Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/52PmmGV3aXleWbX9-5QkD3T7G80.roa
File: 52PmmGV3aXleWbX9-5QkD3T7G80.roa (raw, json)
Hash identifier: YUpifY1bSAdptUQTodCY1O+Ws4plwdNZWT5tmGKMklE=
Subject key identifier: E7:63:E6:98:65:77:69:79:5E:59:B5:FD:FB:94:24:0F:74:FB:1B:CD
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019668B145F5FA4050ECC040A2FB39F38980
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/52PmmGV3aXleWbX9-5QkD3T7G80.roa
Signing time: Thu 24 Apr 2025 16:46:10 +0000
ROA not before: Thu 24 Apr 2025 16:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.231.160.0/21 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.102.0/24 maxlen: 24
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.54.136.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 24
89.38.68.0/24 maxlen: 24
89.38.69.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.170.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.28.252.0/22 maxlen: 24
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:b1:45:f5:fa:40:50:ec:c0:40:a2:fb:39:f3:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Apr 24 16:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e763e698657769795e59b5fdfb94240f74fb1bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:da:c2:bf:25:2e:ad:d9:cb:eb:c4:55:11:
9b:ad:1e:ab:6d:35:68:8c:51:5d:cb:9b:27:98:ae:
f1:e4:ab:e4:d6:90:70:66:5b:88:ee:d3:e9:8a:c1:
f2:d8:f6:19:cf:5b:ed:77:e3:98:3d:d1:9e:e4:69:
2e:a4:d3:bf:18:61:a4:ec:64:f2:45:57:a4:6d:3e:
3c:aa:aa:1e:a1:d7:a6:cb:3b:5d:92:f6:fc:61:86:
5f:fe:77:56:d8:4e:d3:ec:e8:e0:62:ea:34:70:b1:
96:5c:37:06:6a:54:00:24:ee:6a:61:67:0e:30:e9:
db:75:02:c5:5f:49:0e:12:16:7a:f7:fd:31:0e:d3:
f8:66:07:44:23:6e:50:59:65:95:4c:e5:39:6a:ba:
c3:ef:5f:f7:da:48:87:4a:29:8b:40:d6:31:1f:50:
6d:aa:59:0f:81:93:7b:ac:e4:7d:d2:41:0c:95:74:
d4:6a:42:bc:c3:45:8a:e0:54:e5:36:b1:c5:9f:cd:
74:e5:e7:4f:bc:ab:4a:36:1c:a5:52:5e:6a:d5:ec:
b2:f7:98:5d:21:97:cf:c0:3d:99:b5:4f:21:59:da:
a6:ff:61:2c:2e:91:75:85:42:24:f7:76:06:bd:e5:
2e:87:c4:57:ee:ce:19:3a:96:6f:51:6a:8b:0f:f3:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:E6:98:65:77:69:79:5E:59:B5:FD:FB:94:24:0F:74:FB:1B:CD
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/52PmmGV3aXleWbX9-5QkD3T7G80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.231.160.0/21
46.247.142.0/23
64.239.236.0/22
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
32:8d:99:c8:bb:0d:19:aa:83:f7:9e:9e:e8:ee:0e:66:4d:44:
7d:9e:73:43:c7:5d:c4:a1:88:3f:22:87:5c:32:2a:3d:27:43:
85:54:9f:88:f4:c2:83:dc:e5:ef:e1:10:a0:1f:32:49:bb:65:
3d:94:5e:65:9b:01:0f:f0:b2:e2:ea:e0:af:43:90:ec:d9:fc:
02:23:c5:54:bf:44:58:a3:e1:b0:d5:2e:dc:fe:d1:b0:68:b0:
7b:9a:e7:03:55:44:ae:a3:5a:4c:79:ed:a5:33:39:e9:db:46:
2f:e2:02:9f:a6:93:e6:03:30:5a:fe:de:6c:7d:40:67:8f:6c:
c8:8a:7a:19:db:7d:36:c9:05:d2:3f:12:e9:33:ec:bb:ff:6b:
22:e3:27:66:22:2e:54:58:cc:d5:29:0c:46:0c:86:bc:6b:3d:
49:04:de:48:b6:e6:4a:2d:11:72:c9:a8:ff:d8:30:c7:66:42:
a8:a8:f9:f9:6d:64:e6:6b:9d:63:27:0b:96:a6:77:33:a4:7d:
3a:ec:87:c1:58:ae:0b:de:0b:ec:9d:c7:2c:76:f6:02:7e:73:
2d:93:92:2b:f3:76:fa:d9:11:93:73:88:a6:15:ff:e3:fe:bc:
2e:ae:d9:e7:23:eb:a3:f0:f7:39:72:61:ee:12:91:7c:f5:e7:
da:e8:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:39:57 2025 by rpki-client