Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qT3FSR-4sDxfMjOlAj4WQF3g1II.roa
File: qT3FSR-4sDxfMjOlAj4WQF3g1II.roa (raw, json)
Hash identifier: Of0rRLhJrZ9jZXlBVxkSjaIk1+EYBJs6OJyUdWNBZK0=
Subject key identifier: A9:3D:C5:49:1F:B8:B0:3C:5F:32:33:A5:02:3E:16:40:5D:E0:D4:82
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0196428E179E5715C2933CA069E91CD86271
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qT3FSR-4sDxfMjOlAj4WQF3g1II.roa
Signing time: Thu 17 Apr 2025 07:02:10 +0000
ROA not before: Thu 17 Apr 2025 07:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12741
IP address blocks: 5.226.64.0/18 maxlen: 18
5.226.92.0/24 maxlen: 24
5.226.128.0/22 maxlen: 24
5.226.135.0/24 maxlen: 24
37.128.0.0/17 maxlen: 17
37.128.0.0/19 maxlen: 19
37.128.32.0/20 maxlen: 20
37.128.48.0/20 maxlen: 20
37.128.64.0/18 maxlen: 18
62.87.128.0/17 maxlen: 17
62.89.64.0/18 maxlen: 18
62.111.128.0/17 maxlen: 17
62.111.250.0/24 maxlen: 24
62.148.64.0/19 maxlen: 19
62.181.160.0/19 maxlen: 19
62.233.128.0/17 maxlen: 17
62.244.128.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
77.252.0.0/14 maxlen: 14
77.252.0.0/16 maxlen: 24
78.8.0.0/14 maxlen: 14
81.168.128.0/17 maxlen: 17
81.210.0.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
82.143.128.0/18 maxlen: 18
83.238.0.0/16 maxlen: 16
84.40.128.0/17 maxlen: 17
84.40.128.0/20 maxlen: 20
84.40.136.0/24 maxlen: 24
84.40.144.0/21 maxlen: 21
84.40.152.0/21 maxlen: 21
84.40.160.0/19 maxlen: 19
84.40.192.0/20 maxlen: 20
84.40.208.0/21 maxlen: 21
84.40.216.0/21 maxlen: 21
84.40.224.0/21 maxlen: 21
84.40.236.0/24 maxlen: 24
84.40.240.0/20 maxlen: 20
85.31.252.0/24 maxlen: 24
85.128.0.0/17 maxlen: 17
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
87.105.0.0/16 maxlen: 16
87.204.0.0/15 maxlen: 15
87.204.0.0/16 maxlen: 16
87.205.0.0/17 maxlen: 17
87.205.128.0/17 maxlen: 17
87.239.216.0/21 maxlen: 22
89.171.0.0/16 maxlen: 16
91.192.88.0/22 maxlen: 22
93.159.0.0/18 maxlen: 18
93.180.160.0/19 maxlen: 19
159.205.0.0/16 maxlen: 16
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
178.36.0.0/15 maxlen: 15
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
185.58.162.0/23 maxlen: 23
185.72.184.0/22 maxlen: 22
185.164.140.0/22 maxlen: 22
185.244.96.0/22 maxlen: 22
193.19.104.0/23 maxlen: 23
193.91.16.0/20 maxlen: 20
193.192.173.0/24 maxlen: 24
193.192.181.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
195.114.160.0/19 maxlen: 19
212.49.32.0/19 maxlen: 19
212.106.0.0/19 maxlen: 19
212.106.0.0/20 maxlen: 20
212.106.16.0/20 maxlen: 20
213.17.128.0/17 maxlen: 17
213.17.244.0/24 maxlen: 24
213.134.128.0/19 maxlen: 19
213.146.32.0/19 maxlen: 19
213.186.64.0/19 maxlen: 19
213.195.128.0/18 maxlen: 18
213.216.64.0/18 maxlen: 18
213.238.64.0/18 maxlen: 18
213.241.0.0/17 maxlen: 17
213.241.89.0/24 maxlen: 24
217.30.128.0/19 maxlen: 19
2001:16b0::/32 maxlen: 32
2001:41b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8e:17:9e:57:15:c2:93:3c:a0:69:e9:1c:d8:62:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Apr 17 07:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93dc5491fb8b03c5f3233a5023e16405de0d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:8c:08:12:0f:5f:85:f4:30:8f:ad:d5:f3:
b6:5e:9a:50:d9:55:f0:d6:f0:ac:02:d4:5c:3b:c9:
94:cd:c6:47:de:3d:da:0e:26:16:43:ff:20:1e:37:
35:2e:bb:b2:87:83:5e:d6:9b:5e:53:ac:ff:07:6f:
37:2f:0a:c2:43:11:0d:a2:c8:8c:a5:d5:e3:9d:8b:
36:d3:2b:cb:c3:84:a7:eb:df:9e:0f:4d:74:70:e4:
a6:e5:07:1d:aa:e6:65:36:4c:3b:f9:44:14:6b:86:
60:3a:0a:30:95:09:44:57:60:05:1f:55:9e:0b:a8:
ed:fb:e5:f7:6b:a9:b5:f0:5b:d3:71:52:47:8b:d2:
64:11:a3:29:fa:fd:67:8a:cf:ba:a6:77:a2:6d:a9:
1d:e0:4d:90:f5:a5:e6:45:ed:c3:9c:26:7e:57:19:
9b:74:6c:af:8c:03:cf:05:3f:67:9a:bf:36:18:fa:
65:a4:d5:dd:93:14:0c:e2:08:72:dd:1f:cc:31:15:
98:46:62:99:37:5e:a7:2d:34:77:ed:8e:98:c3:3b:
db:b4:e4:39:24:fd:c4:53:23:6a:ba:c6:1f:67:13:
15:1c:fb:12:98:68:9d:e6:40:2d:81:5e:94:17:1e:
7a:dd:eb:50:c6:f4:fb:fc:ba:fa:ad:3d:89:9f:84:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:C5:49:1F:B8:B0:3C:5F:32:33:A5:02:3E:16:40:5D:E0:D4:82
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qT3FSR-4sDxfMjOlAj4WQF3g1II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0-5.226.131.255
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.31.252.0/24
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
87.239.216.0/21
89.171.0.0/16
91.192.88.0/22
93.159.0.0/18
93.180.160.0/19
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
185.58.160.0/22
185.72.184.0/22
185.164.140.0/22
185.244.96.0/22
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.49.32.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
43:13:d6:d0:22:0b:b6:bf:6f:ff:0e:fe:0c:06:68:40:c8:91:
97:92:87:a9:58:cf:30:d9:da:83:54:06:a4:7d:2c:c9:16:ea:
1c:96:95:6b:e6:58:4d:b1:67:e1:bc:e6:4c:06:30:c0:3a:cd:
43:5a:54:29:c2:4a:31:2c:fd:95:dc:66:76:54:4b:8d:f2:74:
3b:1a:2b:ac:d4:1d:7d:ec:fb:b8:e1:56:86:9f:37:a4:00:c9:
d3:c2:6b:f9:ee:94:b8:6b:78:93:e7:a9:48:cc:57:d5:85:f9:
43:d0:5b:61:00:a4:1c:ed:73:65:cb:2d:04:b4:0d:9d:02:4f:
55:a9:ad:6b:d3:11:96:87:61:c8:7a:62:a0:de:48:4f:31:32:
10:83:ad:44:2a:be:5d:83:79:ad:82:dc:b5:39:7a:48:fb:1f:
1e:ef:24:a9:9e:bd:e0:ef:10:00:59:d7:51:c9:58:56:20:95:
6f:18:83:6a:35:e5:ab:0c:dc:7c:6a:8e:19:90:f9:95:81:e8:
85:4c:0e:b7:d0:a2:97:26:53:36:15:4d:64:1d:10:08:eb:d2:
e3:de:4a:e5:a6:b6:16:89:97:dc:c8:61:9c:ba:bc:dd:72:08:
46:f7:94:4a:27:ac:e5:0e:03:ea:c1:f7:57:d9:78:98:56:b3:
ff:93:bb:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:07:52 2025 by rpki-client