Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2b1pmnLEH8D99n_Vql6oTp6Pelw.roa
File: 2b1pmnLEH8D99n_Vql6oTp6Pelw.roa (raw, json)
Hash identifier: 3Oa8kjhTwJAGgNUbd3QOYL9axkjzjaptazRwSzQafic=
Subject key identifier: D9:BD:69:9A:72:C4:1F:C0:FD:F6:7F:D5:AA:5E:A8:4E:9E:8F:7A:5C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019754B688B33874706971CD69BEA7C996A3
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2b1pmnLEH8D99n_Vql6oTp6Pelw.roa
Signing time: Mon 09 Jun 2025 12:42:18 +0000
ROA not before: Mon 09 Jun 2025 12:42:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.92.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 23
85.173.150.0/23 maxlen: 23
85.173.152.0/22 maxlen: 22
85.174.128.0/22 maxlen: 22
85.174.132.0/23 maxlen: 23
85.174.134.0/24 maxlen: 24
85.174.136.0/24 maxlen: 24
85.174.143.0/24 maxlen: 24
85.174.190.0/23 maxlen: 23
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.171.0/24 maxlen: 24
85.175.194.0/23 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:b6:88:b3:38:74:70:69:71:cd:69:be:a7:c9:96:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 9 12:42:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9bd699a72c41fc0fdf67fd5aa5ea84e9e8f7a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:71:f1:2f:67:9a:30:9a:36:6c:04:f2:4b:
bb:60:04:9e:5f:cd:95:c6:55:d3:3a:0f:71:46:e4:
41:1a:a3:7a:75:d2:df:e7:eb:cd:ed:f4:cc:c6:c4:
a5:e4:f2:e0:46:9b:63:2e:12:7f:54:bb:d8:72:bf:
aa:b5:74:5d:3e:db:5c:19:24:0c:0d:16:f1:1e:6f:
a9:62:3b:e6:df:c2:e5:ff:a3:53:93:65:46:92:32:
18:67:ba:4e:04:ec:2d:7c:11:ca:ee:55:6f:77:46:
8e:69:83:77:de:04:50:50:c2:9b:df:d2:f7:66:89:
1a:16:d7:41:c4:e6:1d:2d:ef:15:a8:e8:77:be:9c:
b9:e6:14:fa:bd:f6:e9:30:40:21:ba:1a:04:9c:09:
1e:14:ac:04:5b:73:25:78:e0:93:04:f4:15:f7:36:
13:b4:82:71:4b:93:de:e0:6b:67:48:ef:f9:28:17:
06:64:38:a0:cf:da:33:70:54:4b:fb:34:95:0c:eb:
1d:aa:5c:16:76:ef:ff:05:bb:a9:d7:ba:d3:1a:df:
56:64:99:b4:79:13:cf:8a:55:a5:e5:ea:74:63:cb:
23:75:65:7f:55:51:7a:c9:f7:b8:ff:f7:7e:b8:b1:
19:65:ce:08:ea:b8:1e:04:74:3c:7f:0f:25:c1:3f:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:69:9A:72:C4:1F:C0:FD:F6:7F:D5:AA:5E:A8:4E:9E:8F:7A:5C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2b1pmnLEH8D99n_Vql6oTp6Pelw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0-62.183.50.255
62.183.52.0-62.183.75.255
62.183.88.0-62.183.99.255
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0-85.172.109.255
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0-85.174.134.255
85.174.136.0/24
85.174.143.0/24
85.174.190.0/23
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
58:39:c0:38:25:06:4e:da:fd:2e:6b:0e:05:7c:54:15:98:75:
60:eb:14:2c:9d:b0:00:c0:fe:b9:6e:d2:47:57:d0:7f:74:0f:
cc:70:14:d0:f8:df:eb:85:3f:31:d5:1c:f6:de:2c:8b:9f:15:
95:33:83:d0:2c:9b:67:19:89:8b:99:bd:b1:38:d6:af:e1:fd:
a6:22:4c:9d:91:1b:8e:b9:d7:e7:28:f7:df:22:cc:68:69:aa:
df:ae:b2:57:b5:64:ef:8d:6b:e2:13:39:55:5c:1f:77:9a:0e:
5a:a8:d2:b0:e4:fb:59:80:e8:7b:22:f1:0f:3f:75:c8:75:35:
78:4c:78:2e:d9:0f:a7:08:10:0e:39:b1:32:f8:f5:33:fe:aa:
5d:0d:7e:da:a0:70:17:7f:68:0c:30:10:1a:a2:6f:23:49:9b:
27:8b:6d:4e:8a:ad:0c:c9:ae:c2:85:3a:44:58:13:b6:2e:a4:
89:2c:43:d6:db:6f:09:2b:18:ad:25:68:01:67:0f:1e:05:e5:
fc:91:3a:dd:ee:aa:41:3c:85:e8:f4:58:15:01:9c:e0:12:b3:
39:fc:5a:34:7a:10:e0:f3:91:d4:47:88:f3:e1:e1:56:62:d0:
06:9a:f1:29:8a:fc:30:cd:ad:12:66:34:4d:3b:a2:50:cb:44:
ae:f8:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:44:31 2025 by rpki-client