Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/yaAnNgYmOhtkdT0q-ug63BQw6B0.roa
File: yaAnNgYmOhtkdT0q-ug63BQw6B0.roa (raw, json)
Hash identifier: ShhzK9V+jodrQRpINa0m6bkvQ8X9NHbcBsu/L59e7+A=
Subject key identifier: C9:A0:27:36:06:26:3A:1B:64:75:3D:2A:FA:E8:3A:DC:14:30:E8:1D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0197444F01D38829C58E846E4DD8A536D68C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/yaAnNgYmOhtkdT0q-ug63BQw6B0.roa
Signing time: Fri 06 Jun 2025 08:15:17 +0000
ROA not before: Fri 06 Jun 2025 08:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.130.160.0/22 maxlen: 22
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.136.0/23 maxlen: 23
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.184.0/22 maxlen: 22
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.241.122.0/23 maxlen: 23
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:4f:01:d3:88:29:c5:8e:84:6e:4d:d8:a5:36:d6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 6 08:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a0273606263a1b64753d2afae83adc1430e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:a4:0e:0d:84:bd:41:da:ce:c9:01:fd:d1:
87:af:f9:79:9e:d9:65:bd:e5:09:12:b3:5f:c8:ea:
74:b6:16:31:12:09:a7:75:50:0e:25:a5:8b:14:30:
74:74:4d:28:8c:23:08:f3:61:49:c5:10:da:be:a4:
c4:d3:ee:5b:86:26:6a:ed:01:ad:f5:0a:0e:b0:56:
ba:a8:b4:f0:21:bc:88:a3:64:f1:91:b3:e7:12:fd:
11:2d:78:15:4e:10:29:52:37:99:30:3f:b7:82:f3:
30:e9:be:e3:fd:11:02:61:06:85:ad:9f:f4:b5:3d:
73:75:1d:e9:5a:96:24:53:3f:74:c8:76:1d:9a:62:
1a:78:65:38:fd:0a:e4:5b:b2:2e:bf:b5:31:d6:7e:
14:1a:6c:6b:b5:38:46:12:4e:43:8a:30:4a:22:20:
7b:af:1a:ca:dc:5f:d0:77:26:25:cb:29:a3:5e:09:
fb:f1:86:91:7a:aa:48:03:e6:7f:ab:e9:06:26:b2:
94:80:36:b7:42:35:e5:e0:ce:80:65:5b:15:e4:fd:
3d:b2:5a:a4:a2:b2:17:26:00:cb:85:b9:76:39:e0:
7d:98:0d:70:d0:f4:03:79:ae:e6:e8:65:74:f8:b3:
04:6b:09:bf:f5:17:7a:61:e3:b8:1a:0b:2d:02:f0:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:27:36:06:26:3A:1B:64:75:3D:2A:FA:E8:3A:DC:14:30:E8:1D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/yaAnNgYmOhtkdT0q-ug63BQw6B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0-31.15.6.255
45.81.104.0/22
45.130.160.0/22
45.133.60.0/22
45.137.136.0/23
45.137.139.0/24
45.145.135.0/24
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/24
92.118.183.0/24
178.19.40.0-178.19.42.255
185.28.51.0/24
185.229.216.0/22
185.231.184.0/22
185.241.122.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:3f:26:90:b6:34:44:51:29:e9:69:b7:32:d4:fa:3b:84:d1:
01:1a:07:07:b7:dd:b6:d1:e7:b0:5d:02:60:f6:64:08:3e:03:
cc:db:71:88:9b:39:5d:0b:1c:b1:e7:11:21:b1:9d:30:b7:af:
8d:c3:28:6a:00:06:f9:83:23:b1:b7:ee:f8:0f:ff:8d:8b:36:
da:af:57:86:50:90:bc:e8:55:07:dc:a1:df:59:9b:6f:2a:73:
f3:77:56:cb:41:d9:65:4d:17:b9:1a:2d:fb:ed:84:41:47:be:
f7:fb:c4:c8:67:f6:b9:ca:19:2a:d4:bd:04:e1:80:c1:22:d2:
e1:5d:98:53:aa:50:bf:b0:f2:a2:d9:66:49:a6:23:47:47:58:
4c:6a:39:f0:5c:c4:8a:f3:2e:2e:e8:00:aa:f0:38:33:db:ae:
b5:f2:aa:9c:0b:95:8c:d6:4e:d0:ec:5e:3a:08:72:63:2a:f0:
bc:8e:ef:ca:a6:cb:59:07:a2:85:0a:95:4f:91:46:41:67:cc:
b6:aa:67:7a:98:06:9f:d6:ce:93:a9:31:6b:1d:d8:39:9e:07:
3b:f4:82:0e:0a:d1:00:e2:ef:d4:cd:c7:b0:83:65:76:82:e6:
3b:2b:bb:7c:45:10:f5:6f:df:26:01:c7:de:0a:7d:45:a7:5f:
60:cd:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:55 2025 by rpki-client