Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qeYe89HsEaxGcm97rbX8Cys6hbo.roa
File: qeYe89HsEaxGcm97rbX8Cys6hbo.roa (raw, json)
Hash identifier: d+oPMzYJD317bV3IvlkE9K2RAwvBEUJvsDCsnwm2MiA=
Subject key identifier: A9:E6:1E:F3:D1:EC:11:AC:46:72:6F:7B:AD:B5:FC:0B:2B:3A:85:BA
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019762BB66297E72954CE66C231CA12B1111
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qeYe89HsEaxGcm97rbX8Cys6hbo.roa
Signing time: Thu 12 Jun 2025 06:02:17 +0000
ROA not before: Thu 12 Jun 2025 06:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:bb:66:29:7e:72:95:4c:e6:6c:23:1c:a1:2b:11:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 12 06:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9e61ef3d1ec11ac46726f7badb5fc0b2b3a85ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:a2:55:11:a5:f1:03:91:66:60:39:d3:d1:
66:d8:01:d9:99:9f:28:ad:01:df:aa:59:d0:ae:50:
2c:82:ca:67:5a:0c:df:de:aa:24:bc:75:a8:fd:37:
e4:b8:b6:d5:38:05:0e:c5:16:78:33:2d:77:97:18:
5a:0e:7c:3a:03:04:18:20:71:c7:1a:00:e3:a0:4c:
45:77:1b:28:98:64:df:3d:eb:13:74:bf:5a:0f:76:
0d:c7:97:b3:5e:5f:36:9f:a9:91:a7:6b:c3:f2:3c:
c8:db:6e:92:c2:31:41:52:61:7e:df:3e:e2:90:1d:
c5:7e:38:07:02:be:d8:f9:7a:ab:3d:c4:49:7d:c3:
48:5a:ce:eb:55:dd:f0:5e:8d:4c:35:8d:e4:96:62:
bb:f8:4f:81:e6:6e:a1:0c:94:c2:7a:96:60:99:f5:
05:b4:61:18:aa:2c:07:91:3a:a8:a7:4a:51:c1:7c:
7f:12:cf:2d:4c:fe:6d:c7:be:97:92:f7:97:fa:49:
df:63:ad:95:91:38:da:5c:25:30:97:64:49:5e:fd:
6d:e0:28:52:13:55:02:f0:5f:cf:19:9c:ec:86:d9:
1f:48:25:fc:f0:4f:6f:7a:30:3b:1b:72:9f:a1:54:
9c:f7:c2:4e:4a:93:d2:59:c7:97:65:3d:f2:45:29:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:1E:F3:D1:EC:11:AC:46:72:6F:7B:AD:B5:FC:0B:2B:3A:85:BA
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qeYe89HsEaxGcm97rbX8Cys6hbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
4f:df:82:45:45:59:61:0e:4c:94:f1:a3:0a:54:32:8b:64:e4:
f8:07:af:4a:59:e6:88:5b:30:3e:18:fe:08:c0:4a:03:0c:78:
fc:fc:45:99:b2:19:79:86:b2:a4:0d:ae:e4:3a:0c:be:53:27:
32:07:6e:7c:28:e6:18:31:e9:28:37:b2:02:6c:e6:9a:b2:cc:
b2:e6:ed:13:92:2a:d6:81:8a:d1:1a:c0:a6:54:0a:9f:a9:8e:
d7:4a:39:63:ee:d8:4e:82:f2:01:a8:22:78:e1:a0:87:6b:06:
94:bd:c9:5a:7e:f9:4a:fc:2a:be:81:09:6e:d6:b8:7b:76:19:
76:7c:4f:5b:3b:22:52:d6:29:f7:e8:d0:14:01:63:4d:ec:1e:
67:57:7c:0b:b0:04:25:b6:24:7e:10:5c:e9:2d:25:15:f6:4f:
b5:ea:1b:ef:24:0b:99:dc:7c:0b:45:41:54:42:bc:c8:36:2b:
5c:0e:9a:5d:b3:e2:d6:ec:a9:87:11:71:3e:ae:88:ee:c2:f5:
6a:5b:6f:de:28:0c:65:97:12:20:67:be:a8:6c:70:00:02:1e:
e9:d2:ea:4c:b4:74:50:e7:b5:21:74:6b:cf:35:ae:d8:2a:79:
de:87:44:91:4e:ab:57:37:18:02:3b:cd:db:9d:46:aa:dd:76:
61:0c:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:03 2025 by rpki-client