Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/YN9vQtRq6H4TpgucIWWeQrh0s2I.roa
File: YN9vQtRq6H4TpgucIWWeQrh0s2I.roa (raw, json)
Hash identifier: twjdgEYxcHrpnl9UnApMiRwmOFwUIxDF5Sg/k+h/7Ng=
Subject key identifier: 60:DF:6F:42:D4:6A:E8:7E:13:A6:0B:9C:21:65:9E:42:B8:74:B3:62
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 01963D8E2F596FB4F20262835BF61846A45F
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/YN9vQtRq6H4TpgucIWWeQrh0s2I.roa
Signing time: Wed 16 Apr 2025 07:44:10 +0000
ROA not before: Wed 16 Apr 2025 07:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/18 maxlen: 23
94.134.89.0/24 maxlen: 24
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:8e:2f:59:6f:b4:f2:02:62:83:5b:f6:18:46:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Apr 16 07:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60df6f42d46ae87e13a60b9c21659e42b874b362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:ec:01:5a:38:f6:a4:1d:c8:89:f3:36:9c:
4e:f1:ff:d3:1a:b5:46:43:33:c6:28:e1:6f:8a:83:
f5:35:bd:47:ad:7b:8c:13:a5:52:be:5c:04:aa:0a:
ab:c4:04:0b:68:ab:ef:6b:41:a3:f2:c9:21:6a:7b:
b7:6b:03:82:9a:ab:6f:4a:01:31:9e:39:d0:e5:c6:
99:24:83:1a:fb:e1:c4:a5:cb:1c:70:87:6d:33:cb:
20:4f:49:2b:49:58:dc:c7:75:83:bb:35:14:87:0d:
d2:38:0f:5d:80:b3:ee:8d:13:24:9c:47:c8:8e:fc:
96:23:b2:a3:3c:33:f1:ed:10:87:84:e4:ab:9f:00:
53:f4:6b:b6:37:5c:ea:44:06:78:13:69:ae:2c:7d:
81:20:b4:a7:1c:ce:11:34:3e:b5:4b:8e:a8:eb:c9:
69:e4:a7:36:08:b5:88:0a:37:c5:50:c3:d4:b7:0f:
7b:34:c0:12:7b:fa:97:26:ac:c2:e5:5b:cd:98:cd:
ec:8d:af:6e:20:1f:a0:88:d9:f7:45:29:5a:f9:88:
ed:80:db:30:19:34:70:d3:6a:d0:83:9d:25:82:42:
97:ca:99:fb:ef:8b:28:b2:68:4c:d1:d3:46:27:2a:
81:04:79:7e:cf:88:b9:c1:c6:2d:88:20:d3:3e:05:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DF:6F:42:D4:6A:E8:7E:13:A6:0B:9C:21:65:9E:42:B8:74:B3:62
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/YN9vQtRq6H4TpgucIWWeQrh0s2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
25:e9:25:b8:e1:b9:84:b6:19:46:4a:9a:aa:ee:0c:77:1c:80:
cc:23:75:30:28:88:f0:cb:f3:cb:67:cd:09:80:13:1c:5f:59:
b9:d2:81:72:3f:7d:1d:60:32:f6:2d:d2:43:1a:4d:b4:09:8e:
43:84:19:5d:f9:3e:97:7b:94:14:1d:2d:d7:c4:c4:99:aa:54:
1e:2d:9e:8d:33:9e:8d:a9:c5:d8:02:c1:09:ba:51:d3:74:a1:
01:cf:21:8f:24:ce:33:9a:7b:d2:9a:4e:ad:1f:25:4e:7d:18:
32:1d:0f:86:86:27:b9:01:3d:7b:7e:b1:a0:f6:f8:4c:dd:fd:
2d:c3:b5:03:0e:55:0c:de:f6:fa:7b:07:4a:6f:ba:f5:23:40:
60:35:67:00:bf:08:72:df:41:9e:15:0a:9f:89:7b:bb:5b:cb:
a0:59:36:b5:22:22:4c:f0:21:9c:fa:c8:02:22:86:64:c9:75:
7b:67:61:6a:85:32:40:89:f5:db:69:54:64:73:8a:18:a7:57:
59:d6:4c:83:bd:e2:37:39:7e:02:2b:b2:f5:40:3e:cf:fb:33:
b8:5d:8c:fe:2a:68:db:1c:6e:b5:0d:91:2a:15:55:d1:b9:f3:
3e:16:b1:fc:06:70:38:50:99:d1:40:c5:87:66:82:93:eb:88:
a6:18:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:51 2025 by rpki-client