Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/1fKC4KlaigxvzJPCnKhmCCUh-Xk.roa
File: 1fKC4KlaigxvzJPCnKhmCCUh-Xk.roa (raw, json)
Hash identifier: 9k1E+nI8fcOzCgY/dKFDHJJgbLXTinSFoPGIrR08t58=
Subject key identifier: D5:F2:82:E0:A9:5A:8A:0C:6F:CC:93:C2:9C:A8:66:08:25:21:F9:79
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019763535FA683DA113CC836F13D1BB5C325
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/1fKC4KlaigxvzJPCnKhmCCUh-Xk.roa
Signing time: Thu 12 Jun 2025 08:48:17 +0000
ROA not before: Thu 12 Jun 2025 08:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:53:5f:a6:83:da:11:3c:c8:36:f1:3d:1b:b5:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jun 12 08:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5f282e0a95a8a0c6fcc93c29ca866082521f979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:5a:2e:5f:60:ad:5c:45:e6:ec:c1:41:b4:
2f:57:ea:84:4f:93:6b:b7:14:99:c0:55:8a:34:5b:
15:cd:db:8b:98:0a:ec:11:8d:0f:0d:ef:70:1a:f8:
11:d7:e2:81:f0:ba:0d:73:1d:1e:62:a2:91:3d:6e:
af:b9:df:4e:06:8e:21:ec:bd:d6:65:37:4f:c0:63:
8c:11:e6:2b:38:92:c8:a5:42:f6:f1:96:d1:44:a2:
57:02:cc:43:bb:fb:c6:75:e3:3d:57:1a:0b:5d:11:
5b:27:21:24:ea:6a:ed:c8:8d:9f:77:be:d2:f3:9e:
2f:cc:c0:d3:4d:c7:a9:dd:b8:3b:e7:c3:a3:1e:78:
cb:10:a8:92:6c:2c:6e:c6:a5:bc:fa:db:9d:98:d2:
c2:98:f8:09:f5:ec:f8:80:e8:a2:82:47:55:c4:c2:
d2:39:01:8b:1b:88:23:57:32:15:f0:fc:0b:aa:84:
e1:77:93:3d:d6:5e:07:7c:10:be:00:5e:b6:c1:ca:
f8:6b:62:90:39:de:2a:9a:18:2c:01:5c:f7:26:9a:
99:04:1c:3e:88:53:a6:8e:60:e6:32:e7:1c:b3:e9:
93:c2:67:65:f3:49:1b:69:fb:49:78:c5:b9:fa:54:
56:5a:6d:46:57:69:ba:2d:1d:6a:52:dd:6e:77:2b:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F2:82:E0:A9:5A:8A:0C:6F:CC:93:C2:9C:A8:66:08:25:21:F9:79
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/1fKC4KlaigxvzJPCnKhmCCUh-Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.192.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.243.255
217.154.248.0/24
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
b2:5b:78:23:1e:33:4e:47:c9:cc:3e:7d:79:a9:8b:ba:62:62:
00:30:d6:74:ae:85:88:93:4c:a3:89:5e:ef:93:02:f6:4e:9f:
76:83:00:19:6d:f6:b9:83:02:42:78:3b:d9:94:22:a6:96:50:
2a:33:03:7f:40:cb:e5:88:c9:e6:e0:ae:8d:ec:11:49:2e:3f:
a5:61:34:ce:e6:e8:8d:a2:d8:55:ea:b7:4e:c9:58:80:f8:d3:
93:74:da:38:e6:0e:46:ba:d5:93:38:d8:59:ac:3f:3f:88:44:
fa:0a:1c:e0:2c:60:90:59:e0:75:66:16:9b:94:dc:81:14:05:
3b:ad:1d:f7:4b:8e:69:5d:39:ef:23:93:e3:cf:85:04:4a:9d:
f4:5c:48:b6:c7:d1:ff:bf:a2:4d:35:b5:3d:f5:09:6d:69:e7:
84:d5:bf:57:7c:6f:b2:ce:a6:3c:89:91:4b:14:1e:66:5b:74:
7d:51:13:13:d0:d6:9b:7a:7c:a7:be:03:e2:9e:26:fe:c4:d2:
ee:8b:12:0d:73:de:0c:7f:68:22:cc:2f:00:34:2e:7c:12:c3:
9d:a8:f6:3b:81:8e:9a:2d:52:e3:6c:fe:2d:e1:5b:7f:ef:8f:
e0:9e:65:16:7f:72:f3:fb:5c:dc:a0:37:64:c0:e7:cd:02:2d:
a0:a9:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:14 2025 by rpki-client