Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa
File: 1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa (raw, json)
Hash identifier: wS9UY1GzEmJu3DzghbibQIVXymTHZMRkgirREpKzVig=
Subject key identifier: F9:A8:F9:4F:D0:A9:D9:51:9D:BE:A0:28:D0:12:F2:35:09:74:38:FD
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197F39FD8F434449B2C5B135E48756EB651
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa
Signing time: Thu 10 Jul 2025 09:17:08 +0000
ROA not before: Thu 10 Jul 2025 09:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48635
IP address blocks: 2.57.57.0/24 maxlen: 24
5.157.80.0/21 maxlen: 21
31.25.96.0/21 maxlen: 21
31.25.98.0/24 maxlen: 24
31.186.168.0/21 maxlen: 21
46.17.0.0/21 maxlen: 21
62.84.240.0/21 maxlen: 21
62.221.248.0/21 maxlen: 21
62.221.250.0/24 maxlen: 24
77.94.248.0/21 maxlen: 24
79.99.128.0/21 maxlen: 21
91.198.106.0/24 maxlen: 24
91.238.176.0/23 maxlen: 24
92.63.168.0/21 maxlen: 21
92.63.168.0/24 maxlen: 24
93.180.64.0/21 maxlen: 21
93.187.220.0/22 maxlen: 22
109.70.0.0/21 maxlen: 21
109.72.80.0/20 maxlen: 20
109.106.160.0/20 maxlen: 20
109.106.176.0/21 maxlen: 21
128.140.216.0/21 maxlen: 21
176.117.58.0/23 maxlen: 24
185.27.140.0/22 maxlen: 22
185.27.172.0/22 maxlen: 22
185.28.56.0/22 maxlen: 24
185.37.68.0/22 maxlen: 22
185.56.144.0/22 maxlen: 22
185.66.248.0/22 maxlen: 22
185.87.184.0/22 maxlen: 22
185.89.4.0/22 maxlen: 22
185.94.228.0/24 maxlen: 24
185.94.230.0/23 maxlen: 23
185.95.31.0/24 maxlen: 24
185.103.156.0/22 maxlen: 22
185.103.240.0/22 maxlen: 22
185.103.242.0/23 maxlen: 23
185.107.212.0/22 maxlen: 22
185.107.224.0/23 maxlen: 23
185.109.216.0/22 maxlen: 22
185.159.240.0/22 maxlen: 22
185.175.200.0/22 maxlen: 22
185.182.56.0/22 maxlen: 22
185.182.56.0/24 maxlen: 24
185.187.12.0/22 maxlen: 22
185.223.32.0/22 maxlen: 22
185.224.88.0/22 maxlen: 22
185.231.200.0/22 maxlen: 22
185.232.248.0/22 maxlen: 24
193.23.143.0/24 maxlen: 24
193.164.192.0/23 maxlen: 24
194.247.30.0/23 maxlen: 24
195.20.8.0/22 maxlen: 24
195.238.74.0/23 maxlen: 23
2001:67c:28fc::/48 maxlen: 48
2a00:f10::/29 maxlen: 29
2a00:f60::/32 maxlen: 48
2a00:9b60::/40 maxlen: 48
2a01:b940::/29 maxlen: 29
2a02:2968::/29 maxlen: 29
2a02:40c1::/32 maxlen: 32
2a03:3060::/29 maxlen: 29
2a04:6bc0::/36 maxlen: 36
2a05:1500::/29 maxlen: 29
2a05:1500:600::/40 maxlen: 40
2a06:4040::/29 maxlen: 48
2a0b:7280::/29 maxlen: 29
2a0b:8f80::/29 maxlen: 29
2a0c:84c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:9f:d8:f4:34:44:9b:2c:5b:13:5e:48:75:6e:b6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 10 09:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9a8f94fd0a9d9519dbea028d012f235097438fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:86:02:a4:fd:5b:b9:aa:3d:e2:bd:af:00:
f8:fc:52:13:af:83:a6:fe:bd:59:45:9d:72:c1:0e:
56:13:32:ee:bc:bc:0d:18:25:d3:3b:ff:fc:27:3c:
9d:14:d1:fc:53:75:37:8c:fd:9d:88:cd:b7:60:d2:
03:f0:72:86:e1:78:f4:53:7e:d0:84:43:f3:f9:9d:
51:23:a5:b6:c2:0e:2e:2e:f2:cf:e5:b8:f9:28:3e:
55:c7:7c:b2:78:d4:1b:e6:79:ea:db:90:3a:06:37:
ae:22:02:54:99:c7:c1:0d:76:ea:11:2f:17:9d:36:
c2:8c:40:ec:d5:25:b9:e8:d8:a8:8c:e0:a2:41:ad:
80:1e:7f:49:e7:fd:8a:44:5e:9c:b1:2d:92:21:52:
a0:3b:fc:6d:63:90:fb:1d:43:dc:8b:c1:ae:7c:5b:
bc:f3:e6:a5:53:4b:f6:ad:68:53:53:d6:61:6a:40:
47:80:e6:14:78:69:12:c4:b4:1d:e2:98:ba:ff:81:
76:bd:cd:aa:97:8a:9d:6d:41:ab:a9:00:7a:ec:12:
e6:61:4f:9e:9e:69:96:77:d5:51:10:db:16:11:a9:
c3:56:8d:ae:b4:8a:8a:04:9a:bf:6c:c0:ae:c7:3c:
b1:ba:c5:bd:e2:7a:ef:3e:55:1d:f7:9e:e0:84:fe:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:F9:4F:D0:A9:D9:51:9D:BE:A0:28:D0:12:F2:35:09:74:38:FD
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.57.0/24
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
46.17.0.0/21
62.84.240.0/21
62.221.248.0/21
77.94.248.0/21
79.99.128.0/21
91.198.106.0/24
91.238.176.0/23
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.70.0.0/21
109.72.80.0/20
109.106.160.0-109.106.183.255
128.140.216.0/21
176.117.58.0/23
185.27.140.0/22
185.27.172.0/22
185.28.56.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.87.184.0/22
185.89.4.0/22
185.94.228.0/24
185.94.230.0/23
185.95.31.0/24
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.231.200.0/22
185.232.248.0/22
193.23.143.0/24
193.164.192.0/23
194.247.30.0/23
195.20.8.0/22
195.238.74.0/23
IPv6:
2001:67c:28fc::/48
2a00:f10::/29
2a00:f60::/32
2a00:9b60::/40
2a01:b940::/29
2a02:2968::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a06:4040::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:23:48:76:1a:1a:c9:e5:e0:4c:05:58:4b:62:82:ab:51:fb:
89:b5:d8:f7:ae:4e:14:15:44:85:3f:53:2d:a1:94:2e:84:5d:
a9:80:8b:b9:53:15:29:65:49:45:9a:37:8d:c4:2f:c8:65:9c:
f3:13:91:36:0f:b1:c3:72:fc:d6:d0:76:c4:42:3c:a2:6a:7d:
02:3b:96:34:7c:17:c3:78:ec:7e:50:7e:7c:5c:4d:ef:a4:bf:
5d:df:bf:f0:55:c8:71:65:a6:87:4a:da:83:9e:bd:db:df:43:
b8:1f:e3:16:13:a6:e8:59:b1:3f:33:65:9f:42:7c:31:17:8c:
70:b8:18:69:ac:7d:32:11:2d:03:f9:cb:23:29:66:77:4a:75:
67:e0:27:76:d8:8a:e7:70:2c:d8:d8:98:65:9b:69:bd:97:eb:
ca:3e:7b:c2:ad:a6:06:ef:0c:b9:1a:bf:aa:fd:d1:31:75:99:
89:bc:a6:0e:12:e3:40:aa:76:8d:4c:69:1a:f9:96:79:ff:2e:
22:66:eb:80:97:92:6d:74:d8:b6:36:02:2d:b7:9a:ec:48:d9:
75:9a:5d:0c:12:f3:97:c5:60:bc:4c:ea:75:e0:af:6f:e8:44:
65:99:7b:c2:a8:3f:ec:4f:70:9b:52:9b:9a:b8:ab:7b:be:ce:
f4:ab:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:16 2025 by rpki-client