Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/tHhXpyudxNYhrIxF4dzTai1PI1c.roa
File: tHhXpyudxNYhrIxF4dzTai1PI1c.roa (raw, json)
Hash identifier: 9R176gAhLoJ/sjNZw1oAAKzgCQCA4wxJcDlCkPjxACI=
Subject key identifier: B4:78:57:A7:2B:9D:C4:D6:21:AC:8C:45:E1:DC:D3:6A:2D:4F:23:57
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019835FF60B6DAD5CC061A256198B962B6EF
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/tHhXpyudxNYhrIxF4dzTai1PI1c.roa
Signing time: Wed 23 Jul 2025 06:36:25 +0000
ROA not before: Wed 23 Jul 2025 06:36:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
79.150.0.0/16 maxlen: 24
79.151.0.0/16 maxlen: 24
79.152.0.0/16 maxlen: 24
79.153.0.0/16 maxlen: 24
79.154.0.0/16 maxlen: 24
79.155.0.0/16 maxlen: 24
79.156.0.0/16 maxlen: 24
79.157.0.0/16 maxlen: 24
79.158.0.0/16 maxlen: 24
79.159.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.58.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.46.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.40.0.0/16 maxlen: 24
83.41.0.0/16 maxlen: 24
83.42.0.0/16 maxlen: 24
83.43.0.0/16 maxlen: 24
83.44.0.0/16 maxlen: 24
83.45.0.0/16 maxlen: 24
83.46.0.0/16 maxlen: 24
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.49.0.0/16 maxlen: 24
83.50.0.0/16 maxlen: 24
83.51.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.4.0.0/16 maxlen: 24
88.5.0.0/16 maxlen: 24
88.6.0.0/16 maxlen: 24
88.7.0.0/16 maxlen: 24
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.17.0.0/16 maxlen: 24
88.18.0.0/16 maxlen: 24
88.19.0.0/16 maxlen: 24
88.20.0.0/16 maxlen: 24
88.21.0.0/16 maxlen: 24
88.22.0.0/16 maxlen: 24
88.23.0.0/16 maxlen: 24
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.120.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.84.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.76.240.0/23 maxlen: 23
195.76.240.0/24 maxlen: 24
195.76.241.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.77.198.0/23 maxlen: 23
195.77.198.0/24 maxlen: 24
195.77.199.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
2a02:9000::/23 maxlen: 23
2a02:9144::/32 maxlen: 32
2a02:9145::/32 maxlen: 32
2a02:9146::/32 maxlen: 32
2a02:9147::/32 maxlen: 32
2a02:9148::/32 maxlen: 32
2a02:9149::/32 maxlen: 32
2a02:914a::/32 maxlen: 32
2a02:914b::/32 maxlen: 32
2a02:914c::/32 maxlen: 32
2a02:914d::/32 maxlen: 32
2a02:914e::/32 maxlen: 32
2a02:914f::/32 maxlen: 32
2a02:9150::/32 maxlen: 32
2a02:9151::/32 maxlen: 32
2a02:9152::/32 maxlen: 32
2a02:9153::/32 maxlen: 32
2a02:9154::/32 maxlen: 32
2a02:9155::/32 maxlen: 32
2a02:9156::/32 maxlen: 32
2a02:9157::/32 maxlen: 32
2a02:9158::/32 maxlen: 32
2a02:9159::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:ff:60:b6:da:d5:cc:06:1a:25:61:98:b9:62:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jul 23 06:36:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b47857a72b9dc4d621ac8c45e1dcd36a2d4f2357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:1d:6b:25:e8:8f:6b:0d:ba:22:f6:77:44:
f1:db:41:1b:c9:9d:e4:08:e0:31:2b:70:d1:a6:a5:
b6:23:e8:98:02:8b:8a:39:a5:49:e5:e8:9c:c0:7e:
fb:d1:92:e5:80:af:fb:d0:77:3d:71:e0:fb:bd:be:
53:a5:58:e3:71:53:34:81:27:91:70:db:5e:bc:77:
60:0f:a3:e1:6e:8a:64:0e:aa:af:34:d3:71:63:b6:
83:7d:59:4a:01:b8:d8:90:e3:77:3e:19:4d:19:5f:
a7:cd:93:e5:10:0c:96:b5:35:98:62:e3:bf:2f:13:
2d:4a:7f:a1:4e:a9:c8:00:e0:7c:e5:de:c4:13:70:
9d:b4:d9:5e:bd:2d:e5:8b:c9:b7:43:07:7f:c1:98:
a9:a9:ce:b8:70:61:4e:85:5f:1c:d9:a9:e4:3e:82:
2a:f0:28:5b:30:a8:c6:44:9d:3a:5c:8c:79:2c:b8:
7f:cc:42:6c:a1:29:60:ff:8b:d6:7f:c4:5c:3b:89:
1a:77:70:07:91:33:3a:ca:c3:e9:65:ff:11:bb:63:
bc:10:fc:9e:b8:70:bf:39:69:9f:79:f3:6e:7b:a8:
4e:e6:db:73:b8:a8:a0:93:af:75:ed:1a:89:37:76:
99:d9:cf:3f:ce:68:89:75:65:ac:2a:ae:00:45:f2:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:57:A7:2B:9D:C4:D6:21:AC:8C:45:E1:DC:D3:6A:2D:4F:23:57
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/tHhXpyudxNYhrIxF4dzTai1PI1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0/12
80.24.0.0-80.39.255.255
80.58.0.0/15
81.32.0.0/12
83.32.0.0/11
88.0.0.0/11
95.120.0.0/13
176.80.0.0/13
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
IPv6:
2a02:9000::/23
Signature Algorithm: sha256WithRSAEncryption
ea:55:95:38:74:29:cf:d6:3c:5f:20:3c:b5:d4:4f:1c:8a:cf:
bc:30:97:3d:07:0b:27:03:fc:ec:88:5c:fe:8f:3d:a3:d1:f4:
19:3d:28:ae:d2:e5:fe:1a:28:ef:c7:9d:29:d0:ff:06:09:b9:
91:33:95:27:00:4e:a6:80:9c:06:bc:d1:42:60:2c:90:79:32:
17:0f:d1:e2:e1:38:00:08:41:50:b2:7d:bf:80:ec:af:da:f0:
09:63:ff:ee:03:45:51:5c:b0:7b:cb:a7:98:8a:d0:98:1a:5f:
91:57:21:95:5d:b5:e6:c3:71:84:44:c8:26:ee:ab:7c:7a:92:
ac:e3:f1:c8:4d:bb:3a:7d:04:70:98:19:cd:03:75:cc:71:84:
c9:80:56:40:e2:86:50:1c:fa:31:4b:18:8b:82:05:90:4c:90:
75:eb:33:84:d0:19:55:a2:56:fb:cc:29:14:60:22:92:bf:69:
9f:bf:6c:98:09:a5:ce:d4:97:f6:02:0a:14:bc:d4:6c:c3:b7:
7e:e2:c6:5a:c3:e0:89:98:23:48:0b:c8:bf:69:d3:f9:a0:d3:
0d:aa:15:c2:7c:b8:0f:7b:20:65:b1:70:ff:60:77:a4:f8:51:
95:ab:fd:cf:32:c6:6a:9a:74:41:4a:4d:74:00:47:05:c9:aa:
df:15:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:23:37 2025 by rpki-client