Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/1-rGoQ0Tdy7up4TbdFStpjg1PQZc.roa
File: 1-rGoQ0Tdy7up4TbdFStpjg1PQZc.roa (raw, json)
Hash identifier: NEBz7IPzQdgVGife4eImD2TAPPPzuFn58trdu+E7I9M=
Subject key identifier: FA:B1:A8:43:44:DD:CB:BB:A9:E1:36:DD:15:2B:69:8E:0D:4F:41:97
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019817E2A50C5DD4529185C84FEB148B4C83
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/1-rGoQ0Tdy7up4TbdFStpjg1PQZc.roa
Signing time: Thu 17 Jul 2025 10:16:25 +0000
ROA not before: Thu 17 Jul 2025 10:16:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 37.235.3.0/24 maxlen: 24
37.235.4.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
37.235.7.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
45.84.252.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
94.16.98.0/24 maxlen: 24
94.16.100.0/24 maxlen: 24
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
144.208.192.0/18 maxlen: 32
144.208.204.0/24 maxlen: 24
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.207.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.216.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.231.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.236.0/24 maxlen: 24
144.208.237.0/24 maxlen: 24
144.208.238.0/24 maxlen: 24
144.208.240.0/24 maxlen: 24
144.208.241.0/24 maxlen: 24
144.208.242.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
144.208.254.0/24 maxlen: 24
144.208.255.0/24 maxlen: 24
176.123.54.0/23 maxlen: 23
178.255.152.0/21 maxlen: 32
185.2.176.0/22 maxlen: 32
185.2.176.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
185.81.206.0/24 maxlen: 24
185.81.209.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
185.228.148.0/22 maxlen: 22
188.65.72.0/21 maxlen: 32
188.172.192.0/18 maxlen: 32
188.172.208.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
188.172.247.0/24 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
193.33.114.0/23 maxlen: 32
194.1.206.0/24 maxlen: 32
213.227.160.0/19 maxlen: 32
213.227.184.0/24 maxlen: 24
217.146.0.0/19 maxlen: 24
217.146.6.0/24 maxlen: 24
217.146.7.0/24 maxlen: 24
2a00:11c0::/32 maxlen: 128
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:40::/48 maxlen: 48
2a00:11c0:41::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:46::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:5c::/48 maxlen: 48
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:6c::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:80::/48 maxlen: 48
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:88::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:99::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a00:11c0:1334::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:1798::/48 maxlen: 48
2a00:11c0:179a::/48 maxlen: 48
2a00:11c0:179b::/48 maxlen: 48
2a00:11c0:9021::/48 maxlen: 48
2a01:aea0::/32 maxlen: 32
2a01:aea0::/40 maxlen: 40
2a01:aea0:dd1::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a05:8900:28::/48 maxlen: 48
2a05:8900:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:e2:a5:0c:5d:d4:52:91:85:c8:4f:eb:14:8b:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jul 17 10:16:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab1a84344ddcbbba9e136dd152b698e0d4f4197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:a1:a3:b6:f7:32:a3:88:79:3d:77:d3:b1:
02:75:15:43:b1:2b:e2:74:7b:bb:15:49:49:67:59:
a7:5c:68:90:01:23:bc:42:03:a8:2e:ab:d5:f5:f7:
88:73:bf:df:4c:0e:8c:02:34:81:7e:3c:39:fd:e8:
fc:7c:f7:2b:0d:d7:a1:6e:b0:4e:58:f8:69:9e:e0:
1e:fc:1e:64:ea:f0:41:8f:fa:c2:4d:03:f1:1a:be:
93:90:17:05:09:bc:7c:49:3e:c3:38:ec:f8:65:31:
d0:43:fb:af:39:26:34:ff:ad:c3:70:c9:4e:d2:92:
ab:ee:6f:84:b4:5b:66:63:83:6e:6f:b6:5a:08:4e:
f2:a6:9a:de:7a:d3:f9:4d:b1:25:26:be:ed:41:f2:
af:77:4a:af:e5:06:59:37:48:9a:86:a5:db:e4:4c:
11:ef:6e:fb:fa:24:94:b6:25:2b:06:b9:65:d8:b5:
38:31:79:75:5b:2e:31:c4:59:3a:b3:3a:5d:5a:40:
b6:2d:23:7c:36:86:19:10:41:63:e8:cc:b6:49:c9:
5b:13:01:dd:47:56:27:a8:df:76:81:45:41:81:24:
f8:e0:a9:a8:fc:5e:08:6f:07:0f:24:dc:a1:77:db:
77:e8:fc:07:a7:ca:42:d6:b6:85:3c:b4:6d:c1:59:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:A8:43:44:DD:CB:BB:A9:E1:36:DD:15:2B:69:8E:0D:4F:41:97
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/1-rGoQ0Tdy7up4TbdFStpjg1PQZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.3.0-37.235.5.255
37.235.7.0/24
37.252.224.0/19
45.84.252.0/24
45.132.61.0-45.132.63.255
94.16.98.0/24
94.16.100.0/24
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
2a05:8900:28::/48
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
c5:b1:f8:d4:da:41:65:1f:27:22:b0:d1:d5:e2:60:77:5d:ee:
90:b5:9e:47:d5:92:59:79:27:da:33:2a:22:e1:17:a3:42:69:
1d:01:53:ac:b0:c0:2e:3e:4f:d9:2e:fa:0a:d5:7e:8f:ec:15:
aa:f0:d7:af:3f:d9:92:61:88:33:69:46:2c:a1:6b:26:93:cb:
ea:71:0b:7c:49:70:cc:b4:5e:83:61:72:fb:4b:68:31:9f:0e:
4b:4d:dc:97:d7:ae:ad:c5:6c:bf:d2:af:2c:ad:0b:08:a5:27:
ac:e2:21:40:c4:f9:3f:ff:6e:de:f7:60:f1:9f:6f:6e:bb:e1:
e9:82:f0:89:9d:38:d3:bb:0a:b1:b5:fa:4b:08:52:c7:18:fa:
98:88:d3:f3:f5:92:4c:c4:e8:b0:b6:52:14:ab:0f:e3:5f:61:
6b:c9:77:98:d2:70:5c:fc:6c:73:c8:97:32:71:7c:5d:44:90:
3d:06:64:5a:6e:fb:bc:7d:4f:5d:54:35:58:51:15:dd:eb:a3:
41:90:6e:37:69:6f:08:bd:06:10:45:a3:b6:c9:4a:57:f1:54:
08:73:41:e7:c9:76:ce:29:2e:a5:2d:6b:cc:c4:55:1e:0e:9e:
1f:a6:52:6e:bc:d4:d2:05:60:7c:a0:86:6d:8d:9d:82:c7:7c:
46:60:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:36:01 2025 by rpki-client