Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/LhFj95I_FAK0SQt_IVeu_j9yy-Y.roa
File: LhFj95I_FAK0SQt_IVeu_j9yy-Y.roa (raw, json)
Hash identifier: UKe9AQrQFX9sK5Sb3u4prHdwMu3msjjjq1TGlUk7HFU=
Subject key identifier: 2E:11:63:F7:92:3F:14:02:B4:49:0B:7F:21:57:AE:FE:3F:72:CB:E6
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019652F108CE35AECB591EBFEACC5D751573
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/LhFj95I_FAK0SQt_IVeu_j9yy-Y.roa
Signing time: Sun 20 Apr 2025 11:24:10 +0000
ROA not before: Sun 20 Apr 2025 11:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:f1:08:ce:35:ae:cb:59:1e:bf:ea:cc:5d:75:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Apr 20 11:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1163f7923f1402b4490b7f2157aefe3f72cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:ba:1f:8b:0b:87:b1:15:2a:9c:74:d9:47:
06:5a:f5:3d:72:d8:9c:7f:7a:ac:04:b6:af:b9:1f:
07:00:83:d6:77:10:44:f7:b9:9c:c7:3f:14:a0:b3:
f4:55:12:1a:79:d3:f1:e8:12:bd:43:06:a8:0d:62:
5c:6b:cd:ea:64:0c:82:a8:79:a8:59:e1:8b:c1:e7:
1c:cc:1e:a6:dc:27:63:3e:3a:c2:7a:0c:08:44:29:
cf:30:fa:aa:c5:f5:9a:48:bf:10:7e:77:b0:77:29:
09:42:11:e7:d1:66:41:cf:6e:b0:0d:99:39:9a:93:
95:09:67:84:2c:a6:cc:31:97:c2:ed:d8:4f:a4:ad:
a9:71:7b:2d:59:ea:12:a0:b2:b0:18:c7:33:bc:b4:
fc:4f:9d:f3:13:30:79:79:88:ee:48:5c:2e:b7:94:
75:c8:fa:22:29:3e:01:70:50:78:e5:a5:26:7c:54:
b8:5e:49:3e:cc:c9:e2:bd:b9:3b:88:ef:98:13:75:
03:d7:a9:3d:a8:2d:47:f8:fd:74:b0:8b:74:b3:d2:
56:30:63:66:34:9b:ca:0a:13:f6:52:5e:0b:ca:02:
7c:45:32:e6:4a:b0:8d:51:2e:3d:5b:dd:08:08:53:
d7:62:43:43:fc:39:20:58:60:c7:25:50:16:09:c7:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:63:F7:92:3F:14:02:B4:49:0B:7F:21:57:AE:FE:3F:72:CB:E6
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/LhFj95I_FAK0SQt_IVeu_j9yy-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
49:68:c4:55:70:73:46:d7:29:2a:e9:85:1d:5f:a4:c6:9f:f7:
5d:b7:34:d0:93:80:4d:a1:22:23:90:fc:92:af:f3:9d:51:3b:
df:3d:95:29:bb:95:6d:d6:8d:25:c7:1d:c4:22:7b:10:66:46:
3f:07:73:dd:e4:a4:56:19:18:3f:1a:88:83:c7:33:99:26:66:
f0:21:0c:de:20:21:ba:ca:23:a9:dc:85:97:26:a7:3d:07:86:
b1:b1:74:32:9f:82:81:e4:70:ba:a8:71:e3:06:a4:30:d1:9a:
31:50:54:99:cf:08:c3:26:21:a2:26:be:91:63:7e:17:a7:ad:
5c:ee:cc:79:c8:62:e6:a6:e6:8c:85:b3:20:fa:6a:64:32:47:
0a:68:1b:64:71:6d:ed:c9:0f:fd:75:9c:25:e9:d1:42:59:a4:
0f:9e:74:d0:a4:c8:08:00:ca:4e:38:cc:f9:ae:3d:52:5b:d3:
25:63:5c:f1:a3:0b:79:e7:f2:ef:fc:ca:98:9f:1d:24:39:a3:
a3:eb:c3:68:44:07:27:e0:f4:c4:10:16:0f:10:55:7c:71:4d:
ef:6a:a0:1b:b4:74:42:da:de:c3:a9:e3:8a:b5:b5:11:ba:4c:
fa:07:db:bc:d8:20:49:70:56:84:24:e1:a0:dc:f9:59:29:67:
a5:3f:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:57:51 2025 by rpki-client