Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rs7wnprlR3ZIgOpYYTMuZWNLPDg.roa
File: rs7wnprlR3ZIgOpYYTMuZWNLPDg.roa (raw, json)
Hash identifier: cHyw0O+kfXbZrXML2es6xt5jbUE5+G14+K1xW29mbpE=
Subject key identifier: AE:CE:F0:9E:9A:E5:47:76:48:80:EA:58:61:33:2E:65:63:4B:3C:38
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019763670BCFDDEDF0B6B32C319CA49BC5C0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rs7wnprlR3ZIgOpYYTMuZWNLPDg.roa
Signing time: Thu 12 Jun 2025 09:09:47 +0000
ROA not before: Thu 12 Jun 2025 09:09:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:67:0b:cf:dd:ed:f0:b6:b3:2c:31:9c:a4:9b:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 12 09:09:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aecef09e9ae547764880ea5861332e65634b3c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:b7:0d:2b:da:d2:e4:55:d3:1b:8c:2d:fd:
6b:4f:f8:b6:6e:9b:15:d9:31:c7:31:42:68:ce:7c:
b8:8d:b0:d5:3d:b0:d3:55:2f:f5:a8:bb:91:e6:92:
c1:a9:99:c4:e2:31:05:1b:17:62:c0:6b:58:ec:6a:
15:b8:34:73:58:5c:4e:d1:e4:53:e6:e4:01:72:9f:
2b:40:59:14:c5:91:93:6c:03:68:80:5f:91:12:1a:
bd:67:16:05:d8:fe:73:b0:7e:9a:00:34:a3:d1:47:
17:bd:e1:02:77:3c:9b:ff:b2:69:70:27:85:33:74:
0e:40:a4:a3:aa:3e:e2:f1:82:e1:1a:21:26:48:c0:
e7:72:71:3a:d3:44:d4:e1:53:1d:d4:1b:43:16:cd:
d7:a6:a9:6e:94:65:95:10:c4:0a:21:c1:35:c1:b0:
06:7d:11:85:b7:e8:09:8f:1c:63:71:d8:ef:68:a1:
95:81:b2:84:5f:a1:78:58:71:73:07:43:00:36:0e:
85:fa:47:45:eb:2d:3d:e5:63:bf:3e:af:d0:0f:8a:
f1:91:e6:36:18:44:2f:a8:53:9c:57:9a:9a:47:a6:
3f:99:bd:3c:f8:3f:cb:5f:7f:6c:75:68:3f:47:ed:
09:d4:ff:b6:76:4e:27:f3:fe:9b:c3:75:ad:77:52:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CE:F0:9E:9A:E5:47:76:48:80:EA:58:61:33:2E:65:63:4B:3C:38
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rs7wnprlR3ZIgOpYYTMuZWNLPDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
45.133.247.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.105.116.0/23
185.125.216.0/22
185.125.229.0/24
185.125.231.0/24
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
25:cc:20:eb:08:a0:3b:60:f9:5f:35:05:53:4f:19:0e:32:d9:
03:7c:d9:3d:86:6c:4f:76:71:7e:12:69:d1:e4:eb:a1:48:38:
6b:5b:c1:b1:44:17:71:c4:2d:29:a0:47:06:83:25:04:4a:ad:
66:91:a9:65:04:62:59:86:39:ae:23:4a:b7:01:c1:98:54:c5:
15:b6:e6:8f:58:71:89:f7:0b:ea:eb:ee:10:c8:94:5f:fa:b1:
eb:75:4a:d9:7f:2e:54:1f:8a:5b:e3:fd:ef:1f:92:7f:9c:2b:
a9:9e:d5:57:9a:78:bd:5f:e6:8f:db:52:93:49:d8:b3:0a:07:
a3:d8:ac:8d:1f:90:77:16:77:f2:0f:69:b1:f7:fd:9a:93:da:
2d:42:ac:67:7d:4e:2d:ab:97:82:bd:51:b7:40:0c:b7:4e:b2:
50:ae:d3:5f:41:68:8c:bd:44:ea:f8:c1:2f:00:f8:83:a3:02:
16:69:a5:87:97:34:2a:3d:49:3e:55:8e:e5:0a:73:34:72:38:
c3:8f:56:f5:4e:51:26:3d:07:b9:1c:2e:07:2c:e6:60:ae:b0:
08:33:e8:e3:79:23:e6:c6:21:d1:5d:74:dd:71:71:0e:09:96:
b9:7a:73:25:f7:a5:1c:2c:b2:ed:76:80:d8:cf:4b:36:1c:dc:
4d:f5:53:b7
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAZdjZwvP3e3wtrMsMZykm8XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwNjEyMDkwOTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWNlZjA5ZTlhZTU0Nzc2NDg4MGVhNTg2MTMzMmU2NTYzNGIzYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC63DSva0uRV0xuMLf1rT/i2bpsV
2THHMUJozny4jbDVPbDTVS/1qLuR5pLBqZnE4jEFGxdiwGtY7GoVuDRzWFxO0eRT
5uQBcp8rQFkUxZGTbANogF+REhq9ZxYF2P5zsH6aADSj0UcXveECdzyb/7JpcCeF
M3QOQKSjqj7i8YLhGiEmSMDncnE600TU4VMd1BtDFs3XpqlulGWVEMQKIcE1wbAG
fRGFt+gJjxxjcdjvaKGVgbKEX6F4WHFzB0MANg6F+kdF6y095WO/Pq/QD4rxkeY2
GEQvqFOcV5qaR6Y/mb08+D/LX39sdWg/R+0J1P+2dk4n8/6bw3Wtd1Ji/wIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFK7O8J6a5Ud2SIDqWGEzLmVjSzw4MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvcnM3d25wcmxSM1pJZ09wWVlUTXVaV05MUERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHpBggrBgEFBQcBBwEB/wSB2TCB1jB4BAIAATByAwQBLVlC
AwQCLYCwAwQALYT8AwQALYX3AwQAW9lQAwQDXo6IAwQAZ1JnAwQCuQX4AwQCuTrM
AwQBuWl0AwQCuX3YAwQAuX3lAwQAuX3nAwQAuci8AwQAwW1VAwQEwXywAwQAwajg
AwQFwkPAAwQAwy/6MFoEAgACMFQDBwAqCpMAAAADBwAqCpMAAAIwEgMHBCoKkwAA
0AMHACoKkwAA0jAQAwUAKgqTAQMHACoKkwEAAgMFACoKkwIDBQMqC3eAAwUAKgx3
wAMFAyoNOIAwDQYJKoZIhvcNAQELBQADggEBACXMIOsIoDtg+V81BVNPGQ4y2QN8
2T2GbE92cX4SadHk66FIOGtbwbFEF3HELSmgRwaDJQRKrWaRqWUEYlmGOa4jSrcB
wZhUxRW25o9YcYn3C+rr7hDIlF/6set1Stl/LlQfilvj/e8fkn+cK6me1VeaeL1f
5o/bUpNJ2LMKB6PYrI0fkHcWd/IPabH3/ZqT2i1CrGd9Ti2rl4K9UbdADLdOslCu
019BaIy9ROr4wS8A+IOjAhZppYeXNCo9ST5VjuUKczRyOMOPVvVOUSY9B7kcLgcs
5mCusAgz6ON5I+bGIdFddN1xcQ4Jlrl6cyX3pRwssu12gNjPSzYc3E31U7c=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:11 2025 by rpki-client