Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ma8zfvdT_VIzhcZ-Lp3w2kWF5zA.roa
File: ma8zfvdT_VIzhcZ-Lp3w2kWF5zA.roa (raw, json)
Hash identifier: ioXdT326LeLVRC17TKm62fh113i8VMK3qPoClNNWHik=
Subject key identifier: 99:AF:33:7E:F7:53:FD:52:33:85:C6:7E:2E:9D:F0:DA:45:85:E7:30
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019734939BC31603107322248384FF0ACD37
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ma8zfvdT_VIzhcZ-Lp3w2kWF5zA.roa
Signing time: Tue 03 Jun 2025 06:56:18 +0000
ROA not before: Tue 03 Jun 2025 06:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/20 maxlen: 20
46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/20 maxlen: 20
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/20 maxlen: 20
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/20 maxlen: 20
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/20 maxlen: 20
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/20 maxlen: 20
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/20 maxlen: 20
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/20 maxlen: 20
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/20 maxlen: 20
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/20 maxlen: 20
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/20 maxlen: 20
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/20 maxlen: 20
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/20 maxlen: 20
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/20 maxlen: 20
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/20 maxlen: 20
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/20 maxlen: 20
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/20 maxlen: 20
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/20 maxlen: 20
94.252.240.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.8.0/21 maxlen: 21
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
2a00:b800:3000::/55 maxlen: 55
2a00:b800:3000:200::/55 maxlen: 55
2a00:b800:3000:400::/55 maxlen: 55
2a00:b800:3000:600::/55 maxlen: 55
2a00:b800:3200::/55 maxlen: 55
2a00:b800:3200:200::/55 maxlen: 55
2a00:b800:3200:400::/55 maxlen: 55
2a00:b800:3200:600::/55 maxlen: 55
2a00:b800:3400::/55 maxlen: 55
2a00:b800:3400:200::/55 maxlen: 55
2a00:b800:3400:400::/55 maxlen: 55
2a00:b800:3400:600::/55 maxlen: 55
2a00:b800:3600::/55 maxlen: 55
2a00:b800:3600:200::/55 maxlen: 55
2a00:b800:3600:400::/55 maxlen: 55
2a00:b800:3600:600::/55 maxlen: 55
2a00:b800:3a00::/55 maxlen: 55
2a00:b800:3a00:200::/55 maxlen: 55
2a00:b800:3a00:400::/55 maxlen: 55
2a00:b800:3a00:600::/55 maxlen: 55
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:93:9b:c3:16:03:10:73:22:24:83:84:ff:0a:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jun 3 06:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99af337ef753fd523385c67e2e9df0da4585e730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:7b:eb:95:6a:6e:10:d3:3d:fc:6c:bc:64:
1f:8b:d3:68:09:c4:02:c6:b8:27:07:3c:07:88:2d:
23:6e:8b:7e:ec:7a:e5:13:fb:fc:ab:67:b5:92:42:
f2:05:e4:b7:66:69:c0:11:a5:43:2e:80:e1:2f:db:
4b:ef:b8:3b:bf:9f:f6:c3:83:aa:42:ec:87:da:af:
65:2c:62:a6:3d:b3:70:0e:c0:a6:66:34:8e:21:52:
16:61:82:61:0b:88:6f:61:f2:a3:5e:33:51:82:21:
33:20:fc:4f:f7:96:02:6a:1b:59:0c:0a:5a:40:45:
5d:34:a9:7e:be:9e:83:8d:ae:37:1a:ef:aa:a6:0c:
10:4b:24:62:8d:32:1d:27:c3:74:2b:33:3c:f1:bf:
34:00:e6:3c:97:12:63:ad:0b:35:64:ae:64:97:1b:
19:7f:07:d9:0b:20:47:76:73:1c:d0:1c:ff:2f:59:
29:b3:e5:eb:58:32:75:27:5f:69:8a:88:61:65:df:
49:fe:2f:ed:ea:f7:a6:e8:d0:d3:d3:1c:26:57:d9:
60:78:e3:ac:28:38:41:49:b4:9e:60:03:af:d7:c3:
9a:c6:ed:57:49:06:1c:0b:01:78:11:1c:7a:9d:69:
8e:21:52:6d:a6:a6:bd:e3:3a:72:4b:99:26:d8:6b:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:33:7E:F7:53:FD:52:33:85:C6:7E:2E:9D:F0:DA:45:85:E7:30
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ma8zfvdT_VIzhcZ-Lp3w2kWF5zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
3f:e1:0c:29:48:1e:44:fc:de:cc:0a:e8:af:a8:e1:04:c6:ca:
49:02:d8:98:21:f6:d1:6d:b8:f6:6c:ff:56:26:c1:d5:2f:2c:
bd:53:c2:58:27:03:1d:61:04:f0:72:23:e7:44:09:d3:f4:5d:
f4:91:56:b8:67:c8:b0:52:f2:c7:fd:c7:40:51:94:86:4f:33:
77:e8:23:32:54:cb:12:4e:7c:e0:37:3b:97:4a:6c:a0:f5:2f:
f8:c5:2f:f7:9c:c2:b5:95:a5:58:d4:f2:17:ac:1c:81:0c:01:
08:de:bd:1c:08:57:58:d7:ec:85:81:53:7a:3d:4e:b7:ce:0b:
d8:fb:2d:4b:87:d4:08:2a:aa:ac:b9:35:13:1a:26:d6:2f:80:
f6:d8:37:20:e9:08:54:af:67:b2:cb:4d:92:30:51:f1:a7:3e:
c7:35:87:8f:dd:f3:f8:48:62:67:37:7f:05:5e:57:09:2b:cd:
be:bb:2a:41:a7:24:fe:21:d4:ca:9d:bf:dd:42:a6:ab:a8:39:
c7:39:9b:7e:e0:42:1b:d0:61:a5:2f:76:0e:c9:ce:38:86:38:
a1:18:87:bd:6e:da:2c:60:7e:0a:68:15:74:30:c5:64:4e:55:
1f:0e:d2:01:56:f8:ae:6d:4f:2d:5e:c6:a1:b0:e1:63:42:17:
86:1d:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:48 2025 by rpki-client