Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa
File: vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa (raw, json)
Hash identifier: dU3Xza9rfoKJOlEJVf8d8iW9v0mUKy4oBSU35lnK1P4=
Subject key identifier: BC:89:68:E8:39:3E:75:85:0E:BF:9F:A7:92:D7:5D:28:7F:F3:6C:54
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0199560E349AB13A9B7A5EEAA34734255658
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa
Signing time: Wed 17 Sep 2025 05:03:15 +0000
ROA not before: Wed 17 Sep 2025 05:03:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.163.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
45.248.164.0/22 maxlen: 22
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
80.94.80.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.132.228.0/24 maxlen: 24
103.132.229.0/24 maxlen: 24
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
176.126.223.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
185.255.98.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
193.30.30.0/24 maxlen: 24
193.46.214.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
194.242.22.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:0e:34:9a:b1:3a:9b:7a:5e:ea:a3:47:34:25:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Sep 17 05:03:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc8968e8393e75850ebf9fa792d75d287ff36c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:91:b4:2d:8a:99:ce:85:e8:84:df:43:ab:
2b:58:b2:f8:a6:a9:ab:74:9e:9b:48:a6:3c:8e:10:
b8:f3:c4:03:1d:b8:2f:c7:d4:be:fe:a2:a9:ed:d1:
3a:53:d0:b6:24:d8:5b:bb:6f:1d:de:43:6f:4d:ff:
05:a0:e6:e3:1a:c8:59:59:26:7d:fc:e5:db:d9:ac:
15:44:dc:0a:e5:08:f9:0d:f2:14:13:eb:54:33:cc:
d1:e7:07:a3:0e:1c:2e:c0:32:79:79:5d:d2:b3:05:
4a:65:09:18:4d:e5:05:ea:98:e8:75:66:b1:28:c4:
c2:6b:df:b2:4d:d1:f4:d3:61:d2:75:bd:c3:0c:7a:
8e:6b:81:7e:0b:5e:f0:58:eb:66:2f:ee:e3:d4:07:
c4:98:bb:c4:6a:b0:36:da:3d:a8:6b:20:3b:ce:5e:
2d:86:43:7f:35:ab:94:3f:51:d1:b4:e1:06:dc:5d:
3b:c6:df:1c:fc:0d:5f:eb:b9:0f:14:c4:36:be:20:
17:8f:de:23:be:82:fa:ed:d2:7a:13:c7:aa:e2:0b:
5d:f4:fd:5e:15:9a:8d:12:68:17:f0:8b:73:46:80:
90:6c:58:4e:6a:91:86:47:b7:9f:1f:6c:63:5c:0a:
71:fd:fa:f5:fa:f3:70:9c:b9:95:b0:34:6b:a1:fd:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:68:E8:39:3E:75:85:0E:BF:9F:A7:92:D7:5D:28:7F:F3:6C:54
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.83.12.0/22
45.95.88.0/22
45.248.164.0/22
46.36.97.0/24
46.36.100.0-46.36.102.255
46.36.105.0-46.36.106.255
80.94.80.0/23
89.37.0.0/20
89.40.35.0/24
89.43.0.0/20
91.209.183.0-91.209.184.255
91.239.59.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
176.126.223.0/24
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
185.255.98.0/23
188.213.64.0/20
193.30.30.0/24
193.46.214.0/24
194.180.238.0/24
194.242.22.0/24
195.149.127.0/24
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
92:4f:2a:40:c4:35:ca:45:7f:af:50:33:86:c0:3a:3e:05:a2:
98:a9:b9:6d:58:88:2e:20:ad:cc:cd:7d:7b:d1:06:49:8d:12:
ea:fe:49:9e:52:d5:3b:cb:4d:d4:01:b1:bb:eb:5b:95:89:75:
1e:f8:b4:3c:37:c7:a5:2a:e9:c6:51:48:93:ef:c1:16:a1:d4:
6a:0c:06:6f:bd:88:f8:16:48:09:44:47:16:96:5c:f7:fa:5d:
67:c0:d4:6a:57:45:d6:ba:23:11:db:bc:70:8d:b1:7a:4c:9f:
f0:34:64:e7:14:a8:d7:01:e5:b8:e6:ae:a7:80:20:ac:bc:db:
14:46:12:81:f1:5f:07:fe:95:91:da:f8:ea:b2:e4:a3:63:9e:
78:ab:32:f2:28:b3:b1:0b:70:40:8d:c4:f0:e6:f1:1b:23:78:
6c:1b:80:f2:7e:4a:ca:01:b5:cb:f0:45:b4:d1:d3:da:dc:ae:
a6:e9:8a:bd:28:88:15:89:29:82:3a:f3:1c:05:1c:21:ae:2d:
1c:e6:bb:6b:74:4d:83:6e:d5:34:9e:b0:e9:85:9f:1f:20:4a:
51:9c:84:55:58:28:db:d2:6c:ed:a0:94:11:e8:bb:e8:2f:c2:
7f:c1:31:af:bc:61:08:9a:52:24:66:46:54:96:1a:93:e8:c3:
0a:09:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:13:37 2025 by rpki-client