Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JVgnDiOrcwv_jNQyidmHzZdwioE.roa
File: JVgnDiOrcwv_jNQyidmHzZdwioE.roa (raw, json)
Hash identifier: ayojO7QxcvmgwFO+SNAdLZXxWz2Q5CHko39GomCQk/s=
Subject key identifier: 25:58:27:0E:23:AB:73:0B:FF:8C:D4:32:89:D9:87:CD:97:70:8A:81
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019859B5E326CAF5157AA504585149759640
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JVgnDiOrcwv_jNQyidmHzZdwioE.roa
Signing time: Wed 30 Jul 2025 05:02:29 +0000
ROA not before: Wed 30 Jul 2025 05:02:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.8.80.0/21 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.47.0/24 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.10.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.219.0/24 maxlen: 24
5.189.248.0/22 maxlen: 24
5.189.252.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:b5:e3:26:ca:f5:15:7a:a5:04:58:51:49:75:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 30 05:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2558270e23ab730bff8cd43289d987cd97708a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:55:87:13:8a:48:25:ef:6b:a4:c5:80:70:
cb:d2:cd:62:f3:1b:c0:d6:21:0f:cd:94:55:9f:ee:
41:3c:5c:2c:94:5f:55:dc:ef:14:bc:3b:7e:2e:2b:
47:95:e1:3b:c7:f3:50:76:74:e0:3b:3e:bb:c3:44:
14:57:29:7f:c9:ae:d7:59:f8:4d:0f:b0:fd:4e:91:
45:6b:87:e9:3b:84:4c:af:44:3c:5d:9b:46:b0:62:
19:9b:ca:ad:f2:f5:ae:a6:ad:fe:d7:0a:b9:23:72:
62:f6:de:1c:3e:3d:97:49:93:cb:82:dd:a9:d2:d3:
a4:15:8d:67:d6:1c:df:9b:76:a7:f2:6d:22:72:df:
61:5b:fd:6b:41:e9:6c:5b:ba:10:42:9f:7d:cd:69:
94:03:2c:aa:b3:f5:9c:c8:53:58:ab:d5:d7:4a:90:
64:92:02:c4:41:f0:c2:fc:a9:7a:f4:84:39:92:fd:
fa:18:3c:bc:24:c0:c9:9a:8e:1c:59:2b:5c:7e:9f:
50:c9:86:77:a7:a7:78:c6:9c:92:2f:e9:b1:9e:0c:
ed:db:bb:15:6b:a4:a9:10:59:01:dd:34:af:61:6a:
ac:a0:e5:0f:8e:59:dc:97:de:86:90:45:4b:69:0a:
41:86:35:e1:44:0c:ab:63:98:be:0e:ad:70:1c:59:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:27:0E:23:AB:73:0B:FF:8C:D4:32:89:D9:87:CD:97:70:8A:81
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JVgnDiOrcwv_jNQyidmHzZdwioE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0-5.8.67.255
5.8.80.0/21
5.101.0.0/21
5.101.32.0/22
5.101.47.0/24
5.101.64.0/22
5.101.90.0-5.101.95.255
5.188.10.0/23
5.188.44.0-5.188.49.255
5.188.192.0/22
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.219.0/24
5.189.248.0-5.189.252.255
31.44.188.0/22
31.184.192.0/21
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
0c:a8:fb:e5:cf:b0:f3:0c:11:ee:1b:78:8a:9f:25:66:6b:42:
9e:f0:ba:3c:8a:5e:66:64:1d:b1:d4:fe:0c:38:7c:50:a9:50:
25:e3:21:c6:55:e7:7f:90:1e:63:41:b4:1d:a6:e0:93:b8:1d:
6e:66:5e:8c:f0:60:1c:e5:56:ee:ad:65:ea:eb:6d:60:94:3e:
e6:ba:df:91:cb:22:d6:ec:bc:26:d0:98:4b:12:79:87:4f:71:
58:bf:c3:31:a8:1b:ad:0f:e2:df:11:ec:7b:b8:d8:c6:ed:09:
db:84:d0:5b:85:dd:70:bb:2c:f9:74:ff:7e:75:39:95:3f:86:
8a:f6:e1:fe:f3:52:c5:bb:70:55:a9:37:d0:36:1e:b1:e4:75:
fb:c7:3c:ca:23:a6:87:36:c5:d0:7f:33:cb:69:83:4a:5e:95:
e1:9a:6a:c0:b5:3d:48:2d:0d:a2:69:92:a2:6b:5b:bd:4a:a0:
1f:0f:42:a0:a2:71:ab:de:a6:ac:2c:c8:27:ad:7c:b9:27:8d:
e6:ef:0d:d6:34:07:83:ce:01:61:68:40:6f:8d:55:dd:4e:3f:
83:da:15:75:3c:59:57:3e:e6:bf:93:1f:89:e8:bc:34:12:bb:
dd:6b:3c:7d:35:2b:de:1d:08:af:23:61:5c:1d:e2:fa:16:a6:
e6:ed:62:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:08 2025 by rpki-client