Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/JGoXGLxShMj91G3IIS5p3Cqu5ds.roa
File: JGoXGLxShMj91G3IIS5p3Cqu5ds.roa (raw, json)
Hash identifier: WHOL3L9DGKZv7ndcP/i4u90qnXdTyJig9mJoOYk5Obw=
Subject key identifier: 24:6A:17:18:BC:52:84:C8:FD:D4:6D:C8:21:2E:69:DC:2A:AE:E5:DB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0198389F0FC82D9E9EF93CA04CE90BBFFE37
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/JGoXGLxShMj91G3IIS5p3Cqu5ds.roa
Signing time: Wed 23 Jul 2025 18:50:05 +0000
ROA not before: Wed 23 Jul 2025 18:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 2.56.117.0/24 maxlen: 24
2.56.118.0/24 maxlen: 24
2.56.119.0/24 maxlen: 24
2.56.120.0/21 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/24 maxlen: 24
2.56.177.0/24 maxlen: 24
2.56.179.0/24 maxlen: 24
45.9.17.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.129.0/24 maxlen: 24
45.12.130.0/24 maxlen: 24
45.12.131.0/24 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.140.0/22 maxlen: 24
45.15.145.0/24 maxlen: 24
45.15.146.0/24 maxlen: 24
45.15.154.0/24 maxlen: 24
45.15.155.0/24 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
45.15.178.0/24 maxlen: 24
45.15.179.0/24 maxlen: 24
45.15.184.0/22 maxlen: 24
45.15.184.0/24 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/24 maxlen: 24
45.82.247.0/24 maxlen: 24
45.82.248.0/21 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.26.0/24 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.148.0/24 maxlen: 24
45.83.149.0/24 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/24 maxlen: 24
45.89.107.0/24 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/24 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/24 maxlen: 24
45.92.193.0/24 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.48.0/22 maxlen: 24
45.128.52.0/24 maxlen: 24
45.128.54.0/24 maxlen: 24
45.128.57.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.72.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.230.0/24 maxlen: 24
92.118.231.0/24 maxlen: 24
92.118.232.0/24 maxlen: 24
92.118.233.0/24 maxlen: 24
92.118.234.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/24 maxlen: 24
141.98.161.0/24 maxlen: 24
141.98.162.0/24 maxlen: 24
141.98.163.0/24 maxlen: 24
141.98.164.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
171.22.110.0/24 maxlen: 24
171.22.111.0/24 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.116.0/23 maxlen: 24
171.22.118.0/24 maxlen: 24
171.22.120.0/24 maxlen: 24
171.22.122.0/24 maxlen: 24
171.22.123.0/24 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.129.0/24 maxlen: 24
171.22.130.0/24 maxlen: 24
171.22.131.0/24 maxlen: 24
171.22.132.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/24 maxlen: 24
185.166.152.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
213.59.112.0/24 maxlen: 24
213.59.119.0/24 maxlen: 24
213.59.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:9f:0f:c8:2d:9e:9e:f9:3c:a0:4c:e9:0b:bf:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 23 18:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=246a1718bc5284c8fdd46dc8212e69dc2aaee5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:64:d6:99:e7:a8:1d:4f:ca:b9:d8:18:7f:
af:8e:c9:9e:7b:51:29:b7:44:85:3a:db:c0:9d:7b:
ee:49:c5:f6:8b:a4:eb:01:25:00:52:63:52:cf:97:
fa:ec:9d:68:73:d8:37:14:b2:f2:50:9b:4f:78:fb:
57:59:63:f0:4c:d9:f3:77:3e:97:f4:8f:d6:d7:7c:
c7:64:64:0b:6e:be:df:9a:be:c1:19:af:bd:67:80:
05:2c:e6:1a:46:2d:c4:ac:6f:69:58:7d:7f:b6:32:
12:64:81:24:16:a8:06:1a:e6:04:a7:36:b3:94:a8:
15:27:f0:47:8e:83:09:de:19:9f:22:73:9a:ee:e9:
97:27:82:ca:80:e2:53:b0:c0:d3:bc:9b:4c:f4:36:
c6:40:d0:76:20:62:69:e8:59:5a:9b:16:6a:62:bf:
37:02:1d:e2:9c:b1:23:e3:65:be:a4:8a:5e:a1:16:
0b:cd:3f:6f:4c:ba:92:2d:9e:df:a3:44:e2:30:b7:
22:7d:b2:67:39:d4:b1:20:aa:18:73:43:76:25:ca:
d9:ba:d1:23:51:61:a2:ff:c6:45:32:10:92:ac:20:
da:57:ae:59:92:6b:0a:c5:1b:e7:d8:f1:4b:4a:3c:
12:7b:4b:dc:31:49:9b:76:99:f0:b9:31:f5:9d:5c:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6A:17:18:BC:52:84:C8:FD:D4:6D:C8:21:2E:69:DC:2A:AE:E5:DB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/JGoXGLxShMj91G3IIS5p3Cqu5ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0-2.56.177.255
2.56.179.0/24
45.9.17.0-45.9.19.255
45.12.108.0/22
45.12.129.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.126.0/23
45.15.140.0/22
45.15.145.0-45.15.146.255
45.15.154.0/23
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.178.0/23
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.26.255
45.83.128.0/22
45.83.140.0/22
45.83.148.0/23
45.86.60.0-45.86.65.255
45.86.67.0-45.86.70.255
45.86.72.0/24
45.86.74.0/23
45.88.160.0/22
45.88.176.0/23
45.88.182.0/23
45.89.105.0-45.89.111.255
45.89.196.0/24
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0-45.128.52.255
45.128.54.0/24
45.128.57.0-45.128.58.255
45.128.72.0/24
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.234.255
141.98.161.0-141.98.167.255
171.22.109.0-171.22.118.255
171.22.120.0/24
171.22.122.0-171.22.127.255
171.22.129.0-171.22.132.255
185.106.98.0/23
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.70.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/24
213.59.119.0-213.59.120.255
Signature Algorithm: sha256WithRSAEncryption
41:17:90:ea:bc:56:0b:f0:02:09:33:e5:ab:d0:c7:77:73:e6:
a5:bd:0f:8c:f2:db:33:5c:11:08:4d:11:da:b1:e5:1f:f6:c3:
38:3a:9c:f6:d7:ab:af:2f:b1:8b:a3:15:f5:96:f3:30:5b:60:
b8:32:e7:03:7d:b2:90:80:a0:ca:73:9d:2d:c8:93:8f:4b:97:
89:d5:a3:af:53:75:9d:e3:db:3e:33:3b:4a:02:a7:fe:03:27:
0b:cb:e3:04:6b:52:2d:3b:a8:2b:45:84:e3:27:2e:ff:4f:2c:
aa:d2:88:1f:1b:d9:90:40:f2:09:c5:8a:27:ca:8b:7d:a9:90:
a7:49:a3:3b:09:c4:c8:64:92:8f:c3:0d:a9:7e:67:b0:2a:b2:
05:5f:c0:13:07:93:9c:13:6e:f2:c5:d3:6d:1e:7d:ae:a3:d2:
e2:68:46:bc:5e:44:26:c7:ed:72:4c:36:6f:3c:57:4c:e8:84:
c5:88:12:65:b6:de:29:fa:c1:af:95:b4:69:a0:e0:e6:57:4c:
05:28:e0:14:19:78:a0:8b:fe:33:d5:b8:ca:8d:95:f8:71:45:
8d:3a:b7:f9:46:b7:94:88:76:72:c9:43:cc:d4:03:29:82:50:
a0:ed:4e:e4:39:87:15:da:65:c6:fe:db:0f:fd:57:79:01:01:
00:8f:58:4d
-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgISAZg4nw/ILZ6e+TygTOkLv/43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwNzIzMTg1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZhMTcxOGJjNTI4NGM4ZmRkNDZkYzgyMTJlNjlkYzJhYWVlNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjxk1pnnqB1PyrnYGH+vjsmee1Ep
t0SFOtvAnXvuScX2i6TrASUAUmNSz5f67J1oc9g3FLLyUJtPePtXWWPwTNnzdz6X
9I/W13zHZGQLbr7fmr7BGa+9Z4AFLOYaRi3ErG9pWH1/tjISZIEkFqgGGuYEpzaz
lKgVJ/BHjoMJ3hmfInOa7umXJ4LKgOJTsMDTvJtM9DbGQNB2IGJp6FlamxZqYr83
Ah3inLEj42W+pIpeoRYLzT9vTLqSLZ7fo0TiMLcifbJnOdSxIKoYc0N2JcrZutEj
UWGi/8ZFMhCSrCDaV65ZkmsKxRvn2PFLSjwSe0vcMUmbdpnwuTH1nVzOLwIDAQAB
o4IECDCCBAQwHQYDVR0OBBYEFCRqFxi8UoTI/dRtyCEuadwqruXbMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvSkdvWEdMeFNoTWo5MUczSUlTNXAzQ3F1NWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICHAYIKwYBBQUHAQcBAf8EggILMIICBzCCAgMEAgABMIIB
+zAMAwQAAjh1AwQHAjgAMAwDBAICOKwDBAECOLADBAACOLMwDAMEAC0JEQMEAi0J
EAMEAi0MbDAMAwQALQyBAwQCLQyQMAwDBAAtDJUDBAMtDJADBAEtD34DBAItD4ww
DAMEAC0PkQMEAC0PkgMEAS0PmjAMAwQFLQ+gAwQCLQ+oAwQALQ+wAwQBLQ+yAwQC
LQ+4MAsDBAAtUvUDAwAtUjAMAwQCLVMUAwQALVMaAwQCLVOAAwQCLVOMAwQBLVOU
MAwDBAItVjwDBAEtVkAwDAMEAC1WQwMEAC1WRgMEAC1WSAMEAS1WSgMEAi1YoAME
AS1YsAMEAS1YtjAMAwQALVlpAwQELVlgAwQALVnEAwQCLVyMAwQDLVygMAwDBAYt
XMADBAAtXMIwDAMEBC2AMAMEAC2ANAMEAC2ANjAMAwQALYA5AwQALYA6AwQALYBI
MAwDBABcduUDBABcduoDBAJcduwDBAJf1vgwDAMEAIsc6QMEAIsc6jAMAwQAjWKh
AwQDjWKgMAwDBACrFm0DBACrFnYDBACrFngwDAMEAasWegMEB6sWADAMAwQAqxaB
AwQAqxaEAwQBuWpiAwQCuZm0AwQCuZxsMAwDBAC5oUUDBAC5oUYDBAK5ppgDBAK5
ywQDBALCTIgDBADVO3AwDAMEANU7dwMEANU7eDANBgkqhkiG9w0BAQsFAAOCAQEA
QReQ6rxWC/ACCTPlq9DHd3Pmpb0PjPLbM1wRCE0R2rHlH/bDODqc9terry+xi6MV
9ZbzMFtguDLnA32ykICgynOdLciTj0uXidWjr1N1nePbPjM7SgKn/gMnC8vjBGtS
LTuoK0WE4ycu/08sqtKIHxvZkEDyCcWKJ8qLfamQp0mjOwnEyGSSj8MNqX5nsCqy
BV/AEweTnBNu8sXTbR59rqPS4mhGvF5EJsftckw2bzxXTOiExYgSZbbeKfrBr5W0
aaDg5ldMBSjgFBl4oIv+M9W4yo2V+HFFjTq3+Ua3lIh2cslDzNQDKYJQoO1O5DmH
Fdplxv7bD/1XeQEBAI9YTQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:15:39 2025 by rpki-client