
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/sc_n_VU-n2SVljxSSLfYKip6owA.roa
File: sc_n_VU-n2SVljxSSLfYKip6owA.roa (raw, json)
Hash identifier: Y8b2/uZScC6zfzguMSIf5+YwDVqSXzld7hHLb2CjR84=
Subject key identifier: B1:CF:E7:FD:55:3E:9F:64:95:96:3C:52:48:B7:D8:2A:2A:7A:A3:00
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0197E95320D38B81662C31A557654103F863
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/sc_n_VU-n2SVljxSSLfYKip6owA.roa
Signing time: Tue 08 Jul 2025 09:17:08 +0000
ROA not before: Tue 08 Jul 2025 09:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.61.60.0/23 maxlen: 23
5.61.62.0/23 maxlen: 23
45.136.196.0/24 maxlen: 24
45.136.197.0/24 maxlen: 24
45.136.198.0/24 maxlen: 24
45.136.199.0/24 maxlen: 24
92.63.226.0/24 maxlen: 24
114.129.8.0/24 maxlen: 24
176.97.64.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.70.0/23 maxlen: 23
176.97.72.0/24 maxlen: 24
176.97.73.0/24 maxlen: 24
176.97.75.0/24 maxlen: 24
176.97.76.0/24 maxlen: 24
176.97.77.0/24 maxlen: 24
176.97.78.0/24 maxlen: 24
185.87.148.0/23 maxlen: 23
185.87.150.0/23 maxlen: 23
185.132.125.0/24 maxlen: 24
188.116.22.0/24 maxlen: 24
195.54.170.0/24 maxlen: 24
195.54.171.0/24 maxlen: 24
2a02:c6c1:4::/48 maxlen: 48
2a02:c6c1:5::/48 maxlen: 48
2a02:c6c1:6::/48 maxlen: 48
2a02:c6c1:7::/48 maxlen: 48
2a02:c6c1:8::/48 maxlen: 48
2a02:c6c1:9::/48 maxlen: 48
2a02:c6c1:a::/48 maxlen: 48
2a02:c6c1:b::/48 maxlen: 48
2a02:c6c1:143::/48 maxlen: 48
2a0c:6742::/48 maxlen: 48
2a0e:a7c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:53:20:d3:8b:81:66:2c:31:a5:57:65:41:03:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 8 09:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1cfe7fd553e9f6495963c5248b7d82a2a7aa300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:52:23:f1:86:74:9d:44:80:6a:a8:7f:90:
7f:63:4c:98:5d:d9:6e:3b:f0:d5:62:93:bb:a8:f7:
05:99:58:7c:dc:ea:1a:c2:a6:02:d2:3c:c9:0f:54:
86:4d:3b:6b:30:27:4f:2e:ce:20:f2:46:bc:fe:57:
d0:34:6f:2a:fd:e7:b1:c4:17:59:24:0c:57:c2:c1:
2d:f3:1a:93:00:78:84:9d:7f:12:f0:b9:06:c6:4c:
74:84:b4:cd:31:bc:a6:af:2b:5a:23:68:a5:f9:af:
7b:61:05:ee:66:00:44:3a:5b:e2:ce:2d:15:62:99:
31:82:17:b4:da:f8:7c:e5:a7:f8:50:93:5a:1e:91:
a3:78:82:90:0d:11:b0:bf:b0:a5:a7:dd:56:3f:6b:
f8:a3:cc:2f:8a:3a:66:94:44:7f:e7:9f:fd:3e:9a:
63:62:ba:4d:ca:9b:86:4a:05:a9:64:ff:24:0c:b0:
c8:b1:28:0b:85:cb:f3:b3:72:a6:8b:4f:a1:77:ef:
98:dc:e6:8e:41:46:15:b3:08:21:45:6f:25:d1:44:
e6:f7:bd:fe:fc:2a:a7:b8:47:ba:b6:b4:21:a0:d5:
d7:78:55:03:2c:62:41:32:2c:f6:0b:af:90:54:b7:
71:94:67:6d:6c:47:ba:e1:a3:57:d9:fa:19:c4:3f:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:E7:FD:55:3E:9F:64:95:96:3C:52:48:B7:D8:2A:2A:7A:A3:00
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/sc_n_VU-n2SVljxSSLfYKip6owA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
45.136.196.0/22
92.63.226.0/24
114.129.8.0/24
176.97.64.0-176.97.73.255
176.97.75.0-176.97.78.255
185.87.148.0/22
185.132.125.0/24
188.116.22.0/24
195.54.170.0/23
IPv6:
2a02:c6c1:4::-2a02:c6c1:b:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:143::/48
2a0c:6742::/48
2a0e:a7c1::/48
Signature Algorithm: sha256WithRSAEncryption
3b:72:09:4f:3d:82:77:f5:c2:32:cd:ee:f7:41:71:3a:39:49:
15:9f:02:63:ca:c6:e7:62:4c:e9:d6:aa:22:10:a0:37:f2:b9:
4b:6a:6f:14:e0:49:09:3f:2d:f3:da:cc:05:f1:af:d4:35:6c:
d0:1e:ae:0b:40:04:ca:18:45:a8:fe:0c:08:94:03:95:3f:9f:
05:c5:ad:51:6b:cd:60:e8:7b:77:d2:8a:e9:7d:8e:d1:75:73:
c6:42:35:c5:3b:91:28:20:06:fd:09:7e:0f:3d:2e:40:f7:30:
62:82:61:0c:f2:3a:3c:92:a0:a8:e1:c7:ad:88:91:0b:29:6d:
3f:48:bb:a3:d9:b6:83:ab:c6:bf:a3:07:bd:5d:f3:c7:db:db:
6b:31:c7:71:b8:9e:50:82:ef:af:1d:11:03:60:a3:9a:4f:61:
6f:57:2e:e0:8e:44:ed:74:8b:8f:e7:cb:b0:a7:1f:31:e6:2a:
08:1d:14:42:0c:51:91:fc:b2:2c:e7:a9:4a:c5:ae:dc:b0:e2:
9f:99:37:cb:11:e6:34:c1:3a:4d:2b:96:db:c6:4d:65:b9:12:
e6:a5:80:e9:5f:14:57:d9:61:71:5c:f5:f6:2c:3a:1c:85:b3:
f8:34:80:1a:ed:ac:f8:75:83:ad:57:cb:71:fc:75:51:e4:ff:
6d:48:03:50
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAZfpUyDTi4FmLDGlV2VBA/hjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjUwNzA4MDkxNzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWNmZTdmZDU1M2U5ZjY0OTU5NjNjNTI0OGI3ZDgyYTJhN2FhMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUxSI/GGdJ1EgGqof5B/Y0yYXdlu
O/DVYpO7qPcFmVh83OoawqYC0jzJD1SGTTtrMCdPLs4g8ka8/lfQNG8q/eexxBdZ
JAxXwsEt8xqTAHiEnX8S8LkGxkx0hLTNMbymrytaI2il+a97YQXuZgBEOlvizi0V
Ypkxghe02vh85af4UJNaHpGjeIKQDRGwv7Clp91WP2v4o8wvijpmlER/55/9Pppj
YrpNypuGSgWpZP8kDLDIsSgLhcvzs3Kmi0+hd++Y3OaOQUYVswghRW8l0UTm973+
/CqnuEe6trQhoNXXeFUDLGJBMiz2C6+QVLdxlGdtbEe64aNX2foZxD9jFQIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFLHP5/1VPp9klZY8Uki32CoqeqMAMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvc2Nfbl9WVS1uMlNWbGp4U1NMZllLaXA2b3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBSBAIAATBMAwQCBT08
AwQCLYjEAwQAXD/iAwQAcoEIMAwDBAawYUADBAGwYUgwDAMEALBhSwMEALBhTgME
ArlXlAMEALmEfQMEALx0FgMEAcM2qjA1BAIAAjAvMBIDBwIqAsbBAAQDBwIqAsbB
AAgDBwAqAsbBAUMDBwAqDGdCAAADBwAqDqfBAAAwDQYJKoZIhvcNAQELBQADggEB
ADtyCU89gnf1wjLN7vdBcTo5SRWfAmPKxudiTOnWqiIQoDfyuUtqbxTgSQk/LfPa
zAXxr9Q1bNAergtABMoYRaj+DAiUA5U/nwXFrVFrzWDoe3fSiul9jtF1c8ZCNcU7
kSggBv0Jfg89LkD3MGKCYQzyOjySoKjhx62IkQspbT9Iu6PZtoOrxr+jB71d88fb
22sxx3G4nlCC768dEQNgo5pPYW9XLuCORO10i4/ny7CnHzHmKggdFEIMUZH8sizn
qUrFrtyw4p+ZN8sR5jTBOk0rltvGTWW5EualgOlfFFfZYXFc9fYsOhyFs/g0gBrt
rPh1g61Xy3H8dVHk/21IA1A=
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:12:14 2025 by rpki-client