Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/NeatvtaEhteJCbRamemr4I2w0m0.roa
File: NeatvtaEhteJCbRamemr4I2w0m0.roa (raw, json)
Hash identifier: o//Wl55E+T3+p8z+IgC+GknY+QlIu4w6ZplCXb7DLvY=
Subject key identifier: 35:E6:AD:BE:D6:84:86:D7:89:09:B4:5A:99:E9:AB:E0:8D:B0:D2:6D
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 0197C660331371273614C806F8FBDD395DF5
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/NeatvtaEhteJCbRamemr4I2w0m0.roa
Signing time: Tue 01 Jul 2025 14:24:42 +0000
ROA not before: Tue 01 Jul 2025 14:24:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202196
IP address blocks: 5.57.20.0/23 maxlen: 23
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
37.10.1.0/24 maxlen: 24
37.10.10.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
37.10.24.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.26.0/24 maxlen: 24
37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.29.0/24 maxlen: 24
37.10.30.0/23 maxlen: 23
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.40.0/24 maxlen: 24
37.10.41.0/24 maxlen: 24
37.10.42.0/24 maxlen: 24
37.10.43.0/24 maxlen: 24
37.10.44.0/22 maxlen: 22
37.10.44.0/23 maxlen: 23
37.10.44.0/24 maxlen: 24
37.10.45.0/24 maxlen: 24
37.10.46.0/24 maxlen: 24
91.195.236.0/24 maxlen: 24
2a01:5041::/32 maxlen: 48
2a01:5041::/48 maxlen: 48
2a01:5041:1::/48 maxlen: 48
2a01:5041:2::/48 maxlen: 48
2a01:5041:3::/48 maxlen: 48
2a01:5041:4::/48 maxlen: 48
2a01:5041:6::/48 maxlen: 48
2a01:5041:7::/48 maxlen: 48
2a01:5041:8::/48 maxlen: 48
2a01:5041:b::/48 maxlen: 48
2a01:5041:e::/48 maxlen: 48
2a01:5041:f::/48 maxlen: 48
2a01:5041:efd::/48 maxlen: 48
2a01:5041:efe::/48 maxlen: 48
2a01:5041:eff::/48 maxlen: 48
2a01:5041:1000::/48 maxlen: 48
2a01:5041:1003::/48 maxlen: 48
2a01:5041:1014::/48 maxlen: 48
2a01:5041:2000::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
2a01:5041:2002::/48 maxlen: 48
2a01:5041:2003::/48 maxlen: 48
2a01:5041:2004::/48 maxlen: 48
2a01:5041:2006::/48 maxlen: 48
2a01:5041:2007::/48 maxlen: 48
2a01:5041:2008::/48 maxlen: 48
2a01:5041:200b::/48 maxlen: 48
2a01:5041:200c::/48 maxlen: 48
2a01:5041:200e::/48 maxlen: 48
2a01:5041:200f::/48 maxlen: 48
2a01:5041:2010::/48 maxlen: 48
2a01:5041:2efd::/48 maxlen: 48
2a01:5041:2efe::/48 maxlen: 48
2a01:5041:2eff::/48 maxlen: 48
2a01:5041:3000::/48 maxlen: 48
2a01:5041:3003::/48 maxlen: 48
2a01:5041:3014::/48 maxlen: 48
2a01:5041:4000::/48 maxlen: 48
2a01:5041:4003::/48 maxlen: 48
2a01:5041:4007::/48 maxlen: 48
2a01:5041:400b::/48 maxlen: 48
2a01:5041:400e::/48 maxlen: 48
2a01:5041:4efd::/48 maxlen: 48
2a01:5041:4efe::/48 maxlen: 48
2a01:5041:4eff::/48 maxlen: 48
2a01:5041:5000::/48 maxlen: 48
2a01:5041:5002::/48 maxlen: 48
2a01:5041:5003::/48 maxlen: 48
2a01:5041:500e::/48 maxlen: 48
2a01:5041:6000::/48 maxlen: 48
2a01:5041:6003::/48 maxlen: 48
2a01:5041:6004::/48 maxlen: 48
2a01:5041:6006::/48 maxlen: 48
2a01:5041:6008::/48 maxlen: 48
2a01:5041:600e::/48 maxlen: 48
2a01:5041:7001::/48 maxlen: 48
2a01:5041:ea09::/48 maxlen: 48
2a01:5041:ea14::/48 maxlen: 48
2a01:5041:ea15::/48 maxlen: 48
2a01:5041:ea16::/48 maxlen: 48
2a01:5041:ea20::/48 maxlen: 48
2a01:5042::/48 maxlen: 48
2a01:5042:1::/48 maxlen: 48
2a01:5042:3::/48 maxlen: 48
2a01:5042:7::/48 maxlen: 48
2a01:5042:b::/48 maxlen: 48
2a01:5042:e::/48 maxlen: 48
2a01:5042:efd::/48 maxlen: 48
2a01:5042:eff::/48 maxlen: 48
2a01:5042:2000::/48 maxlen: 48
2a01:5042:2001::/48 maxlen: 48
2a01:5042:2003::/48 maxlen: 48
2a01:5042:2007::/48 maxlen: 48
2a01:5042:200b::/48 maxlen: 48
2a01:5042:200e::/48 maxlen: 48
2a01:5042:2efd::/48 maxlen: 48
2a01:5042:2eff::/48 maxlen: 48
2a01:5043::/48 maxlen: 48
2a01:5043:3::/48 maxlen: 48
2a01:5043:7::/48 maxlen: 48
2a01:5043:b::/48 maxlen: 48
2a01:5043:e::/48 maxlen: 48
2a01:5043:efd::/48 maxlen: 48
2a01:5043:eff::/48 maxlen: 48
2a01:5043:2000::/48 maxlen: 48
2a01:5043:2003::/48 maxlen: 48
2a01:5043:2007::/48 maxlen: 48
2a01:5043:2efd::/48 maxlen: 48
2a01:5043:2eff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:60:33:13:71:27:36:14:c8:06:f8:fb:dd:39:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jul 1 14:24:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e6adbed68486d78909b45a99e9abe08db0d26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:2c:40:74:bd:fa:99:bb:0e:eb:1d:e1:85:
2b:65:46:d6:ab:10:e2:1e:58:8c:46:dc:4d:d9:1b:
45:d5:3c:d2:39:73:4a:60:73:cd:ff:9e:de:cc:17:
92:c6:53:34:60:0f:40:ce:d0:18:d5:da:8e:41:2a:
7b:60:f3:86:39:03:15:c9:fc:1b:95:c4:75:1c:37:
94:3b:3d:fe:68:d8:1b:8b:94:36:2e:25:4f:c8:5f:
90:46:a7:15:19:c8:14:f3:fe:1e:d3:65:45:ca:e1:
6f:51:34:da:ad:7c:1a:46:59:43:c7:77:36:f0:5a:
e5:c3:42:e5:1a:2a:97:81:ec:82:7b:80:34:f6:85:
13:db:03:46:84:b8:46:56:4f:0a:fd:31:4f:58:b3:
cd:59:ea:46:01:38:7b:2d:cc:ad:ea:79:4c:98:41:
60:46:20:81:31:99:3d:06:2d:85:0e:71:c1:9d:b4:
79:3f:90:61:11:5c:af:a5:15:af:3e:ba:ee:25:83:
ec:72:81:f3:fe:01:fd:98:7f:a0:ab:0c:57:46:ca:
08:9d:ad:b7:c1:9e:5d:eb:94:be:38:f4:a3:23:20:
44:1b:ff:63:e3:98:69:a5:e5:68:72:99:9b:82:9f:
91:24:8f:d7:46:d6:bb:5d:c2:74:93:7a:a7:24:20:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:AD:BE:D6:84:86:D7:89:09:B4:5A:99:E9:AB:E0:8D:B0:D2:6D
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/NeatvtaEhteJCbRamemr4I2w0m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.20.0/23
37.10.1.0/24
37.10.10.0/24
37.10.24.0/21
37.10.40.0/21
91.195.236.0/24
IPv6:
2a01:5041::-2a01:5042:1:ffff:ffff:ffff:ffff:ffff
2a01:5042:3::/48
2a01:5042:7::/48
2a01:5042:b::/48
2a01:5042:e::/48
2a01:5042:efd::/48
2a01:5042:eff::/48
2a01:5042:2000::/47
2a01:5042:2003::/48
2a01:5042:2007::/48
2a01:5042:200b::/48
2a01:5042:200e::/48
2a01:5042:2efd::/48
2a01:5042:2eff::/48
2a01:5043::/48
2a01:5043:3::/48
2a01:5043:7::/48
2a01:5043:b::/48
2a01:5043:e::/48
2a01:5043:efd::/48
2a01:5043:eff::/48
2a01:5043:2000::/48
2a01:5043:2003::/48
2a01:5043:2007::/48
2a01:5043:2efd::/48
2a01:5043:2eff::/48
Signature Algorithm: sha256WithRSAEncryption
90:0a:e4:e9:b9:bd:8c:b6:7d:0e:b0:b8:b1:95:fd:61:9f:d6:
78:14:a3:b0:03:64:42:bb:96:5e:34:18:3b:b0:56:06:68:69:
b9:4d:62:96:bc:0f:7b:15:e7:9c:79:77:46:ed:c7:c3:5e:b3:
67:9d:37:bd:09:a5:6c:0b:3f:51:d1:55:a8:8d:5b:94:a1:2b:
a8:ef:48:aa:2e:99:e6:a6:8d:1f:3b:6c:94:45:0f:58:68:db:
d9:1d:67:3b:9c:5b:9e:92:ac:fc:2d:4e:c1:64:b7:45:d4:cf:
87:55:e1:3c:e0:58:c9:29:06:64:65:d3:ef:ee:87:7b:92:15:
f4:f7:27:98:20:73:5a:ec:68:35:33:b5:cf:1a:01:7b:6b:d1:
24:11:a4:c5:57:87:99:8e:78:ed:72:a4:9c:0b:d6:91:d1:ef:
18:7e:09:ff:9f:3e:8e:df:57:70:29:54:dd:46:0b:c4:78:21:
71:2c:b0:a5:74:cb:2a:6c:ed:26:38:9f:38:b1:da:b0:67:8f:
9c:47:02:57:0e:79:a4:13:11:60:bb:38:c6:c6:db:6a:61:78:
fc:6a:91:39:bb:02:c0:6e:91:3c:3b:36:bd:84:3d:ab:60:ab:
3a:0e:e6:1d:23:23:4b:90:5b:79:4a:f5:08:01:e0:64:00:d3:
f6:20:da:04
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgISAZfGYDMTcSc2FMgG+PvdOV31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk
MTk0NGYwHhcNMjUwNzAxMTQyNDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWU2YWRiZWQ2ODQ4NmQ3ODkwOWI0NWE5OWU5YWJlMDhkYjBkMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCssQHS9+pm7Dusd4YUrZUbWqxDi
HliMRtxN2RtF1TzSOXNKYHPN/57ezBeSxlM0YA9AztAY1dqOQSp7YPOGOQMVyfwb
lcR1HDeUOz3+aNgbi5Q2LiVPyF+QRqcVGcgU8/4e02VFyuFvUTTarXwaRllDx3c2
8Frlw0LlGiqXgeyCe4A09oUT2wNGhLhGVk8K/TFPWLPNWepGATh7Lcyt6nlMmEFg
RiCBMZk9Bi2FDnHBnbR5P5BhEVyvpRWvPrruJYPscoHz/gH9mH+gqwxXRsoIna23
wZ5d65S+OPSjIyBEG/9j45hppeVocpmbgp+RJI/XRta7XcJ0k3qnJCCYeQIDAQAB
o4IDKjCCAyYwHQYDVR0OBBYEFDXmrb7WhIbXiQm0Wpnpq+CNsNJtMB8GA1UdIwQY
MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt
NzU4NTVkYjcxNTFmLzEvTmVhdHZ0YUVodGVKQ2JSYW1lbXI0STJ3MG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm
LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPgYIKwYBBQUHAQcBAf8EggEtMIIBKTAqBAIAATAkAwQB
BTkUAwQAJQoBAwQAJQoKAwQDJQoYAwQDJQooAwQAW8PsMIH6BAIAAjCB8zAQAwUA
KgFQQQMHASoBUEIAAAMHACoBUEIAAwMHACoBUEIABwMHACoBUEIACwMHACoBUEIA
DgMHACoBUEIO/QMHACoBUEIO/wMHASoBUEIgAAMHACoBUEIgAwMHACoBUEIgBwMH
ACoBUEIgCwMHACoBUEIgDgMHACoBUEIu/QMHACoBUEIu/wMHACoBUEMAAAMHACoB
UEMAAwMHACoBUEMABwMHACoBUEMACwMHACoBUEMADgMHACoBUEMO/QMHACoBUEMO
/wMHACoBUEMgAAMHACoBUEMgAwMHACoBUEMgBwMHACoBUEMu/QMHACoBUEMu/zAN
BgkqhkiG9w0BAQsFAAOCAQEAkArk6bm9jLZ9DrC4sZX9YZ/WeBSjsANkQruWXjQY
O7BWBmhpuU1ilrwPexXnnHl3Ru3Hw16zZ503vQmlbAs/UdFVqI1blKErqO9Iqi6Z
5qaNHztslEUPWGjb2R1nO5xbnpKs/C1OwWS3RdTPh1XhPOBYySkGZGXT7+6He5IV
9PcnmCBzWuxoNTO1zxoBe2vRJBGkxVeHmY547XKknAvWkdHvGH4J/58+jt9XcClU
3UYLxHghcSywpXTLKmztJjifOLHasGePnEcCVw55pBMRYLs4xsbbamF4/GqRObsC
wG6RPDs2vYQ9q2CrOg7mHSMjS5BbeUr1CAHgZADT9iDaBA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:15 2025 by rpki-client