Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/0W8nkJLPOtwLXBXYQYvqsqJv0P0.roa
File: 0W8nkJLPOtwLXBXYQYvqsqJv0P0.roa (raw, json)
Hash identifier: VE1CmVXCh6nFsIzINtN+7cbMnpKw/coprnM0Z6DgP9w=
Subject key identifier: D1:6F:27:90:92:CF:3A:DC:0B:5C:15:D8:41:8B:EA:B2:A2:6F:D0:FD
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 01966D48CF672D90A2FF8D5FAB86F2EED53B
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/0W8nkJLPOtwLXBXYQYvqsqJv0P0.roa
Signing time: Fri 25 Apr 2025 14:10:10 +0000
ROA not before: Fri 25 Apr 2025 14:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 80.86.192.0/20 maxlen: 21
80.86.192.0/24 maxlen: 24
80.86.193.0/24 maxlen: 24
80.253.80.0/21 maxlen: 22
80.254.160.0/19 maxlen: 20
81.6.0.0/19 maxlen: 20
81.6.48.0/20 maxlen: 21
81.221.0.0/16 maxlen: 17
81.221.250.0/24 maxlen: 24
81.221.252.0/24 maxlen: 24
81.221.254.0/24 maxlen: 24
82.195.224.0/19 maxlen: 20
146.228.0.0/16 maxlen: 17
146.228.64.0/24 maxlen: 24
193.72.0.0/18 maxlen: 19
193.72.64.0/21 maxlen: 21
193.72.72.0/22 maxlen: 22
193.72.76.0/23 maxlen: 23
193.72.78.0/24 maxlen: 24
193.72.81.0/24 maxlen: 24
193.72.82.0/23 maxlen: 24
193.72.84.0/22 maxlen: 23
193.72.88.0/21 maxlen: 22
193.72.96.0/19 maxlen: 20
193.72.128.0/20 maxlen: 21
193.72.148.0/22 maxlen: 23
193.72.152.0/21 maxlen: 22
193.72.160.0/22 maxlen: 23
193.72.164.0/23 maxlen: 24
193.72.167.0/24 maxlen: 24
193.72.168.0/21 maxlen: 22
193.72.176.0/21 maxlen: 22
193.72.184.0/23 maxlen: 24
193.72.187.0/24 maxlen: 24
193.72.188.0/22 maxlen: 23
193.72.192.0/20 maxlen: 21
193.72.208.0/21 maxlen: 22
193.72.217.0/24 maxlen: 24
193.72.218.0/23 maxlen: 24
193.72.220.0/22 maxlen: 23
193.72.224.0/19 maxlen: 20
193.73.0.0/18 maxlen: 19
193.73.64.0/19 maxlen: 20
193.73.80.0/20 maxlen: 20
193.73.96.0/21 maxlen: 21
193.73.96.0/22 maxlen: 22
193.73.100.0/22 maxlen: 22
193.73.104.0/23 maxlen: 24
193.73.108.0/22 maxlen: 23
193.73.112.0/24 maxlen: 24
193.73.115.0/24 maxlen: 24
193.73.116.0/22 maxlen: 23
193.73.120.0/23 maxlen: 24
193.73.123.0/24 maxlen: 24
193.73.124.0/24 maxlen: 24
193.73.126.0/23 maxlen: 24
193.73.128.0/18 maxlen: 19
193.73.192.0/20 maxlen: 21
193.73.209.0/24 maxlen: 24
193.73.210.0/24 maxlen: 24
193.73.212.0/22 maxlen: 23
193.73.216.0/21 maxlen: 22
193.73.224.0/21 maxlen: 22
193.73.232.0/22 maxlen: 23
193.73.236.0/23 maxlen: 24
193.73.239.0/24 maxlen: 24
193.73.240.0/23 maxlen: 24
193.73.244.0/22 maxlen: 23
193.73.248.0/23 maxlen: 24
193.73.252.0/22 maxlen: 23
193.193.128.0/19 maxlen: 20
194.191.0.0/16 maxlen: 17
194.191.16.0/24 maxlen: 24
194.191.17.0/24 maxlen: 24
194.191.18.0/24 maxlen: 24
194.191.19.0/24 maxlen: 24
194.191.20.0/24 maxlen: 24
194.191.24.0/24 maxlen: 24
194.191.25.0/24 maxlen: 24
194.191.26.0/24 maxlen: 24
194.191.28.0/24 maxlen: 24
194.191.29.0/24 maxlen: 24
194.191.30.0/24 maxlen: 24
194.191.31.0/24 maxlen: 24
195.48.0.0/16 maxlen: 17
195.48.221.0/24 maxlen: 24
195.49.0.0/17 maxlen: 18
195.49.6.0/24 maxlen: 24
195.49.16.0/24 maxlen: 24
195.49.78.0/24 maxlen: 24
195.49.79.0/24 maxlen: 24
195.130.160.0/19 maxlen: 20
212.59.128.0/18 maxlen: 19
2001:1b50::/29 maxlen: 29
2a01:2a8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:48:cf:67:2d:90:a2:ff:8d:5f:ab:86:f2:ee:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Apr 25 14:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d16f279092cf3adc0b5c15d8418beab2a26fd0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:6b:6f:4e:e3:d8:c6:2b:ae:5f:5a:db:a4:
b4:8a:de:9f:d7:ad:ec:b6:05:b6:a0:68:c8:55:67:
d8:27:6e:8e:48:29:6c:e6:11:cf:e4:f6:bf:f7:31:
16:c3:93:4f:af:6c:f0:d6:a7:c0:aa:3d:bb:14:4b:
8b:0e:57:07:99:4a:99:40:98:cc:18:88:a7:ae:fe:
e5:a9:28:ad:08:b6:da:4d:d2:c3:66:eb:04:83:c6:
2b:b1:d6:c8:94:2b:c8:6e:ec:f8:a8:b9:06:79:11:
64:d7:a0:bd:7b:53:be:80:72:81:ae:9e:73:ba:93:
2b:81:53:67:2f:d1:40:d2:15:f5:d4:86:da:60:a4:
24:07:4d:99:2b:b8:6c:63:a2:4a:c0:72:09:9b:c8:
ca:ca:42:bc:1f:36:bf:d1:58:16:22:6a:08:c6:a2:
b3:47:0f:7c:8d:8a:44:7d:33:f8:ec:a3:b8:7c:0a:
57:05:76:a0:7a:d5:08:5c:e1:15:00:bd:10:d6:06:
ee:fc:44:5f:bb:9a:c7:3c:ab:67:74:82:df:34:b8:
87:3c:7c:b8:88:35:d9:e7:01:d4:79:58:fb:49:15:
7c:28:7f:92:ee:af:81:ac:d8:1c:c8:ce:28:96:c9:
d2:55:bb:bc:f7:81:8d:ff:be:d7:71:11:2e:c2:a7:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6F:27:90:92:CF:3A:DC:0B:5C:15:D8:41:8B:EA:B2:A2:6F:D0:FD
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/0W8nkJLPOtwLXBXYQYvqsqJv0P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
Signature Algorithm: sha256WithRSAEncryption
e7:3b:7b:e1:48:c5:38:7f:ec:58:88:3a:f4:db:3a:27:c5:f5:
50:d1:86:d1:fe:41:46:27:ac:31:53:4e:50:2a:c8:29:dd:84:
cf:64:27:af:1c:6b:9a:2e:50:9b:c4:a9:98:27:c1:f6:d7:31:
36:c7:77:ef:99:f9:b2:07:76:5c:ae:4f:2a:52:9b:19:4f:16:
c1:39:02:1d:68:f5:13:af:db:d9:ce:34:b7:ff:2d:84:38:a7:
2b:e5:c4:90:7f:8d:e2:3b:fb:61:ec:89:13:32:62:3f:6d:2b:
65:a9:70:9e:02:de:e5:e5:2c:d0:41:83:9b:4c:e7:52:b3:40:
22:dd:37:33:85:07:63:9a:f4:ee:ba:b4:11:62:d8:7e:d2:63:
9c:59:14:99:9c:a2:03:66:60:de:4c:4b:11:08:7d:c7:12:81:
c6:d4:ae:ab:37:b1:05:e4:9b:c0:94:c2:50:d8:52:65:3e:48:
fc:b0:d5:72:fa:a5:54:d8:04:34:8c:8a:57:59:7c:52:7e:5f:
d9:43:29:b6:e7:60:19:01:64:4e:08:3f:6d:e5:6d:13:6f:e6:
6f:9d:c5:de:0c:e9:53:ee:c2:35:d3:3e:22:be:bd:44:7d:5e:
c2:8e:01:ac:d3:31:ec:84:b9:07:36:fc:ae:f3:61:5b:63:2c:
48:7c:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:29:38 2025 by rpki-client