Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/k1dj2JDTatrOhzrZsWSkG5Y0LS8.roa
File: k1dj2JDTatrOhzrZsWSkG5Y0LS8.roa (raw, json)
Hash identifier: m59Mz/Bw1rPK1JWLfrsL6sm1TPb1+Jv6iKW6IK1FAiA=
Subject key identifier: 93:57:63:D8:90:D3:6A:DA:CE:87:3A:D9:B1:64:A4:1B:96:34:2D:2F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019763A5C60649F232F23766DE7B2E60EE87
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/k1dj2JDTatrOhzrZsWSkG5Y0LS8.roa
Signing time: Thu 12 Jun 2025 10:18:17 +0000
ROA not before: Thu 12 Jun 2025 10:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12741
IP address blocks: 5.226.64.0/18 maxlen: 18
5.226.92.0/24 maxlen: 24
5.226.128.0/22 maxlen: 24
5.226.135.0/24 maxlen: 24
37.128.0.0/17 maxlen: 17
37.128.0.0/19 maxlen: 19
37.128.32.0/20 maxlen: 20
37.128.48.0/20 maxlen: 20
37.128.64.0/18 maxlen: 18
62.87.128.0/17 maxlen: 17
62.89.64.0/18 maxlen: 18
62.111.128.0/17 maxlen: 17
62.111.250.0/24 maxlen: 24
62.148.64.0/19 maxlen: 19
62.181.160.0/19 maxlen: 19
62.233.128.0/17 maxlen: 17
62.244.128.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
77.65.226.0/24 maxlen: 24
77.65.227.0/24 maxlen: 24
77.252.0.0/14 maxlen: 14
77.252.0.0/16 maxlen: 24
78.8.0.0/14 maxlen: 14
81.168.128.0/17 maxlen: 17
81.210.0.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
82.143.128.0/18 maxlen: 18
83.238.0.0/16 maxlen: 16
84.40.128.0/17 maxlen: 17
84.40.128.0/20 maxlen: 20
84.40.136.0/24 maxlen: 24
84.40.144.0/21 maxlen: 21
84.40.152.0/21 maxlen: 21
84.40.160.0/19 maxlen: 19
84.40.192.0/20 maxlen: 20
84.40.208.0/21 maxlen: 21
84.40.216.0/21 maxlen: 21
84.40.224.0/21 maxlen: 21
84.40.236.0/24 maxlen: 24
84.40.240.0/20 maxlen: 20
85.31.252.0/24 maxlen: 24
85.128.0.0/17 maxlen: 17
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
87.105.0.0/16 maxlen: 16
87.204.0.0/15 maxlen: 15
87.204.0.0/16 maxlen: 16
87.205.0.0/17 maxlen: 17
87.205.128.0/17 maxlen: 17
87.239.216.0/21 maxlen: 22
89.171.0.0/16 maxlen: 16
91.192.88.0/22 maxlen: 22
93.159.0.0/18 maxlen: 18
93.180.160.0/19 maxlen: 19
159.205.0.0/16 maxlen: 16
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
178.36.0.0/15 maxlen: 15
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
185.58.162.0/23 maxlen: 23
185.72.184.0/22 maxlen: 22
185.164.140.0/22 maxlen: 22
185.244.96.0/22 maxlen: 22
193.19.104.0/23 maxlen: 23
193.91.16.0/20 maxlen: 20
193.192.173.0/24 maxlen: 24
193.192.181.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
195.114.160.0/19 maxlen: 19
212.49.32.0/19 maxlen: 19
212.106.0.0/19 maxlen: 19
212.106.0.0/20 maxlen: 20
212.106.16.0/20 maxlen: 20
213.17.128.0/17 maxlen: 17
213.17.244.0/24 maxlen: 24
213.134.128.0/19 maxlen: 19
213.146.32.0/19 maxlen: 19
213.186.64.0/19 maxlen: 19
213.195.128.0/18 maxlen: 18
213.216.64.0/18 maxlen: 18
213.238.64.0/18 maxlen: 18
213.241.0.0/17 maxlen: 17
213.241.89.0/24 maxlen: 24
217.30.128.0/19 maxlen: 19
2001:16b0::/32 maxlen: 32
2001:41b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:a5:c6:06:49:f2:32:f2:37:66:de:7b:2e:60:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jun 12 10:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=935763d890d36adace873ad9b164a41b96342d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:ae:50:93:82:dd:aa:50:47:9e:84:31:9d:
ba:6b:a8:d8:11:ed:22:9e:7d:d0:78:c4:e7:e5:16:
f2:86:26:03:21:3d:72:b6:fe:0c:fc:2c:36:93:2b:
8c:d2:14:38:61:1c:2f:12:a0:44:18:2c:cb:76:b8:
42:56:47:98:09:9b:03:14:e8:d1:5b:b3:02:19:24:
29:da:d5:69:5a:b2:b8:05:07:53:de:80:33:77:0a:
7c:f2:e1:2e:ca:21:5c:d4:ff:f6:76:1f:1e:fa:cc:
d2:34:6c:13:78:03:7a:bb:a3:a7:80:7e:a2:69:ff:
eb:b0:20:0c:ee:0a:28:c1:1b:84:db:01:6d:84:b8:
93:26:4c:53:7d:67:26:d6:10:a4:1f:7f:0a:47:94:
35:51:3a:38:c8:7a:46:ec:2e:13:b3:7e:15:b1:19:
c8:0f:e0:87:ee:d9:16:72:ee:93:ee:7c:85:91:47:
f9:f6:b0:51:21:78:e0:64:22:20:14:bb:79:ed:d3:
62:9a:90:a8:10:4f:fb:63:c9:4b:82:9b:e8:dc:89:
64:4d:cb:73:0f:d4:80:e2:1f:64:73:ff:20:f3:11:
08:db:2d:10:e3:59:0e:73:0a:4f:10:6c:db:c8:f1:
2c:eb:72:6e:4a:ae:56:1e:c4:b7:fa:ab:37:b6:16:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:57:63:D8:90:D3:6A:DA:CE:87:3A:D9:B1:64:A4:1B:96:34:2D:2F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/k1dj2JDTatrOhzrZsWSkG5Y0LS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0-5.226.131.255
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.65.226.0/23
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.31.252.0/24
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
87.239.216.0/21
89.171.0.0/16
91.192.88.0/22
93.159.0.0/18
93.180.160.0/19
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
185.58.160.0/22
185.72.184.0/22
185.164.140.0/22
185.244.96.0/22
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.49.32.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:36:53:2a:18:46:d1:a2:0b:de:1d:b3:ee:2c:23:34:ea:bd:
d4:c3:05:3d:f0:13:93:6a:b5:7d:ec:07:e2:eb:00:bc:67:b4:
07:06:21:90:73:75:23:c2:2a:32:0a:f3:e3:30:1f:b1:67:8e:
0c:6e:98:cc:94:c5:6d:9d:26:4e:69:70:2f:a3:4e:c8:99:26:
88:41:4c:2f:a7:19:37:c6:77:b2:6d:6e:da:4e:8c:0b:f8:f7:
77:be:3e:d6:25:01:0c:5d:67:56:97:5b:f5:1d:a3:14:50:53:
19:c0:57:d2:ac:e3:4e:60:c3:c3:fe:3e:6e:e5:7b:79:d8:07:
e8:04:d7:52:96:da:4b:5c:0e:87:26:d2:5b:31:d5:0a:6d:80:
0a:4e:6d:6b:b1:57:fd:47:3d:04:f5:a5:61:96:f5:e6:45:b6:
d7:04:df:0b:97:0c:ee:e9:b6:07:b9:56:62:1b:a6:e6:6f:b5:
64:f6:89:c0:9c:93:aa:f3:43:36:1d:b3:fc:b2:32:4d:05:11:
f5:f9:b5:bb:89:a0:06:39:67:59:6d:93:ed:31:84:41:e5:57:
45:f6:03:91:ed:dd:f9:96:85:22:ef:c4:5d:f7:46:89:4b:1d:
0b:37:42:24:c2:8a:8f:57:92:db:47:26:af:bf:6b:a0:44:3e:
dd:af:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:52:47 2025 by rpki-client