Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5nXJsXS_dpKafNzYuUWOwTJcqns.roa
File: 5nXJsXS_dpKafNzYuUWOwTJcqns.roa (raw, json)
Hash identifier: 81+L+Fn0DpdmRR6n9IejP9I94PV32SnSNym+QIx285g=
Subject key identifier: E6:75:C9:B1:74:BF:76:92:9A:7C:DC:D8:B9:45:8E:C1:32:5C:AA:7B
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019835DD80C365090980F37077930F7BF803
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5nXJsXS_dpKafNzYuUWOwTJcqns.roa
Signing time: Wed 23 Jul 2025 05:59:25 +0000
ROA not before: Wed 23 Jul 2025 05:59:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.163.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
45.248.164.0/22 maxlen: 22
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
193.46.214.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:dd:80:c3:65:09:09:80:f3:70:77:93:0f:7b:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 23 05:59:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e675c9b174bf76929a7cdcd8b9458ec1325caa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:20:4d:4a:28:c2:ba:2b:ad:c2:99:5e:a8:
91:cb:11:0c:79:5e:82:54:e9:d6:34:0f:56:1f:22:
60:58:3a:0e:73:1b:ab:d6:f6:03:53:a6:65:a4:46:
0b:32:97:95:e3:11:46:7f:23:63:5f:b8:ef:8c:07:
c3:64:9f:e3:f8:18:cc:06:c6:d2:f4:91:4a:65:54:
56:c9:e7:18:45:b6:f7:77:25:6e:83:3c:fc:02:d0:
26:9b:65:7b:04:22:87:43:24:d1:91:1c:26:d7:10:
4b:2f:59:ba:06:81:a3:df:3a:30:c7:aa:2e:65:86:
8e:ec:34:5e:b3:bb:ab:f9:5d:da:3e:05:1a:79:b8:
e3:14:67:41:64:bb:e5:11:03:16:97:af:a4:32:42:
66:e0:8e:45:a3:c2:99:77:1c:fc:11:70:01:ab:9b:
72:b9:80:d1:fe:d9:c6:26:6b:cd:3d:e6:5b:ee:d1:
97:56:92:2c:dc:75:e5:c5:61:d2:0b:70:bf:5d:e8:
d4:2e:e7:3a:28:4f:20:82:c7:5b:82:eb:9c:90:59:
47:35:67:d8:80:32:b8:86:ac:a0:50:85:21:de:28:
1e:da:8a:7a:c1:88:e8:d9:2b:cb:7a:60:8e:3d:87:
18:1c:5a:5d:3c:07:06:68:8f:02:7a:0f:9c:66:f2:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:C9:B1:74:BF:76:92:9A:7C:DC:D8:B9:45:8E:C1:32:5C:AA:7B
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5nXJsXS_dpKafNzYuUWOwTJcqns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.83.12.0/22
45.95.88.0/22
45.248.164.0/22
46.36.97.0/24
46.36.100.0-46.36.102.255
46.36.105.0-46.36.106.255
89.37.0.0/20
89.40.35.0/24
89.43.0.0/20
91.209.183.0-91.209.184.255
91.239.59.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
193.46.214.0/24
195.149.127.0/24
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
91:36:bb:82:c0:9c:b0:75:62:25:3c:68:4f:9e:1d:6b:91:56:
0d:b6:76:66:34:07:ab:39:7f:93:bf:ec:3d:7c:4d:5e:9e:87:
dd:f0:78:49:27:fa:48:11:9a:2a:e1:20:56:c9:4d:30:f8:c5:
94:61:4b:61:2b:96:d6:01:1b:67:69:40:a3:ce:07:75:e0:d1:
7f:09:4b:16:dd:37:ff:97:0d:0b:42:00:22:85:c7:9e:88:7b:
41:0d:7d:b1:dd:96:7b:ed:c6:e0:24:6b:fc:ad:e8:f7:55:3b:
e8:bf:13:81:93:d3:86:ca:aa:0a:86:0b:76:b6:d0:31:82:7a:
b0:1f:ea:00:04:a6:81:c2:ab:d1:5b:6a:bb:74:43:65:b7:49:
13:65:ae:3f:73:c7:21:1c:08:59:8f:2b:93:d6:eb:63:b3:da:
8e:ce:52:58:83:67:ff:9d:a0:f1:e7:3f:01:77:4e:b5:c5:84:
f3:62:1d:e6:1d:36:f8:68:b6:11:3a:50:4f:0f:7a:c9:56:18:
af:f3:59:76:b7:79:dd:d1:0d:93:b5:8a:08:71:46:c4:70:0e:
82:6c:fc:dd:41:00:ac:f8:15:e1:ab:37:c7:d4:aa:53:78:e1:
2e:70:c0:6e:20:6e:0d:24:d8:58:d4:c3:8e:13:17:e4:6c:67:
7d:3e:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:10:43 2025 by rpki-client