Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1wyAYxpyA9FCN1lyvO-C57LVFXA.roa
File: 1wyAYxpyA9FCN1lyvO-C57LVFXA.roa (raw, json)
Hash identifier: y/6pL2V+BG6MuxMmBUR7F2hu5ij3F/ux58ms3Mk1R0w=
Subject key identifier: D7:0C:80:63:1A:72:03:D1:42:37:59:72:BC:EF:82:E7:B2:D5:15:70
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01972018F11CBF5F495E0C0D8825C47BD599
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1wyAYxpyA9FCN1lyvO-C57LVFXA.roa
Signing time: Fri 30 May 2025 07:29:54 +0000
ROA not before: Fri 30 May 2025 07:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.141.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.182.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1a::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:18:f1:1c:bf:5f:49:5e:0c:0d:88:25:c4:7b:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: May 30 07:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70c80631a7203d142375972bcef82e7b2d51570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:51:48:72:15:fb:5a:a4:43:cb:62:ea:bc:13:
c5:f5:5a:ef:4a:9f:1f:67:6e:d9:b2:48:d6:1b:0f:
40:df:2e:53:91:64:57:a4:60:e3:21:bd:df:67:1c:
8b:db:ba:8a:5b:46:1f:4b:0e:54:90:dd:22:42:81:
e7:fd:2b:11:c4:46:13:23:1d:85:44:bc:c3:c7:e2:
f9:2f:6d:54:3c:be:42:9d:2a:eb:4a:5c:3a:a5:62:
6b:9f:bf:75:92:90:5c:5a:8e:45:b5:30:3c:32:0c:
d2:17:da:9c:3b:f5:ea:f4:16:4c:dd:66:13:98:2b:
08:16:59:2a:79:c5:ff:3d:0b:b5:9d:d4:7b:1c:18:
e9:4c:9b:f1:f2:57:e8:9e:3f:d4:02:00:05:99:86:
84:76:a4:e1:61:c5:47:05:ef:7e:42:e0:05:3b:d0:
ad:ca:45:0d:2f:39:43:96:3a:38:e4:94:3b:30:00:
31:b9:d5:5c:c5:f1:28:43:76:ac:ab:07:65:29:af:
0c:e4:80:b1:3b:7b:ce:40:3c:18:f8:f2:e5:eb:b4:
99:9e:6c:cc:00:8a:05:93:c3:7a:af:2c:66:59:09:
f3:ef:36:04:55:3f:b1:1b:78:ad:7c:15:f6:b6:7a:
ed:58:26:d5:6a:c0:15:c4:93:a8:ac:50:b2:a3:84:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:80:63:1A:72:03:D1:42:37:59:72:BC:EF:82:E7:B2:D5:15:70
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1wyAYxpyA9FCN1lyvO-C57LVFXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.141.255
89.252.143.0-89.252.148.255
89.252.150.0/24
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
52:8d:6f:65:d9:74:4e:72:6a:1e:53:af:8a:33:3f:ed:34:4a:
d2:27:9e:cc:eb:4e:04:59:58:f4:c2:17:34:97:c2:e7:23:e0:
d4:2e:44:be:43:7d:ab:0f:85:73:56:30:92:8e:b0:6b:03:cf:
80:ce:e2:c9:e1:fd:a1:b3:49:cf:b3:20:27:55:52:f5:07:16:
cf:4f:93:09:4d:4a:40:5d:68:14:60:02:6a:a7:a8:cd:16:08:
6b:ef:ef:62:d5:67:f0:00:f1:91:96:a8:d8:e4:1f:ec:9b:47:
fc:6f:83:f8:01:c8:a7:36:6b:6f:7a:1d:e1:cd:e3:e5:c0:64:
b0:30:c3:b3:7d:74:4f:e1:dd:ec:ff:8e:36:cb:24:b0:09:7d:
b0:a3:c8:8a:2e:0e:a3:73:4b:ef:55:54:a1:6d:7a:c4:0f:51:
1b:57:cc:5e:e1:4e:e0:12:fe:13:8f:86:64:e8:ce:86:bb:7b:
06:05:1d:07:1b:f6:21:a7:93:8d:85:d0:75:c2:2e:e6:e1:62:
88:26:25:ab:c2:fc:a9:dc:53:0e:36:cf:90:2c:d5:74:fb:55:
b4:e9:8a:4d:73:d6:33:a1:7a:9b:7e:58:33:8c:7a:72:ba:20:
67:32:5e:47:c5:96:c9:fb:2d:f9:24:d2:a9:77:f9:c7:52:89:
ab:43:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:17 2025 by rpki-client