Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/it6eyv1PXsnwOYZ5tToSQoWvdAg.roa
File: it6eyv1PXsnwOYZ5tToSQoWvdAg.roa (raw, json)
Hash identifier: N0molOw5CWe+DWTGkd/A+hFtz4Us3dLpNC7Vsa2boYc=
Subject key identifier: 8A:DE:9E:CA:FD:4F:5E:C9:F0:39:86:79:B5:3A:12:42:85:AF:74:08
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019817234B8DC53A0572284E48CA9C2F5619
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/it6eyv1PXsnwOYZ5tToSQoWvdAg.roa
Signing time: Thu 17 Jul 2025 06:47:25 +0000
ROA not before: Thu 17 Jul 2025 06:47:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49121
IP address blocks: 5.57.209.0/24 maxlen: 24
5.180.102.0/24 maxlen: 24
5.180.103.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
37.221.71.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
185.186.1.0/24 maxlen: 24
185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 24
194.61.10.0/24 maxlen: 24
194.61.11.0/24 maxlen: 24
194.147.74.0/23 maxlen: 23
194.147.74.0/24 maxlen: 24
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
2a09:e206:c1::/48 maxlen: 48
2a09:e207:810::/48 maxlen: 48
2a09:e207:820::/48 maxlen: 48
2a09:e207:830::/48 maxlen: 48
2a09:e207:860::/48 maxlen: 48
2a09:e207:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:23:4b:8d:c5:3a:05:72:28:4e:48:ca:9c:2f:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jul 17 06:47:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ade9ecafd4f5ec9f0398679b53a124285af7408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:ae:40:dd:a5:10:c5:25:ed:0a:83:df:fe:
ca:20:a0:bd:c1:90:6d:14:e8:31:6d:a8:9a:88:89:
c4:41:a9:16:05:c2:6d:76:3f:57:7d:29:cb:95:11:
6f:a8:a2:3f:df:6d:2e:7f:69:bb:6c:0a:8d:ad:e8:
7d:99:4f:44:96:d7:e3:65:db:16:fc:bb:12:c5:37:
0f:d7:7a:bf:2b:bf:66:51:46:03:d7:cb:bb:4f:36:
79:cc:5a:f3:54:0a:a5:2a:b7:bd:a1:37:9f:2d:68:
04:8d:14:75:c5:00:19:8a:f6:e5:56:1a:67:a5:31:
dd:97:26:e2:22:51:29:62:fc:7f:80:07:2b:af:d7:
02:69:b3:fc:91:63:9a:23:5f:83:df:cd:01:e0:3f:
3d:f8:6a:a9:e9:4d:68:3c:a5:70:1e:df:c5:31:81:
b5:ac:55:56:39:83:48:8f:42:a8:04:1d:8c:b7:a8:
35:1b:20:ec:cf:70:8a:d4:86:f2:76:00:71:ad:6c:
57:6c:45:68:fa:25:cb:c5:60:10:0d:b3:89:0a:2f:
58:0f:8a:c5:fb:72:c4:1e:2d:38:87:e8:b5:a2:f0:
ce:41:9b:45:55:9a:bf:a9:8b:dc:3e:f1:b3:9e:21:
2e:85:0b:db:88:ac:39:28:75:2f:bc:fa:df:84:c8:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:9E:CA:FD:4F:5E:C9:F0:39:86:79:B5:3A:12:42:85:AF:74:08
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/it6eyv1PXsnwOYZ5tToSQoWvdAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
5.180.102.0/23
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/23
185.232.166.0/24
194.61.10.0/23
194.147.74.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
2a09:e206:c1::/48
2a09:e207:810::/48
2a09:e207:820::/48
2a09:e207:830::/48
2a09:e207:860::/48
2a09:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
7d:aa:45:ea:3a:47:be:a9:9d:fe:b4:98:89:1e:fa:1a:b2:a2:
f5:4c:53:1f:4d:e8:ad:2c:41:e2:52:e9:40:d8:82:44:71:5e:
ed:06:5d:01:9f:66:98:c4:26:62:a5:0d:f7:0a:f4:c0:5e:1a:
bc:52:b1:c1:27:49:cc:8e:2b:b3:65:bc:1d:3e:79:a4:b6:32:
e4:c0:da:4a:a0:e9:2e:40:c8:05:1f:2c:67:db:9e:13:d2:09:
c8:c8:45:b6:c0:07:7d:23:b3:0c:f8:3b:cd:19:49:21:db:a8:
1e:dc:75:e0:a2:14:b5:ce:b6:42:f4:24:ac:88:d1:83:57:78:
ec:af:fa:37:9c:df:e7:26:77:d6:14:b3:9b:9b:2b:70:3d:5f:
cf:d5:a1:e6:88:b5:b8:a6:8c:a8:a8:be:d2:bd:a9:da:90:2f:
69:1f:86:82:ac:26:68:28:63:fc:40:be:de:bf:05:4c:89:db:
02:83:4e:ab:75:8e:a6:59:d6:7f:d2:a4:fa:11:cf:68:0a:49:
a5:1d:e8:91:9f:20:a4:8b:8e:ce:09:94:29:36:c4:e1:51:b7:
5c:04:ba:af:90:48:4a:cb:c6:7c:26:bc:3b:78:7b:09:ca:bd:
34:5b:95:72:ed:38:5e:6f:82:da:bb:77:b7:63:0c:0e:58:1a:
8d:1c:1f:38
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZgXI0uNxToFcihOSMqcL1YZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjUwNzE3MDY0NzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWRlOWVjYWZkNGY1ZWM5ZjAzOTg2NzliNTNhMTI0Mjg1YWY3NDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmceuQN2lEMUl7QqD3/7KIKC9wZBt
FOgxbaiaiInEQakWBcJtdj9XfSnLlRFvqKI/320uf2m7bAqNreh9mU9EltfjZdsW
/LsSxTcP13q/K79mUUYD18u7TzZ5zFrzVAqlKre9oTefLWgEjRR1xQAZivblVhpn
pTHdlybiIlEpYvx/gAcrr9cCabP8kWOaI1+D380B4D89+Gqp6U1oPKVwHt/FMYG1
rFVWOYNIj0KoBB2Mt6g1GyDsz3CK1IbydgBxrWxXbEVo+iXLxWAQDbOJCi9YD4rF
+3LEHi04h+i1ovDOQZtFVZq/qYvcPvGzniEuhQvbiKw5KHUvvPrfhMgxywIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFIrensr9T17J8DmGebU6EkKFr3QIMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvaXQ2ZXl2MVBYc253T1laNXRUb1NRb1d2ZEFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDA+BAIAATA4AwQABTnR
AwQBBbRmAwQCJd1EMAwDBAAtV3UDBAMtV3ADBAG5ugADBAC56KYDBAHCPQoDBAHC
k0owTgQCAAIwSAMHACoJ4gAAAAMHACoJ4gDiAAMHACoJ4gYAwQMHACoJ4gcIEAMH
ACoJ4gcIIAMHACoJ4gcIMAMHACoJ4gcIYAMHACoJ4gf//zANBgkqhkiG9w0BAQsF
AAOCAQEAfapF6jpHvqmd/rSYiR76GrKi9UxTH03orSxB4lLpQNiCRHFe7QZdAZ9m
mMQmYqUN9wr0wF4avFKxwSdJzI4rs2W8HT55pLYy5MDaSqDpLkDIBR8sZ9ueE9IJ
yMhFtsAHfSOzDPg7zRlJIduoHtx14KIUtc62QvQkrIjRg1d47K/6N5zf5yZ31hSz
m5srcD1fz9Wh5oi1uKaMqKi+0r2p2pAvaR+GgqwmaChj/EC+3r8FTInbAoNOq3WO
plnWf9Kk+hHPaApJpR3okZ8gpIuOzgmUKTbE4VG3XAS6r5BISsvGfCa8O3h7Ccq9
NFuVcu04Xm+C2rt3t2MMDlgajRwfOA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:35 2025 by rpki-client