Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/yj0vTQU2gXkTvwOSheBZrusPUJ0.roa
File: yj0vTQU2gXkTvwOSheBZrusPUJ0.roa (raw, json)
Hash identifier: yBm8J3hQrTg0MxUYU+h1UFM5TRjdyuHlQEjlfEmLVs0=
Subject key identifier: CA:3D:2F:4D:05:36:81:79:13:BF:03:92:85:E0:59:AE:EB:0F:50:9D
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0197F6EB443BBECB38C840A80D0329DB8CED
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/yj0vTQU2gXkTvwOSheBZrusPUJ0.roa
Signing time: Fri 11 Jul 2025 00:38:22 +0000
ROA not before: Fri 11 Jul 2025 00:38:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:1c5a::/48 maxlen: 48
2a06:98c0:1c5b::/48 maxlen: 48
2a06:98c0:1c5c::/48 maxlen: 48
2a06:98c0:1c5d::/48 maxlen: 48
2a06:98c0:1c5e::/48 maxlen: 48
2a06:98c0:1c5f::/48 maxlen: 48
2a06:98c0:1c60::/48 maxlen: 48
2a06:98c0:1c61::/48 maxlen: 48
2a06:98c0:1c62::/48 maxlen: 48
2a06:98c0:1c63::/48 maxlen: 48
2a06:98c0:1c64::/48 maxlen: 48
2a06:98c0:1c65::/48 maxlen: 48
2a06:98c0:1c66::/48 maxlen: 48
2a06:98c0:1c67::/48 maxlen: 48
2a06:98c0:1c68::/48 maxlen: 48
2a06:98c0:1c69::/48 maxlen: 48
2a06:98c0:1c6a::/48 maxlen: 48
2a06:98c0:1c6b::/48 maxlen: 48
2a06:98c0:1c6c::/48 maxlen: 48
2a06:98c0:1c6d::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:4a::/48 maxlen: 48
2a06:98c1:4b::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:57::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:59::/48 maxlen: 48
2a06:98c1:5b::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f6:eb:44:3b:be:cb:38:c8:40:a8:0d:03:29:db:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jul 11 00:38:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca3d2f4d0536817913bf039285e059aeeb0f509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:78:30:25:2f:ac:7b:25:e3:b7:c1:92:4b:
8b:44:2b:43:f9:b9:14:f9:a5:7d:af:58:32:41:88:
37:19:f0:f8:97:d6:22:19:e3:75:9c:56:e0:67:c9:
ba:42:98:fa:27:32:60:9e:07:58:25:87:c7:56:ee:
20:a8:80:ae:da:40:60:89:3d:2a:bc:1b:21:17:7d:
f1:22:93:32:f5:a6:9c:be:a9:5d:c9:cc:a1:6c:0e:
5f:35:0c:cf:e1:ff:e3:79:6a:3c:e1:dd:34:e5:97:
9c:af:53:74:c3:a5:e8:65:55:55:a0:dc:57:44:14:
5d:ea:30:ee:2c:f4:d0:28:c9:ad:82:77:bf:33:7b:
14:b0:74:1c:e2:6c:19:d1:39:f3:fa:42:dd:55:16:
92:61:a9:f4:66:ad:22:68:02:77:41:59:3b:66:8c:
be:7c:e5:88:31:48:55:6b:29:7b:b0:bb:dd:6d:2d:
54:dc:61:cb:ab:c2:bb:9f:66:09:f2:cd:e5:32:a3:
21:9f:46:f5:d0:9d:7c:7b:c7:a0:e2:94:d1:fe:14:
ac:d7:b4:33:f8:56:e9:0d:c1:62:9f:07:4f:bf:49:
34:46:25:c9:11:73:d9:25:db:a0:42:d5:13:e6:65:
bb:2a:b4:14:67:ca:8d:a8:42:50:9e:40:92:11:5d:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:2F:4D:05:36:81:79:13:BF:03:92:85:E0:59:AE:EB:0F:50:9D
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/yj0vTQU2gXkTvwOSheBZrusPUJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c58:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c5a::-2a06:98c0:1c6d:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/46
2a06:98c1:50::-2a06:98c1:59:ffff:ffff:ffff:ffff:ffff
2a06:98c1:5b::/48
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
03:24:e8:2b:48:49:6d:8a:4b:50:fb:45:c4:84:a1:6b:cb:59:
0b:83:ff:b9:25:61:50:dd:fa:74:6f:4b:0f:27:e7:aa:b8:ac:
d8:2a:8e:fc:89:78:dd:79:af:8c:92:53:58:92:4a:8a:71:f4:
d3:37:39:30:6e:5b:95:02:b9:88:a2:64:62:3f:2c:de:cd:61:
44:28:84:c9:5b:2b:66:71:a8:42:0a:99:66:65:23:84:c4:41:
f5:26:c7:69:af:f3:3f:ab:36:c5:9b:91:e1:ab:80:00:e3:d8:
07:06:f9:ef:f1:22:f5:f6:ed:d3:19:a9:83:be:15:06:17:26:
82:bf:c9:98:2c:d3:33:97:90:67:2c:c0:db:8c:1e:8a:e2:88:
47:3d:6a:ea:2b:98:26:20:9b:7e:0e:10:dc:bc:e9:67:5d:d2:
3b:27:ea:41:b2:ea:19:97:19:ad:da:ac:eb:e0:6e:b7:42:15:
78:b0:ce:e3:5a:8a:1e:06:c9:82:e7:9b:ff:88:7f:b8:74:1d:
c7:68:2f:63:4b:fe:7a:d2:18:97:21:6a:44:2f:92:02:fb:14:
9b:ad:68:36:44:6a:a7:69:ce:cd:e9:76:84:f7:95:ad:40:c9:
5a:5b:78:c2:b9:28:57:cb:29:f6:cd:3f:da:9d:74:08:bf:2a:
95:7d:d4:bb
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAZf260Q7vss4yECoDQMp24ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjUwNzExMDAzODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNkMmY0ZDA1MzY4MTc5MTNiZjAzOTI4NWUwNTlhZWViMGY1MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Z4MCUvrHsl47fBkkuLRCtD+bkU
+aV9r1gyQYg3GfD4l9YiGeN1nFbgZ8m6Qpj6JzJgngdYJYfHVu4gqICu2kBgiT0q
vBshF33xIpMy9aacvqldycyhbA5fNQzP4f/jeWo84d005Zecr1N0w6XoZVVVoNxX
RBRd6jDuLPTQKMmtgne/M3sUsHQc4mwZ0Tnz+kLdVRaSYan0Zq0iaAJ3QVk7Zoy+
fOWIMUhVayl7sLvdbS1U3GHLq8K7n2YJ8s3lMqMhn0b10J18e8eg4pTR/hSs17Qz
+FbpDcFinwdPv0k0RiXJEXPZJdugQtUT5mW7KrQUZ8qNqEJQnkCSEV1efQIDAQAB
o4IDDTCCAwkwHQYDVR0OBBYEFMo9L00FNoF5E78DkoXgWa7rD1CdMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEveWowdlRRVTJnWGtUdndPU2hlQlpydXNQVUowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDA+BAIAATA4MAwD
BAaNZUADBAGNZUwwDAMEAY1lUgMEB41lADAMAwQFvHJgAwQAvHJoMAwDBAG8cmoD
BAS8cmAwgckEAgACMIHCMBIDBwAqBpjAHAEDBwAqBpjAHAowEgMHAioGmMAcDAMH
ACoGmMAcEDASAwcFKgaYwBwgAwcBKgaYwBxIMBIDBwAqBpjAHEsDBwAqBpjAHFgw
EgMHASoGmMAcWgMHASoGmMAcbDASAwcAKgaYwDYZAwcAKgaYwDYaAwcCKgaYwQBA
AwcCKgaYwQBIMBIDBwQqBpjBAFADBwEqBpjBAFgDBwAqBpjBAFsDBwQqBpjBMQAD
BwIqBpjBMSADBwAqBpjBMgAwDQYJKoZIhvcNAQELBQADggEBAAMk6CtISW2KS1D7
RcSEoWvLWQuD/7klYVDd+nRvSw8n56q4rNgqjvyJeN15r4ySU1iSSopx9NM3OTBu
W5UCuYiiZGI/LN7NYUQohMlbK2ZxqEIKmWZlI4TEQfUmx2mv8z+rNsWbkeGrgADj
2AcG+e/xIvX27dMZqYO+FQYXJoK/yZgs0zOXkGcswNuMHoriiEc9auormCYgm34O
ENy86Wdd0jsn6kGy6hmXGa3arOvgbrdCFXiwzuNaih4GyYLnm/+If7h0HcdoL2NL
/nrSGJchakQvkgL7FJutaDZEaqdpzs3pdoT3la1AyVpbeMK5KFfLKfbNP9qddAi/
KpV91Ls=
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:18 2025 by rpki-client