Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/lxKGHo-WlJ_TUWUO1hJi5BieeoA.roa
File: lxKGHo-WlJ_TUWUO1hJi5BieeoA.roa (raw, json)
Hash identifier: lNpML036Qr1H9qQzc/sP637t+B2qAZusx8QwFjZq01c=
Subject key identifier: 97:12:86:1E:8F:96:94:9F:D3:51:65:0E:D6:12:62:E4:18:9E:7A:80
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 0197BFBDE5D93DAA411552AE6FD6BC88F247
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/lxKGHo-WlJ_TUWUO1hJi5BieeoA.roa
Signing time: Mon 30 Jun 2025 07:29:42 +0000
ROA not before: Mon 30 Jun 2025 07:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.30.0/23 maxlen: 23
109.172.78.0/23 maxlen: 23
109.172.100.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
109.172.116.0/23 maxlen: 23
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
2a01:230:6::/48 maxlen: 48
2a01:230:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:bd:e5:d9:3d:aa:41:15:52:ae:6f:d6:bc:88:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jun 30 07:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9712861e8f96949fd351650ed61262e4189e7a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:f8:38:0b:11:21:fb:ee:5a:22:4f:36:a3:
58:6f:a6:e3:dc:d9:9a:40:c6:f4:c8:32:3c:64:6c:
73:db:31:c7:c3:60:eb:40:d8:28:29:e6:7b:df:69:
a0:c1:19:19:61:fa:21:13:98:64:92:0a:01:23:f8:
e7:ca:8e:e8:1a:00:b7:30:a9:33:e8:05:c6:06:cc:
16:db:5c:c1:89:9c:74:d7:f8:10:74:8c:2a:33:16:
82:2c:39:41:c3:f7:70:ab:86:9c:e7:f6:ef:13:7b:
1e:0c:c1:a2:c6:7a:01:23:95:f0:60:32:32:d8:30:
8d:19:0c:bc:51:a4:62:c4:51:12:81:ab:a0:32:6b:
32:c4:99:0f:0e:75:70:0d:a9:05:e1:88:12:5f:74:
5d:10:16:79:88:8f:39:f9:c7:13:d0:cd:b7:d6:19:
90:8a:df:45:42:da:98:28:7b:7b:52:54:2a:80:b8:
2a:fb:f4:98:71:12:b9:3f:cc:d5:39:27:09:b3:bf:
9d:fa:f1:66:16:96:a2:d1:5e:c8:e2:d2:23:04:c0:
0b:bc:fb:45:30:26:f4:15:22:96:7f:a6:72:53:2b:
28:6a:20:17:36:0a:8a:a1:4b:88:39:1d:9b:dc:9f:
50:07:7a:0b:b2:81:b9:1c:73:4c:f5:cf:f4:df:27:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:86:1E:8F:96:94:9F:D3:51:65:0E:D6:12:62:E4:18:9E:7A:80
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/lxKGHo-WlJ_TUWUO1hJi5BieeoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.30.0/23
109.172.78.0/23
109.172.100.0/23
109.172.108.0-109.172.117.255
149.154.64.0/21
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0-188.120.251.255
188.120.253.0-188.120.255.255
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230:1::-2a01:230:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:22:dd:85:e9:09:d5:5b:4b:7e:98:d6:cd:e2:96:b1:d8:d2:
6f:4f:80:3d:8a:84:66:ad:5d:b4:d0:0d:07:54:25:aa:e0:50:
dc:07:26:5d:a0:ea:32:5d:50:32:6c:7f:ff:72:6f:e0:52:a1:
ab:21:17:d0:1a:58:f4:b3:24:4d:35:bf:e6:a8:cc:56:c0:00:
b4:7b:7c:a7:8b:cc:03:38:39:3c:f9:15:a5:d3:40:93:52:28:
fa:20:e9:35:9a:ba:92:4b:91:b1:65:0b:83:db:f1:b8:84:4a:
ed:ea:a1:eb:8f:09:1b:d2:35:ca:11:f2:06:68:4d:fa:a6:a1:
0d:50:ee:e4:c2:ac:46:6f:38:b2:7b:e0:c4:cc:8f:df:fd:a7:
ff:97:fc:b1:a2:ea:7f:79:e5:b7:4a:a1:7f:b7:76:ee:55:92:
b7:61:a2:b7:d5:c7:58:3c:2e:0e:87:06:37:10:c3:7a:24:a4:
f0:b6:97:4c:2c:12:88:c7:c0:7c:a6:ba:c6:d9:02:69:ee:93:
01:7d:a2:3f:8e:95:84:9d:16:6b:7c:f0:d2:6c:35:7f:7c:6b:
52:4c:48:0c:5b:3a:15:4d:b6:e6:f5:20:da:9e:53:22:3b:14:
99:4a:92:dd:b6:ed:01:19:41:7c:10:ad:30:16:d7:fa:4b:8b:
8d:a3:91:ae
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgISAZe/veXZPapBFVKub9a8iPJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjUwNjMwMDcyOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzEyODYxZThmOTY5NDlmZDM1MTY1MGVkNjEyNjJlNDE4OWU3YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobn4OAsRIfvuWiJPNqNYb6bj3Nma
QMb0yDI8ZGxz2zHHw2DrQNgoKeZ732mgwRkZYfohE5hkkgoBI/jnyo7oGgC3MKkz
6AXGBswW21zBiZx01/gQdIwqMxaCLDlBw/dwq4ac5/bvE3seDMGixnoBI5XwYDIy
2DCNGQy8UaRixFESgaugMmsyxJkPDnVwDakF4YgSX3RdEBZ5iI85+ccT0M231hmQ
it9FQtqYKHt7UlQqgLgq+/SYcRK5P8zVOScJs7+d+vFmFpai0V7I4tIjBMALvPtF
MCb0FSKWf6ZyUysoaiAXNgqKoUuIOR2b3J9QB3oLsoG5HHNM9c/03ye5cwIDAQAB
o4IDLjCCAyowHQYDVR0OBBYEFJcShh6PlpSf01FlDtYSYuQYnnqAMB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvbHhLR0hvLVdsSl9UVVdVTzFoSmk1QmllZW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQgYIKwYBBQUHAQcBAf8EggExMIIBLTCCAQ0EAgABMIIB
BQMEAgUjYAMEAx+HCAMEAyXmcAMEAD61LDAMAwQAPrU1AwQDPrUwAwQDThjYAwQB
T49IAwQCT64MAwQBU4joAwQAU4jrAwQAVm7CAwQBVm7QAwQAVm7UAwQAVm7XAwQA
Vm7cAwQCWakcAwQDW2t4AwQBW+TgAwQCXD/AAwQDXvr4AwQCbawEAwQBbaweAwQB
baxOAwQBbaxkMAwDBAJtrGwDBAFtrHQDBAOVmkADBAOwe6gDBAKy+pwDBAK5PIQD
BAC5u3MwDAMEBbx44AMEArx4+DALAwQAvHj9AwMAvHgwDAMEANQ5cwMEANQ5dAME
ANQ5dgMEANQ5egMEAtQ5fAMEAtkc3DAaBAIAAjAUMBIDBwAqAQIwAAEDBwMqAQIw
AAAwDQYJKoZIhvcNAQELBQADggEBAIci3YXpCdVbS36Y1s3ilrHY0m9PgD2KhGat
XbTQDQdUJargUNwHJl2g6jJdUDJsf/9yb+BSoashF9AaWPSzJE01v+aozFbAALR7
fKeLzAM4OTz5FaXTQJNSKPog6TWaupJLkbFlC4Pb8biESu3qoeuPCRvSNcoR8gZo
TfqmoQ1Q7uTCrEZvOLJ74MTMj9/9p/+X/LGi6n955bdKoX+3du5VkrdhorfVx1g8
Lg6HBjcQw3okpPC2l0wsEojHwHymusbZAmnukwF9oj+OlYSdFmt88NJsNX98a1JM
SAxbOhVNtub1INqeUyI7FJlKkt227QEZQXwQrTAW1/pLi42jka4=
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:53 2025 by rpki-client