Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/EJlTpI0-zUyJGD8r_JmSLoyaPKQ.roa
File: EJlTpI0-zUyJGD8r_JmSLoyaPKQ.roa (raw, json)
Hash identifier: spASh7gmRf2Bv7zrdYgTFn1issk7Zc+vWGXLVm45kE4=
Subject key identifier: 10:99:53:A4:8D:3E:CD:4C:89:18:3F:2B:FC:99:92:2E:8C:9A:3C:A4
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0198557A742F66BD722C3E5F83EAE7A5BC86
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/EJlTpI0-zUyJGD8r_JmSLoyaPKQ.roa
Signing time: Tue 29 Jul 2025 09:19:05 +0000
ROA not before: Tue 29 Jul 2025 09:19:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
79.150.0.0/16 maxlen: 24
79.151.0.0/16 maxlen: 24
79.152.0.0/16 maxlen: 24
79.153.0.0/16 maxlen: 24
79.154.0.0/16 maxlen: 24
79.155.0.0/16 maxlen: 24
79.156.0.0/16 maxlen: 24
79.157.0.0/16 maxlen: 24
79.158.0.0/16 maxlen: 24
79.159.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.58.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.46.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
82.198.96.0/19 maxlen: 19
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.40.0.0/16 maxlen: 24
83.41.0.0/16 maxlen: 24
83.42.0.0/16 maxlen: 24
83.43.0.0/16 maxlen: 24
83.44.0.0/16 maxlen: 24
83.45.0.0/16 maxlen: 24
83.46.0.0/16 maxlen: 24
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.49.0.0/16 maxlen: 24
83.50.0.0/16 maxlen: 24
83.51.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.4.0.0/16 maxlen: 24
88.5.0.0/16 maxlen: 24
88.6.0.0/16 maxlen: 24
88.7.0.0/16 maxlen: 24
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.17.0.0/16 maxlen: 24
88.18.0.0/16 maxlen: 24
88.19.0.0/16 maxlen: 24
88.20.0.0/16 maxlen: 24
88.21.0.0/16 maxlen: 24
88.22.0.0/16 maxlen: 24
88.23.0.0/16 maxlen: 24
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.120.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.84.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.76.240.0/23 maxlen: 23
195.76.240.0/24 maxlen: 24
195.76.241.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.77.198.0/23 maxlen: 23
195.77.198.0/24 maxlen: 24
195.77.199.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
2a02:9000::/23 maxlen: 23
2a02:9144::/32 maxlen: 32
2a02:9145::/32 maxlen: 32
2a02:9146::/32 maxlen: 32
2a02:9147::/32 maxlen: 32
2a02:9148::/32 maxlen: 32
2a02:9149::/32 maxlen: 32
2a02:914a::/32 maxlen: 32
2a02:914b::/32 maxlen: 32
2a02:914c::/32 maxlen: 32
2a02:914d::/32 maxlen: 32
2a02:914e::/32 maxlen: 32
2a02:914f::/32 maxlen: 32
2a02:9150::/32 maxlen: 32
2a02:9151::/32 maxlen: 32
2a02:9152::/32 maxlen: 32
2a02:9153::/32 maxlen: 32
2a02:9154::/32 maxlen: 32
2a02:9155::/32 maxlen: 32
2a02:9156::/32 maxlen: 32
2a02:9157::/32 maxlen: 32
2a02:9158::/32 maxlen: 32
2a02:9159::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:7a:74:2f:66:bd:72:2c:3e:5f:83:ea:e7:a5:bc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jul 29 09:19:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109953a48d3ecd4c89183f2bfc99922e8c9a3ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:fd:c7:57:24:6f:f8:7b:cf:18:9d:07:06:
fe:5c:af:4b:c6:aa:75:9e:8e:ca:9e:e4:95:b2:57:
46:86:4a:ae:00:cc:8f:1f:c0:1e:48:ce:f5:bd:bf:
f4:19:bd:2d:52:02:47:5a:49:63:4e:08:ff:7c:32:
7c:24:2c:6d:a2:42:34:53:61:59:49:df:96:25:2a:
38:5d:1d:90:84:4c:4b:ca:ae:5c:f5:1d:c6:eb:64:
7a:c6:13:1a:6b:6d:78:2c:a6:62:c8:2d:96:33:21:
e1:ec:35:38:83:d8:10:5a:6a:62:1c:69:f9:43:63:
db:c4:a7:0c:aa:6a:09:23:be:e6:6b:3b:18:37:96:
45:b6:8e:ca:76:d1:75:29:52:6d:8e:01:31:89:2f:
26:d0:9e:4f:0d:ae:e9:f6:2d:4b:ac:f2:99:4c:a7:
46:6f:25:df:b2:f0:ab:4b:ac:39:77:d0:32:4b:90:
d4:73:11:fe:f8:8e:77:26:01:e8:52:4f:43:12:a6:
1e:6e:fc:7a:43:bf:e2:e3:62:d1:64:fb:6f:7e:3d:
ea:f7:2b:34:99:e8:ec:a5:1a:03:8b:a2:51:a2:65:
bd:80:09:b1:f4:11:96:8a:82:f6:26:b6:47:33:63:
0e:02:ff:45:40:d3:48:eb:61:c0:56:de:fc:63:d3:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:53:A4:8D:3E:CD:4C:89:18:3F:2B:FC:99:92:2E:8C:9A:3C:A4
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/EJlTpI0-zUyJGD8r_JmSLoyaPKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0/12
80.24.0.0-80.39.255.255
80.58.0.0/15
81.32.0.0/12
82.198.96.0/19
83.32.0.0/11
88.0.0.0/11
95.120.0.0/13
176.80.0.0/13
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
IPv6:
2a02:9000::/23
Signature Algorithm: sha256WithRSAEncryption
ea:6c:2e:74:89:42:cc:a0:d7:59:8d:f5:4b:02:ad:28:a2:84:
a7:3e:22:09:3f:8f:69:e6:33:2b:e1:96:62:10:3a:9f:f7:ac:
b3:35:c5:d1:27:a1:e5:50:5b:b7:13:2e:ab:60:4f:3e:48:36:
6b:21:41:f3:61:82:8a:04:d7:58:2a:ce:67:03:f1:b1:a3:0e:
a4:7d:b9:76:4f:67:12:75:e7:52:49:fa:50:0a:0b:02:3e:f9:
66:27:47:c4:41:57:12:8c:bb:b0:e1:dd:b7:d2:36:3f:0d:3d:
54:39:36:86:84:e6:bc:20:9d:fb:ca:b2:7d:50:e0:65:57:64:
65:f2:b8:b7:18:b1:7b:2e:b4:07:06:78:f0:bf:28:9a:6d:34:
ec:f8:b7:a0:2b:f3:a7:a5:c8:a0:4f:5d:cc:0f:8a:49:43:a3:
c3:1f:7a:25:91:a3:bc:45:e7:a1:60:a9:88:81:51:61:f1:7d:
b5:ff:22:39:88:6d:57:18:31:bc:e2:7a:05:2b:25:20:8c:ee:
7b:3f:3b:40:8e:39:f8:48:b6:50:d1:6a:ef:41:ed:de:19:08:
d7:49:72:49:cb:9c:d8:41:ca:98:9f:97:2f:46:7f:cf:d9:be:
cb:7e:4b:02:04:7a:db:6d:39:a7:b3:94:70:54:e7:03:0a:fc:
59:da:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:44:33 2025 by rpki-client