Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/DLrHttKiIGju_8yity8U1uxWhCc.roa
File: DLrHttKiIGju_8yity8U1uxWhCc.roa (raw, json)
Hash identifier: VHk4A+B9UE0pVFEOd4dpibicEXnriGB+QdFyrbAlkf8=
Subject key identifier: 0C:BA:C7:B6:D2:A2:20:68:EE:FF:CC:A2:B7:2F:14:D6:EC:56:84:27
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197CF9DEB26813313DB9549D5894A77BA9C
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/DLrHttKiIGju_8yity8U1uxWhCc.roa
Signing time: Thu 03 Jul 2025 09:28:42 +0000
ROA not before: Thu 03 Jul 2025 09:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/20 maxlen: 20
94.252.240.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.8.0/21 maxlen: 21
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
2a00:b800:3000::/55 maxlen: 55
2a00:b800:3000:200::/55 maxlen: 55
2a00:b800:3000:400::/55 maxlen: 55
2a00:b800:3000:600::/55 maxlen: 55
2a00:b800:3200::/55 maxlen: 55
2a00:b800:3200:200::/55 maxlen: 55
2a00:b800:3200:400::/55 maxlen: 55
2a00:b800:3200:600::/55 maxlen: 55
2a00:b800:3400::/55 maxlen: 55
2a00:b800:3400:200::/55 maxlen: 55
2a00:b800:3400:400::/55 maxlen: 55
2a00:b800:3400:600::/55 maxlen: 55
2a00:b800:3600::/55 maxlen: 55
2a00:b800:3600:200::/55 maxlen: 55
2a00:b800:3600:400::/55 maxlen: 55
2a00:b800:3600:600::/55 maxlen: 55
2a00:b800:3a00::/55 maxlen: 55
2a00:b800:3a00:200::/55 maxlen: 55
2a00:b800:3a00:400::/55 maxlen: 55
2a00:b800:3a00:600::/55 maxlen: 55
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:9d:eb:26:81:33:13:db:95:49:d5:89:4a:77:ba:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 3 09:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbac7b6d2a22068eeffcca2b72f14d6ec568427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:90:df:59:46:05:a3:f4:17:5f:20:68:4e:
d0:3e:c4:81:69:f5:5e:72:b4:31:7b:32:43:d2:64:
6c:90:48:2e:7a:37:d2:fe:71:52:db:0d:65:16:54:
12:75:d5:70:07:b4:d0:4e:f8:f5:89:aa:c3:cd:2d:
28:92:75:a6:37:ef:90:bb:66:99:42:9c:ae:ca:33:
ac:2b:00:85:b6:ff:16:4a:e5:d8:74:32:7a:e9:38:
df:c6:ef:2c:60:81:bc:e7:00:f4:09:19:19:dc:39:
cd:f9:36:7f:5b:0d:90:c0:51:2a:8e:41:0c:b1:a1:
cb:8d:21:07:1e:79:cb:55:c9:19:c0:9e:11:2a:d5:
f2:72:71:c2:0e:f7:9a:a3:46:87:46:56:c3:f9:5a:
9d:4d:e0:51:89:3a:c4:95:16:94:e0:32:0c:de:d7:
e0:38:8b:f3:55:ed:25:de:ed:1b:c2:d5:5f:05:65:
72:0e:6a:70:74:98:af:35:06:81:8d:47:ba:48:b0:
61:4f:65:af:19:1c:bc:31:6b:dd:ba:1f:d0:cc:2d:
8c:89:23:24:88:27:88:ff:2a:52:7b:25:9a:de:88:
76:32:79:0f:49:7f:df:62:8c:29:4b:37:59:97:7f:
85:47:89:56:1e:6c:91:b4:c0:50:f0:b1:92:ec:92:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:C7:B6:D2:A2:20:68:EE:FF:CC:A2:B7:2F:14:D6:EC:56:84:27
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/DLrHttKiIGju_8yity8U1uxWhCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
4e:23:06:47:cc:3d:ca:65:d5:f4:80:9c:05:d2:60:7f:fe:7b:
4a:03:44:53:4a:f1:f4:fe:ff:9a:a2:90:a6:52:da:87:02:58:
50:74:7d:b9:70:71:6c:0e:6c:1a:97:d9:96:13:88:3c:e8:64:
b0:7a:a1:e2:52:1c:a5:01:80:3c:e9:a3:6e:82:02:19:72:75:
33:5e:9b:7e:b7:0e:45:41:9e:11:7d:85:8e:dd:47:53:38:dd:
57:25:97:8f:12:b3:e7:ea:83:aa:d7:ba:be:10:da:86:94:b1:
23:45:49:3e:e3:46:67:a4:63:ad:59:60:2e:39:d5:da:40:f1:
29:99:5e:63:25:17:ba:f1:b7:16:c9:57:21:4d:02:25:d4:db:
ad:5f:16:87:77:a9:75:22:7d:e9:2f:ec:05:2e:a5:f7:80:03:
eb:b2:4b:f2:ed:05:30:2f:9e:3d:d1:26:d2:64:dc:67:44:79:
3f:fc:f4:26:52:43:6d:1e:8e:47:fc:c0:e2:0d:70:96:a9:6f:
7d:f4:3d:5b:33:41:1b:5f:2e:01:e5:d2:93:76:f6:ee:f3:95:
11:e2:4b:b8:5c:e5:3d:f9:b1:a2:59:ac:02:69:df:28:9a:19:
6d:a4:2a:7b:11:a3:e2:c7:6d:f7:12:ea:2f:11:fa:60:78:05:
e4:7d:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:33:29 2025 by rpki-client