Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/BLWp949xCOPuyrxSMZvJmRwjku4.roa
File: BLWp949xCOPuyrxSMZvJmRwjku4.roa (raw, json)
Hash identifier: brFq8s5rRfqjVkl10Z304qS39edh8NaB2DeXi+oWClY=
Subject key identifier: 04:B5:A9:F7:8F:71:08:E3:EE:CA:BC:52:31:9B:C9:99:1C:23:92:EE
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 01987564FCDFC6BD9910DEE9997057252845
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/BLWp949xCOPuyrxSMZvJmRwjku4.roa
Signing time: Mon 04 Aug 2025 14:03:29 +0000
ROA not before: Mon 04 Aug 2025 14:03:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 2.32.0.0/16 maxlen: 20
2.33.0.0/17 maxlen: 17
2.33.128.0/17 maxlen: 17
2.33.176.0/20 maxlen: 20
2.34.0.0/15 maxlen: 20
2.36.0.0/14 maxlen: 18
2.40.0.0/16 maxlen: 20
2.41.0.0/16 maxlen: 16
2.42.0.0/16 maxlen: 20
2.43.0.0/16 maxlen: 16
2.44.0.0/16 maxlen: 19
2.45.0.0/16 maxlen: 20
2.46.0.0/15 maxlen: 20
5.88.0.0/13 maxlen: 20
31.26.0.0/16 maxlen: 16
31.27.0.0/18 maxlen: 18
31.27.96.0/20 maxlen: 20
31.27.128.0/17 maxlen: 19
31.27.192.0/19 maxlen: 19
31.27.224.0/19 maxlen: 19
31.156.0.0/14 maxlen: 19
37.116.0.0/16 maxlen: 19
37.117.0.0/16 maxlen: 19
37.118.0.0/16 maxlen: 16
37.119.0.0/17 maxlen: 19
37.119.128.0/17 maxlen: 20
37.159.0.0/17 maxlen: 17
37.159.128.0/17 maxlen: 20
37.176.0.0/13 maxlen: 20
83.224.64.0/20 maxlen: 20
83.224.80.0/24 maxlen: 24
83.224.81.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
83.224.128.0/17 maxlen: 17
83.225.0.0/16 maxlen: 16
91.80.0.0/19 maxlen: 19
91.80.32.0/21 maxlen: 21
91.80.46.0/24 maxlen: 24
91.80.48.0/20 maxlen: 24
91.80.64.0/18 maxlen: 18
91.80.128.0/17 maxlen: 17
91.81.0.0/17 maxlen: 19
91.81.128.0/17 maxlen: 24
93.64.0.0/16 maxlen: 18
93.65.0.0/16 maxlen: 18
93.66.0.0/15 maxlen: 17
93.68.0.0/16 maxlen: 16
93.69.0.0/16 maxlen: 16
93.70.0.0/16 maxlen: 18
93.71.0.0/16 maxlen: 18
93.144.0.0/16 maxlen: 20
93.145.0.0/16 maxlen: 20
93.146.0.0/16 maxlen: 20
93.147.0.0/16 maxlen: 20
93.148.0.0/16 maxlen: 20
93.149.0.0/16 maxlen: 20
93.150.0.0/16 maxlen: 20
93.151.24.0/22 maxlen: 22
93.151.128.0/17 maxlen: 20
109.112.0.0/15 maxlen: 15
109.114.0.0/15 maxlen: 19
109.115.96.0/19 maxlen: 19
109.115.192.0/19 maxlen: 19
109.115.224.0/19 maxlen: 19
109.116.0.0/15 maxlen: 20
109.118.0.0/16 maxlen: 16
109.119.0.0/16 maxlen: 16
130.0.128.0/18 maxlen: 21
130.25.0.0/16 maxlen: 18
176.242.0.0/15 maxlen: 15
176.244.0.0/14 maxlen: 14
188.152.0.0/17 maxlen: 20
188.152.128.0/17 maxlen: 20
188.153.0.0/16 maxlen: 20
188.216.0.0/15 maxlen: 17
188.218.0.0/15 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:64:fc:df:c6:bd:99:10:de:e9:99:70:57:25:28:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Aug 4 14:03:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04b5a9f78f7108e3eecabc52319bc9991c2392ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:6d:dd:7c:c2:2d:c9:9f:6a:2e:75:e0:05:
df:0c:c6:70:df:3e:51:4e:df:84:19:ed:d7:e4:e6:
dd:c5:57:56:47:b5:61:09:f2:e2:07:51:3c:d0:83:
a6:4c:03:5d:54:35:8c:04:97:d5:4b:ad:20:95:3d:
fd:17:58:aa:bb:6f:7c:6b:1f:30:62:ae:14:bd:c7:
fb:ae:23:50:e9:72:af:f0:f2:15:40:59:81:20:45:
d3:d9:a9:2e:75:c8:bd:5f:b8:69:fc:21:7e:ce:a9:
d9:11:f7:0e:60:9c:3e:ed:ee:5c:c4:f7:71:55:b8:
f4:93:41:65:55:1a:6d:d5:95:94:4b:e2:26:fd:8b:
e6:43:05:8c:7f:c4:b9:c4:ed:ce:1d:3a:7f:e2:fe:
f3:e4:89:81:42:69:2c:94:00:99:3a:0b:35:a3:b2:
c7:15:95:ea:cc:2d:bf:b5:f6:a8:bb:f0:6e:46:b8:
97:b0:e2:c6:e3:2f:0d:20:b3:dc:22:83:3c:c4:82:
86:bd:69:56:57:45:8c:c5:c2:15:fb:e5:a0:6d:c9:
7f:8c:cb:22:ae:51:9a:9a:26:48:04:93:d7:01:c0:
cc:1e:b6:87:fb:6b:c2:33:9b:e0:51:49:6b:88:4d:
df:38:a3:30:6b:06:a4:7c:ee:27:b8:49:79:bc:d2:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:A9:F7:8F:71:08:E3:EE:CA:BC:52:31:9B:C9:99:1C:23:92:EE
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/BLWp949xCOPuyrxSMZvJmRwjku4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/12
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0-91.80.39.255
91.80.46.0/24
91.80.48.0-91.81.255.255
93.64.0.0/13
93.144.0.0-93.150.255.255
93.151.24.0/22
93.151.128.0/17
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
20:33:19:b2:70:bf:5b:24:9a:03:36:a6:b9:da:d0:72:60:b3:
9c:9a:1e:ff:24:d2:cb:73:17:11:0a:0d:3a:11:9c:fe:77:b3:
60:25:90:e4:c9:e6:29:8f:47:f8:57:5a:42:2f:da:d7:85:34:
ca:22:ac:b1:f6:06:bd:54:f3:86:0f:41:77:47:2d:4e:be:9a:
44:6f:09:34:17:2d:6d:7c:f5:c0:e4:98:46:83:87:f5:d6:7c:
83:2a:49:c3:b0:f2:b7:4b:f8:53:2a:c9:90:d8:64:58:4e:a8:
ba:76:54:5d:4f:35:c5:90:f6:3d:6e:c0:c6:05:e0:7f:36:eb:
74:0c:75:c1:54:3c:1d:94:99:79:41:95:71:90:dc:ec:89:58:
1c:97:5a:0e:7e:15:bc:00:7d:27:f9:f7:b3:bc:03:3e:3a:ba:
31:37:f8:b9:7e:a9:14:29:c3:5a:bb:58:cc:0e:58:6b:2d:6b:
c7:d7:b9:dc:e0:9c:83:58:77:cf:60:a2:b0:7b:95:99:fb:0e:
39:b1:3d:59:ac:a0:5e:ab:be:ab:41:cd:ba:ff:9e:2b:4d:93:
c0:9a:e4:9b:e2:ef:ea:c6:74:7e:15:ce:17:f0:aa:b4:f5:84:
c7:b7:41:94:50:a4:50:01:ae:c5:b5:a5:c7:c3:34:af:ca:67:
b6:66:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:04 2025 by rpki-client