: 24
89.189.36.0/24 maxlen: 24
89.189.37.0/24 maxlen: 24
89.189.38.0/24 maxlen: 24
89.189.39.0/24 maxlen: 24
89.189.40.0/24 maxlen: 24
89.189.41.0/24 maxlen: 24
89.189.42.0/24 maxlen: 24
89.189.43.0/24 maxlen: 24
89.189.44.0/24 maxlen: 24
89.189.45.0/24 maxlen: 24
89.189.46.0/24 maxlen: 24
89.189.47.0/24 maxlen: 24
89.189.56.0/21 maxlen: 21
89.189.56.0/24 maxlen: 24
89.189.57.0/24 maxlen: 24
89.189.58.0/24 maxlen: 24
89.189.59.0/24 maxlen: 24
89.189.60.0/24 maxlen: 24
89.189.61.0/24 maxlen: 24
89.189.62.0/24 maxlen: 24
89.189.63.0/24 maxlen: 24
92.246.96.0/21 maxlen: 21
92.246.96.0/24 maxlen: 24
92.246.97.0/24 maxlen: 24
92.246.98.0/24 maxlen: 24
92.246.99.0/24 maxlen: 24
92.246.100.0/24 maxlen: 24
92.246.101.0/24 maxlen: 24
92.246.102.0/24 maxlen: 24
92.246.103.0/24 maxlen: 24
92.246.112.0/20 maxlen: 20
92.246.112.0/24 maxlen: 24
92.246.113.0/24 maxlen: 24
92.246.114.0/24 maxlen: 24
92.246.115.0/24 maxlen: 24
92.246.116.0/24 maxlen: 24
92.246.117.0/24 maxlen: 24
92.246.118.0/24 maxlen: 24
92.246.119.0/24 maxlen: 24
92.246.120.0/24 maxlen: 24
92.246.121.0/24 maxlen: 24
92.246.122.0/24 maxlen: 24
92.246.123.0/24 maxlen: 24
92.246.124.0/24 maxlen: 24
92.246.125.0/24 maxlen: 24
92.246.126.0/24 maxlen: 24
92.246.127.0/24 maxlen: 24
93.93.16.0/21 maxlen: 21
93.93.16.0/24 maxlen: 24
93.93.17.0/24 maxlen: 24
93.93.18.0/24 maxlen: 24
93.93.19.0/24 maxlen: 24
93.93.20.0/24 maxlen: 24
93.93.21.0/24 maxlen: 24
93.93.22.0/24 maxlen: 24
93.93.23.0/24 maxlen: 24
109.234.136.0/21 maxlen: 21
109.234.136.0/24 maxlen: 24
109.234.137.0/24 maxlen: 24
109.234.138.0/24 maxlen: 24
109.234.139.0/24 maxlen: 24
109.234.140.0/24 maxlen: 24
109.234.141.0/24 maxlen: 24
109.234.142.0/24 maxlen: 24
109.234.143.0/24 maxlen: 24
146.255.160.0/21 maxlen: 21
146.255.160.0/24 maxlen: 24
146.255.161.0/24 maxlen: 24
146.255.162.0/24 maxlen: 24
146.255.163.0/24 maxlen: 24
146.255.164.0/24 maxlen: 24
146.255.165.0/24 maxlen: 24
146.255.166.0/24 maxlen: 24
146.255.167.0/24 maxlen: 24
159.255.156.0/22 maxlen: 22
159.255.156.0/24 maxlen: 24
159.255.157.0/24 maxlen: 24
159.255.158.0/24 maxlen: 24
159.255.159.0/24 maxlen: 24
185.23.84.0/22 maxlen: 22
185.23.84.0/24 maxlen: 24
185.23.85.0/24 maxlen: 24
185.23.86.0/24 maxlen: 24
185.23.87.0/24 maxlen: 24
185.103.80.0/22 maxlen: 22
185.103.80.0/24 maxlen: 24
185.103.81.0/24 maxlen: 24
185.103.82.0/24 maxlen: 24
185.103.83.0/24 maxlen: 24
185.126.140.0/22 maxlen: 22
185.126.140.0/24 maxlen: 24
185.126.141.0/24 maxlen: 24
185.126.142.0/24 maxlen: 24
185.126.143.0/24 maxlen: 24
185.138.36.0/22 maxlen: 22
185.138.36.0/23 maxlen: 23
185.138.36.0/24 maxlen: 24
185.138.37.0/24 maxlen: 24
185.138.38.0/23 maxlen: 23
185.138.38.0/24 maxlen: 24
185.138.39.0/24 maxlen: 24
185.158.28.0/22 maxlen: 22
185.158.28.0/24 maxlen: 24
185.158.29.0/24 maxlen: 24
185.158.30.0/24 maxlen: 24
185.158.31.0/24 maxlen: 24
185.171.36.0/22 maxlen: 22
185.171.36.0/24 maxlen: 24
185.171.37.0/24 maxlen: 24
185.171.38.0/24 maxlen: 24
185.171.39.0/24 maxlen: 24
185.178.12.0/22 maxlen: 22
185.178.12.0/24 maxlen: 24
185.178.13.0/24 maxlen: 24
185.178.14.0/24 maxlen: 24
185.178.15.0/24 maxlen: 24
193.238.136.0/22 maxlen: 22
193.238.136.0/24 maxlen: 24
193.238.137.0/24 maxlen: 24
193.238.138.0/24 maxlen: 24
193.238.139.0/24 maxlen: 24
195.225.224.0/22 maxlen: 22
195.225.224.0/24 maxlen: 24
195.225.225.0/24 maxlen: 24
195.225.226.0/24 maxlen: 24
195.225.227.0/24 maxlen: 24
213.178.192.0/20 maxlen: 20
213.178.192.0/24 maxlen: 24
213.178.193.0/24 maxlen: 24
213.178.194.0/24 maxlen: 24
213.178.195.0/24 maxlen: 24
213.178.196.0/24 maxlen: 24
213.178.197.0/24 maxlen: 24
213.178.198.0/24 maxlen: 24
213.178.199.0/24 maxlen: 24
213.178.200.0/24 maxlen: 24
213.178.201.0/24 maxlen: 24
213.178.202.0/24 maxlen: 24
213.178.203.0/24 maxlen: 24
213.178.204.0/24 maxlen: 24
213.178.205.0/24 maxlen: 24
213.178.206.0/24 maxlen: 24
213.178.207.0/24 maxlen: 24
217.72.32.0/21 maxlen: 21
217.72.32.0/24 maxlen: 24
217.72.33.0/24 maxlen: 24
217.72.34.0/24 maxlen: 24
217.72.35.0/24 maxlen: 24
217.72.36.0/24 maxlen: 24
217.72.37.0/24 maxlen: 24
217.72.38.0/24 maxlen: 24
217.72.39.0/24 maxlen: 24
2a04:2080::/29 maxlen: 48
2a06:c2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:d3:48:fb:fc:b6:be:a0:b1:87:15:f1:55:04:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 20 14:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c2ce6de20df18d2f34936dca1dba3fe3b04c1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:6c:13:ed:64:8b:a7:cf:bb:de:31:df:fc:
61:bf:eb:82:d5:89:86:33:56:0c:22:23:0c:90:6f:
b3:76:84:31:83:13:73:cf:b0:5b:81:9f:55:0b:84:
11:78:d3:cf:ea:2f:02:41:93:3b:7d:cb:e0:a6:a4:
9a:d4:1d:92:b0:a6:06:61:6c:80:79:90:ab:8a:71:
13:22:61:8a:3d:15:6e:c0:ea:48:47:d2:60:ab:76:
bb:b0:53:29:17:22:bf:a4:28:9c:3a:19:2f:1a:9a:
0f:bd:bf:86:10:8d:28:0f:e2:6b:69:1f:57:f9:7d:
c9:4c:bc:24:ef:38:b2:9e:5c:53:03:74:3d:20:75:
86:5a:63:74:74:01:67:aa:de:80:a3:59:74:0a:ce:
a8:86:6d:47:17:47:5d:e3:e2:12:be:5b:7c:1b:de:
fd:d8:c5:06:97:00:8e:97:03:23:b7:55:79:07:74:
a3:e2:06:62:66:33:67:14:6c:d8:e4:66:e8:57:2a:
af:f4:63:58:9f:c6:59:93:e6:80:9b:85:a3:7f:a1:
11:ea:43:05:d2:97:43:c8:ac:a7:fa:bd:fd:e8:e7:
1e:64:ed:83:e3:a7:3d:79:2b:c4:5c:83:cd:0f:06:
33:43:2e:84:51:d1:96:90:3e:73:e6:9a:f5:67:6d:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:E6:DE:20:DF:18:D2:F3:49:36:DC:A1:DB:A3:FE:3B:04:C1:ED
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/fCzm3iDfGNLzSTbcoduj_jsEwe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.80.0/20
45.13.88.0/22
45.93.36.0/22
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
92.246.96.0/21
92.246.112.0/20
93.93.16.0/21
109.234.136.0/21
146.255.160.0/21
159.255.156.0/22
185.23.84.0/22
185.103.80.0/22
185.126.140.0/22
185.138.36.0/22
185.158.28.0/22
185.171.36.0/22
185.178.12.0/22
193.238.136.0/22
195.225.224.0/22
213.178.192.0/20
217.72.32.0/21
IPv6:
2a04:2080::/29
2a06:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:c0:a2:ff:0b:4a:fd:84:59:86:b6:e1:5f:20:bd:32:ef:3a:
64:c4:f6:43:dd:cf:a1:7d:dd:56:87:ff:1a:19:89:6a:5f:ce:
49:6a:5f:68:bb:4e:a3:51:ed:b5:55:5f:dc:32:b8:b3:92:34:
5c:37:69:13:95:7c:8b:6d:66:48:65:13:74:f2:06:3a:05:1d:
8f:19:40:2d:57:29:d1:ce:8d:d7:28:8e:dd:8b:08:1c:32:2b:
68:1b:6b:ab:3f:dd:0d:a8:ea:5e:d5:a3:89:1e:18:0f:03:36:
b3:08:44:a5:33:8f:64:36:dd:87:95:76:32:b9:2e:76:19:e8:
85:f8:1a:3a:85:5d:5e:cb:25:a2:26:6e:7a:09:85:b2:26:c0:
fa:02:37:4e:db:1f:db:5b:76:96:80:3d:5b:30:bb:b8:c5:70:
0b:3d:8b:78:d9:88:ee:b6:ba:b3:0f:bd:0d:d0:f1:65:44:2a:
f4:c4:91:ea:01:cf:43:28:ea:86:44:88:3e:a0:e0:1d:48:e6:
16:3f:13:d9:92:7a:7d:29:84:7a:8b:f0:e2:5b:e2:50:d7:8c:
a5:d4:9c:00:c3:83:b1:0d:86:bf:8a:c6:0b:f9:2d:4e:02:1f:
b6:9b:ab:74:ce:4f:26:95:74:02:47:01:87:5c:0d:32:52:71:
fe:c8:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:28:57 2025 by rpki-client