Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/1-n-9hD734eUWTfI1sQzb2mm0u70.roa
File: 1-n-9hD734eUWTfI1sQzb2mm0u70.roa (raw, json)
Hash identifier: prY6VkL1Otme9e/iQnbu0E7x7kgOdTIuBs01J6UM6iw=
Subject key identifier: FA:7F:BD:84:3E:F7:E1:E5:16:4D:F2:35:B1:0C:DB:DA:69:B4:BB:BD
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 0198F61F7FC2E2D76C2CC4E3B55C7A92E8B3
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/1-n-9hD734eUWTfI1sQzb2mm0u70.roa
Signing time: Fri 29 Aug 2025 13:58:36 +0000
ROA not before: Fri 29 Aug 2025 13:58:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5617
IP address blocks: 5.184.0.0/15 maxlen: 15
5.184.0.0/16 maxlen: 24
31.60.0.0/14 maxlen: 25
37.47.0.0/16 maxlen: 24
37.108.0.0/16 maxlen: 25
37.225.0.0/16 maxlen: 25
37.228.0.0/18 maxlen: 18
46.134.0.0/16 maxlen: 25
46.170.0.0/15 maxlen: 24
79.162.0.0/15 maxlen: 24
79.163.0.0/16 maxlen: 25
79.163.128.0/17 maxlen: 25
79.184.0.0/13 maxlen: 13
79.184.0.0/16 maxlen: 24
79.185.0.0/16 maxlen: 24
79.186.0.0/16 maxlen: 24
79.187.0.0/16 maxlen: 24
79.188.0.0/16 maxlen: 24
79.189.0.0/16 maxlen: 24
79.190.0.0/16 maxlen: 24
79.191.0.0/16 maxlen: 24
80.48.0.0/13 maxlen: 13
80.48.0.0/14 maxlen: 14
80.48.0.0/16 maxlen: 24
80.49.0.0/16 maxlen: 24
80.50.0.0/16 maxlen: 24
80.51.0.0/16 maxlen: 24
80.51.76.0/24 maxlen: 24
80.51.253.0/24 maxlen: 24
80.52.0.0/16 maxlen: 24
80.53.0.0/16 maxlen: 24
80.54.0.0/16 maxlen: 24
80.55.0.0/16 maxlen: 24
83.0.0.0/11 maxlen: 11
83.0.0.0/13 maxlen: 13
83.0.0.0/16 maxlen: 24
83.1.0.0/16 maxlen: 24
83.2.0.0/16 maxlen: 24
83.3.0.0/16 maxlen: 24
83.4.0.0/16 maxlen: 24
83.5.0.0/16 maxlen: 24
83.6.0.0/16 maxlen: 24
83.7.0.0/16 maxlen: 24
83.8.0.0/13 maxlen: 13
83.8.0.0/16 maxlen: 24
83.9.0.0/16 maxlen: 24
83.10.0.0/16 maxlen: 24
83.11.0.0/16 maxlen: 24
83.12.0.0/16 maxlen: 24
83.13.0.0/16 maxlen: 24
83.14.0.0/16 maxlen: 24
83.15.0.0/16 maxlen: 24
83.16.0.0/13 maxlen: 13
83.16.0.0/16 maxlen: 24
83.17.0.0/16 maxlen: 24
83.18.0.0/16 maxlen: 24
83.19.0.0/16 maxlen: 24
83.20.0.0/16 maxlen: 24
83.21.0.0/16 maxlen: 24
83.22.0.0/16 maxlen: 24
83.23.0.0/16 maxlen: 24
83.24.0.0/13 maxlen: 13
83.24.0.0/16 maxlen: 24
83.25.0.0/16 maxlen: 24
83.26.0.0/16 maxlen: 24
83.27.0.0/16 maxlen: 24
83.28.0.0/16 maxlen: 24
83.29.0.0/16 maxlen: 24
83.30.0.0/16 maxlen: 24
83.31.0.0/16 maxlen: 24
87.96.0.0/17 maxlen: 24
91.94.0.0/16 maxlen: 24
95.48.0.0/14 maxlen: 14
95.48.0.0/16 maxlen: 24
95.49.0.0/16 maxlen: 24
95.50.0.0/16 maxlen: 24
95.51.0.0/16 maxlen: 24
178.42.0.0/15 maxlen: 24
178.56.0.0/16 maxlen: 24
188.47.0.0/16 maxlen: 24
193.110.120.0/22 maxlen: 22
194.204.128.0/18 maxlen: 18
194.204.152.0/24 maxlen: 24
194.204.159.0/24 maxlen: 24
195.116.0.0/16 maxlen: 24
195.117.0.0/16 maxlen: 24
195.205.0.0/16 maxlen: 24
195.205.147.0/24 maxlen: 24
195.205.239.0/24 maxlen: 24
212.160.0.0/16 maxlen: 24
212.160.172.0/24 maxlen: 24
212.244.0.0/16 maxlen: 24
212.244.226.0/24 maxlen: 24
213.25.0.0/16 maxlen: 24
213.25.92.0/24 maxlen: 24
213.25.125.0/24 maxlen: 24
213.25.164.0/24 maxlen: 24
213.25.166.0/24 maxlen: 24
213.76.0.0/16 maxlen: 24
213.76.129.0/24 maxlen: 24
213.76.135.0/24 maxlen: 24
213.76.140.0/24 maxlen: 24
213.76.143.0/24 maxlen: 24
213.76.146.0/24 maxlen: 24
213.77.0.0/16 maxlen: 24
213.77.0.0/17 maxlen: 17
213.77.5.0/24 maxlen: 24
213.77.20.0/24 maxlen: 24
213.77.34.0/24 maxlen: 24
213.77.68.0/24 maxlen: 24
213.77.68.192/26 maxlen: 26
217.96.0.0/14 maxlen: 14
217.96.0.0/16 maxlen: 24
217.97.0.0/16 maxlen: 24
217.98.0.0/16 maxlen: 24
217.99.0.0/16 maxlen: 24
217.116.96.0/20 maxlen: 20
217.116.100.0/22 maxlen: 22
2a00:f40::/29 maxlen: 29
2a01:1000::/21 maxlen: 21
2a01:1100::/28 maxlen: 28
2a01:1110::/28 maxlen: 28
2a01:1120::/28 maxlen: 28
2a01:1130::/28 maxlen: 28
2a01:1140::/28 maxlen: 28
2a01:1150::/28 maxlen: 28
2a01:1160::/28 maxlen: 28
2a01:1170::/28 maxlen: 28
2a01:1180::/28 maxlen: 28
2a01:1190::/28 maxlen: 28
2a01:11a0::/28 maxlen: 28
2a01:11b0::/28 maxlen: 28
2a01:11c0::/28 maxlen: 28
2a01:11d0::/28 maxlen: 28
2a01:1700:2::/48 maxlen: 48
2a01:1700:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:1f:7f:c2:e2:d7:6c:2c:c4:e3:b5:5c:7a:92:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Aug 29 13:58:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa7fbd843ef7e1e5164df235b10cdbda69b4bbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:34:7b:5a:0e:58:5f:cc:5a:20:d5:75:9d:
9b:4f:0f:64:73:b6:4e:b6:5c:2f:47:84:d6:8f:3f:
d0:5b:28:3e:cd:4b:18:1e:55:d2:eb:f7:43:11:bf:
36:3e:d6:74:f4:b2:ea:16:28:1f:75:f5:f0:38:c2:
0c:23:f6:15:be:db:c6:89:bb:25:89:f3:3a:d5:45:
d5:59:9a:c4:8c:68:27:4c:69:f7:6f:c2:6c:06:f4:
7f:13:dc:ab:af:50:a3:70:1b:de:8d:ff:f0:43:34:
da:88:e4:38:02:01:0b:55:f9:ca:46:43:0c:82:80:
a3:45:4b:34:5d:b4:70:0c:7a:65:91:70:69:f4:60:
bb:f9:a5:d9:99:c2:60:1b:18:1d:fc:c0:1b:97:0d:
82:cc:df:94:2a:c9:c6:b0:d8:09:50:cc:b8:f2:93:
d1:3f:63:45:8b:95:6a:83:9e:58:60:2c:34:84:16:
89:16:3e:ab:2d:1e:45:b1:0e:56:0f:68:61:30:fc:
b1:b8:59:ea:a0:a0:63:1e:f2:c4:61:8d:33:84:49:
67:a0:e7:01:4b:97:46:5f:ac:64:d6:d7:2f:df:a3:
be:7f:e4:38:c6:7e:d9:fb:97:ca:59:72:1f:d5:88:
b1:92:b8:5f:78:6b:38:5c:5b:90:1a:3e:bc:4e:df:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:BD:84:3E:F7:E1:E5:16:4D:F2:35:B1:0C:DB:DA:69:B4:BB:BD
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/1-n-9hD734eUWTfI1sQzb2mm0u70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.184.0.0/15
31.60.0.0/14
37.47.0.0/16
37.108.0.0/16
37.225.0.0/16
37.228.0.0/18
46.134.0.0/16
46.170.0.0/15
79.162.0.0/15
79.184.0.0/13
80.48.0.0/13
83.0.0.0/11
87.96.0.0/17
91.94.0.0/16
95.48.0.0/14
178.42.0.0/15
178.56.0.0/16
188.47.0.0/16
193.110.120.0/22
194.204.128.0/18
195.116.0.0/15
195.205.0.0/16
212.160.0.0/16
212.244.0.0/16
213.25.0.0/16
213.76.0.0/15
217.96.0.0/14
217.116.96.0/20
IPv6:
2a00:f40::/29
2a01:1000::/21
Signature Algorithm: sha256WithRSAEncryption
01:3d:c2:74:18:b6:c1:2d:35:64:70:54:09:10:00:8c:87:ec:
96:8e:36:2c:ea:16:1a:c8:90:3e:69:41:53:37:8f:ab:21:10:
16:58:f8:6c:79:88:ea:c4:74:da:6d:65:f0:d2:93:52:61:6c:
a4:a3:6a:e4:dd:54:5b:0c:c3:ba:e0:c8:66:2f:16:cc:90:80:
e9:22:2e:fd:7b:a9:62:44:2e:f1:7d:dd:03:a6:d4:87:a7:10:
88:14:13:e6:05:9f:43:53:34:2a:32:22:f8:48:48:b3:a9:5b:
31:95:e5:dc:47:87:83:e6:84:27:93:98:a3:4f:0f:fa:5b:cd:
d0:55:ed:3a:ad:e3:d9:96:ab:7b:8a:68:b7:09:98:f2:84:66:
22:80:85:9e:11:93:5b:b4:e3:ff:ce:b3:f9:3c:5f:12:2a:c4:
bf:87:2a:18:9d:b7:55:3f:f4:70:6a:c1:2a:83:96:55:78:91:
12:7e:50:06:94:3d:e8:5a:b3:9e:49:51:62:49:84:97:50:6b:
33:0c:da:33:81:7a:25:b9:ee:e5:2e:3e:a0:20:7b:ba:59:12:
ec:27:1c:5e:e2:da:57:ed:e0:1f:57:1a:13:46:27:5b:bb:0c:
39:85:0d:f3:a4:3c:91:24:3b:38:01:4b:5d:60:a3:50:e9:72:
b9:8e:26:a7
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZj2H3/C4tdsLMTjtVx6kuizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjUwODI5MTM1ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTdmYmQ4NDNlZjdlMWU1MTY0ZGYyMzViMTBjZGJkYTY5YjRiYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9k0e1oOWF/MWiDVdZ2bTw9kc7ZO
tlwvR4TWjz/QWyg+zUsYHlXS6/dDEb82PtZ09LLqFigfdfXwOMIMI/YVvtvGibsl
ifM61UXVWZrEjGgnTGn3b8JsBvR/E9yrr1CjcBvejf/wQzTaiOQ4AgELVfnKRkMM
goCjRUs0XbRwDHplkXBp9GC7+aXZmcJgGxgd/MAblw2CzN+UKsnGsNgJUMy48pPR
P2NFi5Vqg55YYCw0hBaJFj6rLR5FsQ5WD2hhMPyxuFnqoKBjHvLEYY0zhElnoOcB
S5dGX6xk1tcv36O+f+Q4xn7Z+5fKWXIf1YixkrhfeGs4XFuQGj68Tt8SqQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPp/vYQ+9+HlFk3yNbEM29pptLu9MB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvMS1uLTloRDczNGVVV1RmSTFzUXpiMm1tMHU3MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjIvNjQ4Yzc1LTJiZTgtNGJmZC1hMWIxLWNiOGIzYTA5NDIw
OS8xL1RzOVRBSHg1ekY0dkxYTld1cEVocDR3TWR4US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBwwYIKwYBBQUHAQcBAf8EgbMwgbAwgZgEAgABMIGRAwMB
BbgDAwIfPAMDACUvAwMAJWwDAwAl4QMEBiXkAAMDAC6GAwMBLqoDAwFPogMDA0+4
AwMDUDADAwVTAAMEB1dgAAMDAFteAwMCXzADAwGyKgMDALI4AwMAvC8DBALBbngD
BAbCzIADAwHDdAMDAMPNAwMA1KADAwDU9AMDANUZAwMB1UwDAwLZYAMEBNl0YDAT
BAIAAjANAwUDKgAPQAMEAyoBEDANBgkqhkiG9w0BAQsFAAOCAQEAAT3CdBi2wS01
ZHBUCRAAjIfslo42LOoWGsiQPmlBUzePqyEQFlj4bHmI6sR02m1l8NKTUmFspKNq
5N1UWwzDuuDIZi8WzJCA6SIu/XupYkQu8X3dA6bUh6cQiBQT5gWfQ1M0KjIi+EhI
s6lbMZXl3EeHg+aEJ5OYo08P+lvN0FXtOq3j2Zare4potwmY8oRmIoCFnhGTW7Tj
/86z+TxfEirEv4cqGJ23VT/0cGrBKoOWVXiREn5QBpQ96FqznklRYkmEl1BrMwza
M4F6Jbnu5S4+oCB7ulkS7CccXuLaV+3gH1caE0YnW7sMOYUN86Q8kSQ7OAFLXWCj
UOlyuY4mpw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:46:18 2025 by rpki-client