Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/k8_Ul4ZEAZVByyqZdZ1tGDy890o.roa
File: k8_Ul4ZEAZVByyqZdZ1tGDy890o.roa (raw, json)
Hash identifier: fUhGK3WTwnOorduIkkN+p/v/gjdNWclFrN0ks+q0iEo=
Subject key identifier: 93:CF:D4:97:86:44:01:95:41:CB:2A:99:75:9D:6D:18:3C:BC:F7:4A
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01963E6729DCBAE94ABF66C523E92DDEAE48
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/k8_Ul4ZEAZVByyqZdZ1tGDy890o.roa
Signing time: Wed 16 Apr 2025 11:41:10 +0000
ROA not before: Wed 16 Apr 2025 11:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:1c5a::/48 maxlen: 48
2a06:98c0:1c5b::/48 maxlen: 48
2a06:98c0:1c5c::/48 maxlen: 48
2a06:98c0:1c5d::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:4a::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:57::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:59::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:67:29:dc:ba:e9:4a:bf:66:c5:23:e9:2d:de:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Apr 16 11:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93cfd4978644019541cb2a99759d6d183cbcf74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:79:13:8d:e0:9d:04:a5:c3:c6:c7:bb:9d:
64:b2:88:9f:5a:cf:b8:55:81:25:31:43:39:1e:d5:
da:db:47:27:2b:39:13:f6:51:24:ad:f3:f2:57:85:
1c:22:a9:a1:79:9b:61:c2:b8:1c:c3:c5:05:4e:e1:
cf:84:48:f0:91:7d:a0:66:5e:cf:05:dd:58:52:d6:
e3:01:f7:ec:dd:5d:58:c0:a7:56:ba:6f:08:90:08:
4b:a9:31:e2:0e:65:49:6f:cf:cf:43:67:25:82:ae:
04:37:a5:8c:d2:92:5c:f4:60:2a:b5:c1:65:b8:3a:
86:bd:62:ad:45:9d:57:05:65:de:07:6f:dc:61:f3:
fc:30:35:42:46:a2:d5:9b:8e:6b:45:6b:03:20:f0:
95:42:2e:e8:8f:e7:4e:46:08:de:5a:c1:2e:7d:49:
88:8e:d5:6c:08:62:20:ba:e1:08:a1:36:9c:85:8d:
08:d1:65:b3:c9:88:00:6a:8c:92:48:04:ec:53:88:
6a:d1:39:27:c3:0c:01:91:e5:d2:4e:88:45:cc:f6:
32:10:48:5d:97:0d:dc:38:af:2d:ac:3e:56:38:91:
1b:c2:8a:ec:ee:ec:e1:37:b3:2b:ba:36:d9:1d:89:
f6:44:02:16:b5:40:eb:f0:d8:e9:bf:b1:2e:11:17:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:D4:97:86:44:01:95:41:CB:2A:99:75:9D:6D:18:3C:BC:F7:4A
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/k8_Ul4ZEAZVByyqZdZ1tGDy890o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c58:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c5a::-2a06:98c0:1c5d:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::-2a06:98c1:4a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:50::-2a06:98c1:59:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
1b:60:03:cd:7e:b2:5f:d4:34:a4:9f:65:24:23:02:24:41:8d:
85:05:9c:db:29:41:c7:9c:c2:1e:d0:25:03:93:e6:e0:4d:54:
fa:c5:4e:97:55:11:75:6a:af:dc:cd:a2:15:2a:8a:ec:ec:2c:
fd:5a:66:25:e7:40:df:a2:d5:7f:07:03:ea:3a:58:a2:8a:b6:
ef:87:6d:37:d4:07:49:65:9c:d6:0a:39:70:06:de:f8:3a:43:
6b:c9:52:b8:42:15:02:24:7f:af:29:ac:28:67:a4:17:29:97:
9f:f0:21:bf:ea:9c:07:47:04:41:47:cb:44:96:ce:0d:7d:de:
87:87:f7:55:98:4d:a9:4a:7e:34:0c:b4:73:fe:ef:14:72:de:
83:6b:3c:e2:f1:5e:2c:be:1a:60:25:53:e5:3a:8b:b5:8e:20:
c4:48:76:a9:e4:70:94:b3:e0:9b:d1:ae:83:2e:ae:dc:c2:ca:
20:d8:42:83:e0:08:44:b5:47:1a:fb:68:c2:37:01:16:a8:35:
ad:3a:f1:8f:8c:56:8a:9b:cf:41:61:18:d5:6c:a6:4b:ae:5e:
6b:5d:76:44:eb:f2:58:3a:14:03:df:ac:1c:ca:62:f7:52:d8:
a2:04:2c:b0:b2:0c:87:f4:6b:0c:a6:59:77:2d:b6:c3:22:3e:
0b:93:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:59 2025 by rpki-client