Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gzw0WmnWt8EoruqrXs6vZ_rNA2o.roa
File: Gzw0WmnWt8EoruqrXs6vZ_rNA2o.roa (raw, json)
Hash identifier: uHa0+7U42PXLL7sUzqsq9ff7ZHXisz1ySpqKM/YGoxk=
Subject key identifier: 1B:3C:34:5A:69:D6:B7:C1:28:AE:EA:AB:5E:CE:AF:67:FA:CD:03:6A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019910E9B09E6DC26A17BB4AC2132480A701
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gzw0WmnWt8EoruqrXs6vZ_rNA2o.roa
Signing time: Wed 03 Sep 2025 18:49:34 +0000
ROA not before: Wed 03 Sep 2025 18:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a06:b5c0::/29 maxlen: 29
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:8880::/29 maxlen: 29
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:1583::/32 maxlen: 32
2a0f:1740::/29 maxlen: 29
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3046:320::/48 maxlen: 48
2a0f:3240::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c5::/32 maxlen: 32
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:3340::/29 maxlen: 29
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:4c40::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ba00::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:33::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:3080::/29 maxlen: 29
2a13:8c82:3::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:cf01::/32 maxlen: 32
2a13:df00::/29 maxlen: 29
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e102:3::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:e9:b0:9e:6d:c2:6a:17:bb:4a:c2:13:24:80:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 18:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b3c345a69d6b7c128aeeaab5eceaf67facd036a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:aa:80:95:58:57:ec:47:8b:6d:62:ed:87:
f9:cf:4d:a2:0f:da:02:3d:6e:ae:e4:ed:09:ad:14:
dd:4d:8f:65:d5:f7:08:eb:90:be:03:1c:89:b3:e0:
33:26:ae:53:db:8f:63:99:88:30:2b:69:ce:70:c8:
14:f6:56:6e:b9:cd:a1:9b:c4:10:e4:c3:69:27:e8:
bd:4b:3f:98:9b:3b:af:51:4f:1f:e6:f1:df:b1:58:
19:f9:6b:73:96:1d:93:f7:95:16:f1:f6:9a:dd:89:
5e:58:91:81:17:12:ae:77:bf:4c:f6:65:f9:87:6f:
39:02:75:1c:df:67:3d:22:1c:b1:ff:1d:c6:00:34:
cd:7f:b1:8f:c5:fe:35:48:95:10:d5:93:78:59:36:
de:6d:0b:15:11:1e:04:7b:a3:30:f5:fa:3e:98:c1:
53:21:74:6e:d6:f5:69:c1:79:2c:6f:d0:d1:d1:fe:
c0:d0:bf:bb:a8:5b:1d:17:f5:9e:14:53:88:17:62:
b7:d7:e1:d1:91:87:0f:55:6f:30:ce:bf:bf:97:d5:
fe:36:97:24:a6:d6:b1:b4:41:23:18:01:17:45:b5:
14:d4:62:1f:ee:eb:1c:8c:6a:58:6a:32:18:83:df:
72:c8:19:10:a9:da:f1:f5:5d:01:d9:57:af:b5:9b:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:34:5A:69:D6:B7:C1:28:AE:EA:AB:5E:CE:AF:67:FA:CD:03:6A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gzw0WmnWt8EoruqrXs6vZ_rNA2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a06:b5c0::/29
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:8880::/29
2a0e:c780::/31
2a0e:f201::/32
2a0f:140::/29
2a0f:e00::/29
2a0f:1583::/32
2a0f:1740::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3046:320::/48
2a0f:3240::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:8300::/29
2a0f:b400::/29
2a0f:c400::/29
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e4c0::/29
2a0f:e6c5::/32
2a10:32c0::/29
2a10:3340::/29
2a10:35c0::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6d40::/29
2a10:7100::/29
2a10:7900::/29
2a10:7b00::/29
2a11:4c40::/29
2a11:5c80::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ba00::/29
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:33::/48
2a13:18c6:55::/48
2a13:3080::/29
2a13:8c82:3::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:cf01::/32
2a13:df00::/29
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e102:3::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
a2:7d:65:dc:ea:6e:c0:1f:ee:ca:c5:fd:e7:27:7d:24:51:8b:
0d:9d:26:30:94:e5:10:6d:2f:ef:00:b5:58:ed:23:94:50:8e:
08:16:97:d6:e6:7a:98:8b:af:ba:82:07:1e:04:f1:d0:4f:67:
15:ef:41:25:fd:b0:1b:28:24:2f:e1:ad:34:25:99:91:42:aa:
9c:1f:38:05:3d:d3:bb:9a:dc:ed:d1:a1:83:8d:c4:13:13:2c:
5b:9c:43:a5:da:82:1f:9d:b8:83:e3:f6:24:57:c9:27:28:80:
74:6f:be:fa:69:40:de:2f:34:a4:8f:e4:10:45:e5:b9:17:50:
7b:59:72:23:2c:4c:07:7c:22:63:3d:30:2d:0a:71:75:14:b8:
de:f4:50:7e:23:38:17:05:f8:8c:ad:22:f0:7f:76:8f:74:e6:
f5:fc:24:09:9e:9e:90:10:5a:80:b3:2d:f1:b3:a2:1a:a7:2e:
b2:76:ac:0d:90:a2:3c:75:89:85:30:11:4a:06:79:ad:48:28:
25:0e:f0:bf:92:9c:eb:f4:42:fd:6d:48:e2:b4:d9:e6:60:33:
18:9f:b3:f7:ff:77:c0:9f:18:1a:3b:c1:b3:a6:ea:1b:ca:80:
c5:1e:a5:ac:a9:38:02:de:58:7d:30:7f:07:a5:22:0c:36:4d:
6a:1a:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:59:11 2025 by rpki-client