Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/H6es8_RNukCcmpKSU4VhKyWzlXU.roa
File: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (raw, json)
Hash identifier: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=
Subject key identifier: 1F:A7:AC:F3:F4:4D:BA:40:9C:9A:92:92:53:85:61:2B:25:B3:95:75
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01955495752F27937B788FEFE81A2E538D72
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/H6es8_RNukCcmpKSU4VhKyWzlXU.roa
Signing time: Sun 02 Mar 2025 02:00:35 +0000
ROA not before: Sun 02 Mar 2025 02:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57218
IP address blocks: 5.62.192.0/18 maxlen: 18
5.62.192.0/19 maxlen: 19
5.62.192.0/24 maxlen: 24
5.62.193.0/24 maxlen: 24
5.62.194.0/23 maxlen: 23
5.62.196.0/22 maxlen: 22
5.62.200.0/21 maxlen: 21
5.62.208.0/20 maxlen: 20
5.62.224.0/19 maxlen: 19
5.72.0.0/16 maxlen: 16
5.72.0.0/19 maxlen: 19
5.72.32.0/19 maxlen: 19
5.72.64.0/19 maxlen: 19
5.72.96.0/19 maxlen: 19
5.72.128.0/19 maxlen: 19
5.72.160.0/19 maxlen: 19
5.72.192.0/19 maxlen: 19
5.72.224.0/19 maxlen: 19
5.73.0.0/16 maxlen: 16
5.73.0.0/19 maxlen: 19
5.73.32.0/19 maxlen: 19
5.73.64.0/19 maxlen: 19
5.73.96.0/19 maxlen: 19
5.73.128.0/19 maxlen: 19
5.73.160.0/19 maxlen: 19
5.73.192.0/19 maxlen: 19
5.73.224.0/19 maxlen: 19
5.134.128.0/18 maxlen: 18
5.134.128.0/20 maxlen: 22
5.134.128.0/22 maxlen: 22
5.134.132.0/22 maxlen: 22
5.134.136.0/22 maxlen: 22
5.134.140.0/22 maxlen: 22
5.134.144.0/20 maxlen: 22
5.134.144.0/22 maxlen: 22
5.134.148.0/22 maxlen: 22
5.134.152.0/22 maxlen: 22
5.134.156.0/22 maxlen: 22
5.134.160.0/20 maxlen: 20
5.134.160.0/22 maxlen: 22
5.134.164.0/22 maxlen: 22
5.134.168.0/22 maxlen: 22
5.134.172.0/22 maxlen: 22
5.134.176.0/20 maxlen: 20
5.134.176.0/22 maxlen: 22
5.134.180.0/22 maxlen: 22
5.134.184.0/22 maxlen: 22
5.134.191.0/24 maxlen: 24
5.200.96.0/19 maxlen: 19
5.200.96.0/20 maxlen: 20
5.200.112.0/20 maxlen: 20
37.44.56.0/21 maxlen: 21
37.44.56.0/22 maxlen: 22
37.44.60.0/22 maxlen: 22
37.137.0.0/17 maxlen: 21
37.137.0.0/18 maxlen: 21
37.137.0.0/19 maxlen: 19
37.137.32.0/22 maxlen: 22
37.137.36.0/24 maxlen: 24
37.137.38.0/23 maxlen: 23
37.137.40.0/21 maxlen: 21
37.137.48.0/20 maxlen: 20
37.137.64.0/18 maxlen: 18
37.137.128.0/17 maxlen: 17
37.137.128.0/18 maxlen: 18
37.137.192.0/18 maxlen: 18
37.153.176.0/20 maxlen: 20
37.153.176.0/21 maxlen: 21
37.153.184.0/21 maxlen: 21
37.156.48.0/20 maxlen: 20
37.156.48.0/21 maxlen: 21
37.156.56.0/21 maxlen: 21
37.156.152.0/21 maxlen: 21
37.156.152.0/22 maxlen: 22
37.156.156.0/22 maxlen: 22
77.81.192.0/19 maxlen: 19
77.81.192.0/20 maxlen: 20
77.81.208.0/20 maxlen: 20
89.32.0.0/19 maxlen: 19
89.32.0.0/20 maxlen: 20
89.32.16.0/20 maxlen: 20
89.32.96.0/20 maxlen: 20
89.32.96.0/21 maxlen: 21
89.32.104.0/21 maxlen: 21
89.34.32.0/19 maxlen: 19
89.34.32.0/20 maxlen: 20
89.34.32.0/23 maxlen: 23
89.34.32.0/24 maxlen: 24
89.34.33.0/24 maxlen: 24
89.34.34.0/23 maxlen: 23
89.34.36.0/22 maxlen: 22
89.34.40.0/21 maxlen: 21
89.34.48.0/20 maxlen: 20
89.34.128.0/19 maxlen: 19
89.34.128.0/20 maxlen: 20
89.34.144.0/20 maxlen: 20
89.41.192.0/19 maxlen: 19
89.41.192.0/20 maxlen: 20
89.41.208.0/20 maxlen: 20
89.47.64.0/20 maxlen: 20
89.47.64.0/21 maxlen: 21
89.47.72.0/21 maxlen: 21
89.47.128.0/19 maxlen: 19
89.47.128.0/20 maxlen: 20
89.47.144.0/20 maxlen: 20
91.229.214.0/23 maxlen: 24
91.229.214.0/24 maxlen: 24
91.229.215.0/24 maxlen: 24
92.114.64.0/20 maxlen: 20
92.114.64.0/21 maxlen: 21
92.114.72.0/21 maxlen: 21
93.114.16.0/20 maxlen: 20
93.114.16.0/21 maxlen: 21
93.114.24.0/21 maxlen: 21
94.24.0.0/20 maxlen: 20
94.24.0.0/21 maxlen: 21
94.24.8.0/21 maxlen: 21
94.24.16.0/21 maxlen: 21
94.24.16.0/22 maxlen: 22
94.24.20.0/22 maxlen: 22
94.24.80.0/20 maxlen: 20
94.24.80.0/21 maxlen: 21
94.24.88.0/21 maxlen: 21
94.24.96.0/21 maxlen: 21
94.24.96.0/22 maxlen: 22
94.24.100.0/22 maxlen: 22
95.162.0.0/16 maxlen: 17
95.162.0.0/17 maxlen: 17
95.162.0.0/19 maxlen: 19
95.162.0.0/20 maxlen: 20
95.162.16.0/20 maxlen: 20
95.162.32.0/19 maxlen: 19
95.162.32.0/20 maxlen: 20
95.162.48.0/20 maxlen: 20
95.162.64.0/19 maxlen: 19
95.162.64.0/20 maxlen: 20
95.162.80.0/20 maxlen: 20
95.162.96.0/19 maxlen: 19
95.162.96.0/20 maxlen: 20
95.162.112.0/20 maxlen: 20
95.162.128.0/17 maxlen: 17
95.162.128.0/19 maxlen: 21
95.162.128.0/20 maxlen: 21
95.162.128.0/21 maxlen: 21
95.162.144.0/20 maxlen: 21
95.162.152.0/21 maxlen: 21
95.162.160.0/19 maxlen: 21
95.162.160.0/20 maxlen: 21
95.162.160.0/21 maxlen: 21
95.162.168.0/21 maxlen: 21
95.162.176.0/20 maxlen: 21
95.162.176.0/21 maxlen: 21
95.162.192.0/19 maxlen: 19
95.162.192.0/20 maxlen: 20
95.162.208.0/20 maxlen: 20
95.162.224.0/19 maxlen: 24
95.162.224.0/20 maxlen: 20
95.162.224.0/22 maxlen: 22
95.162.228.0/22 maxlen: 22
95.162.232.0/22 maxlen: 22
95.162.236.0/22 maxlen: 22
95.162.240.0/20 maxlen: 20
95.162.248.0/24 maxlen: 24
185.24.136.0/23 maxlen: 23
185.24.136.0/24 maxlen: 24
185.24.137.0/24 maxlen: 24
185.24.228.0/22 maxlen: 22
185.24.228.0/23 maxlen: 23
185.24.230.0/23 maxlen: 23
188.208.64.0/19 maxlen: 19
188.208.64.0/20 maxlen: 20
188.208.80.0/20 maxlen: 20
188.208.144.0/20 maxlen: 20
188.208.144.0/21 maxlen: 21
188.208.152.0/21 maxlen: 21
188.208.156.0/24 maxlen: 24
188.208.157.0/24 maxlen: 24
188.208.158.0/23 maxlen: 23
188.208.160.0/19 maxlen: 19
188.208.160.0/20 maxlen: 20
188.208.176.0/20 maxlen: 20
188.208.224.0/19 maxlen: 19
188.208.224.0/20 maxlen: 20
188.208.240.0/20 maxlen: 20
188.208.243.0/24 maxlen: 24
188.214.4.0/22 maxlen: 22
188.214.4.0/23 maxlen: 23
188.214.6.0/23 maxlen: 23
188.214.6.0/24 maxlen: 24
188.214.7.0/24 maxlen: 24
188.214.84.0/22 maxlen: 22
188.214.84.0/23 maxlen: 23
188.214.86.0/23 maxlen: 23
188.215.24.0/22 maxlen: 22
188.215.24.0/23 maxlen: 23
188.215.26.0/23 maxlen: 23
188.215.88.0/22 maxlen: 22
188.215.88.0/23 maxlen: 23
188.215.90.0/23 maxlen: 23
213.195.32.0/20 maxlen: 20
213.195.32.0/21 maxlen: 21
213.195.32.0/22 maxlen: 22
213.195.36.0/23 maxlen: 23
213.195.38.0/23 maxlen: 23
213.195.40.0/21 maxlen: 21
213.195.48.0/22 maxlen: 22
213.195.48.0/23 maxlen: 23
213.195.50.0/23 maxlen: 23
2a03:ef40::/128 maxlen: 128
2a03:ef42::/34 maxlen: 34
2a03:ef42:4000::/34 maxlen: 34
2a03:ef42:8000::/34 maxlen: 34
2a03:ef42:c000::/34 maxlen: 34
2a03:ef42:c000::/128 maxlen: 128
2a03:ef42:c000::1/128 maxlen: 128
2a03:ef43::/34 maxlen: 34
2a03:ef43::/43 maxlen: 43
2a03:ef43:3::/48 maxlen: 48
2a03:ef43:3:8000::/49 maxlen: 49
2a03:ef43:c000::/48 maxlen: 48
2a03:ef44::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:95:75:2f:27:93:7b:78:8f:ef:e8:1a:2e:53:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Mar 2 02:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa7acf3f44dba409c9a92925385612b25b39575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:66:4d:c6:a6:04:9b:d0:cb:57:1d:69:b0:
e0:d0:c0:2d:42:03:e1:d6:79:f5:50:47:f3:c8:ea:
4e:52:b9:b1:91:8f:67:2e:7d:c4:4a:93:48:2d:90:
2a:58:06:b3:e9:2f:9b:a2:c2:c0:32:f3:28:97:21:
19:77:ee:b2:f1:bb:42:fb:6a:21:1a:b6:b7:c2:67:
d3:4e:ca:3a:fc:43:e9:8f:7e:66:fe:40:37:99:07:
fc:7f:2c:4c:01:f4:51:b0:ef:0e:eb:c1:ab:ac:bf:
cb:40:0b:b3:0c:7a:53:cd:ee:6a:01:69:93:55:5d:
88:3a:59:c5:cf:2f:f7:71:bc:2e:ad:2f:6b:33:77:
18:01:8f:72:b2:a6:07:bc:04:3b:43:6c:fb:67:17:
3b:c8:50:bb:cf:80:f6:c6:2e:24:b7:2b:9a:9b:eb:
ae:29:54:01:0b:2d:cc:cb:d2:46:e7:70:68:5f:3e:
98:a2:9f:cf:62:2d:80:7c:6f:92:36:78:66:a5:13:
e8:82:43:16:ca:cf:92:1f:45:53:73:ea:09:47:62:
94:f9:5c:25:fc:75:55:17:f1:24:4d:8e:11:19:28:
86:28:49:bc:a0:07:f1:f3:7f:e6:5c:c8:2c:ba:63:
87:30:c7:e2:ca:89:db:e0:63:f4:78:f2:3f:75:f0:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:AC:F3:F4:4D:BA:40:9C:9A:92:92:53:85:61:2B:25:B3:95:75
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/H6es8_RNukCcmpKSU4VhKyWzlXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.192.0/18
5.72.0.0/15
5.134.128.0/18
5.200.96.0/19
37.44.56.0/21
37.137.0.0/16
37.153.176.0/20
37.156.48.0/20
37.156.152.0/21
77.81.192.0/19
89.32.0.0/19
89.32.96.0/20
89.34.32.0/19
89.34.128.0/19
89.41.192.0/19
89.47.64.0/20
89.47.128.0/19
91.229.214.0/23
92.114.64.0/20
93.114.16.0/20
94.24.0.0-94.24.23.255
94.24.80.0-94.24.103.255
95.162.0.0/16
185.24.136.0/23
185.24.228.0/22
188.208.64.0/19
188.208.144.0-188.208.191.255
188.208.224.0/19
188.214.4.0/22
188.214.84.0/22
188.215.24.0/22
188.215.88.0/22
213.195.32.0-213.195.51.255
IPv6:
2a03:ef40::/128
2a03:ef42::-2a03:ef43:3fff:ffff:ffff:ffff:ffff:ffff
2a03:ef43:c000::/48
2a03:ef44::/34
Signature Algorithm: sha256WithRSAEncryption
42:c0:72:11:83:45:20:36:ad:21:3f:97:69:26:88:fd:b4:7b:
28:62:c6:03:c3:8a:05:c2:0b:5a:08:8c:35:27:6e:15:95:69:
d8:e2:43:29:0d:64:1e:d0:52:cb:e6:ab:ff:c9:08:1b:1e:c2:
34:a5:d9:f1:1c:94:51:15:24:a4:35:9e:a7:4a:40:5c:f3:b8:
33:f7:22:fc:f7:b5:cb:e5:c1:85:d4:78:13:ec:94:2b:74:09:
e3:e2:e1:c2:7a:3b:52:cd:f2:ba:f9:a6:21:a0:c8:aa:19:a3:
92:81:c0:f5:b9:ad:d9:5b:ae:0b:d9:20:6f:e5:be:1e:05:b9:
77:0f:2c:cb:df:77:b7:08:dc:ae:9d:4b:bd:ef:24:97:0c:12:
3d:d2:80:06:a0:c3:d9:76:e6:30:3a:95:ec:38:ea:7f:85:c4:
5c:83:c2:76:8b:50:0a:87:88:8a:c3:dd:77:d2:17:f0:82:27:
07:7b:04:cc:0c:ce:88:de:48:31:3a:07:2b:69:cf:3c:e3:1d:
37:64:e0:7c:9b:3b:80:8a:4e:37:96:fc:91:4a:ad:d9:71:30:
8e:cf:75:43:14:e6:68:86:01:92:02:11:17:d2:b9:e9:8f:1c:
4f:f3:f4:c7:92:db:d3:21:65:fb:22:1a:cb:2b:c6:ae:28:bc:
c4:c4:e8:51
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgISAZVUlXUvJ5N7eI/v6BouU41yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz
NThlMjMwHhcNMjUwMzAyMDIwMDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmE3YWNmM2Y0NGRiYTQwOWM5YTkyOTI1Mzg1NjEyYjI1YjM5NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMdmTcamBJvQy1cdabDg0MAtQgPh
1nn1UEfzyOpOUrmxkY9nLn3ESpNILZAqWAaz6S+bosLAMvMolyEZd+6y8btC+2oh
Gra3wmfTTso6/EPpj35m/kA3mQf8fyxMAfRRsO8O68GrrL/LQAuzDHpTze5qAWmT
VV2IOlnFzy/3cbwurS9rM3cYAY9ysqYHvAQ7Q2z7Zxc7yFC7z4D2xi4ktyuam+uu
KVQBCy3My9JG53BoXz6Yop/PYi2AfG+SNnhmpRPogkMWys+SH0VTc+oJR2KU+Vwl
/HVVF/EkTY4RGSiGKEm8oAfx83/mXMgsumOHMMfiyonb4GP0ePI/dfDY+wIDAQAB
o4IDKjCCAyYwHQYDVR0OBBYEFB+nrPP0TbpAnJqSklOFYSsls5V1MB8GA1UdIwQY
MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt
NzdjMTA0ODQyMmQ4LzEvSDZlczhfUk51a0NjbXBLU1U0VmhLeVd6bFhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4
LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPgYIKwYBBQUHAQcBAf8EggEtMIIBKTCB6QQCAAEwgeID
BAYFPsADAwEFSAMEBgWGgAMEBQXIYAMEAyUsOAMDACWJAwQEJZmwAwQEJZwwAwQD
JZyYAwQFTVHAAwQFWSAAAwQEWSBgAwQFWSIgAwQFWSKAAwQFWSnAAwQEWS9AAwQF
WS+AAwQBW+XWAwQEXHJAAwQEXXIQMAsDAwNeGAMEA14YEDAMAwQEXhhQAwQDXhhg
AwMAX6IDBAG5GIgDBAK5GOQDBAW80EAwDAMEBLzQkAMEBrzQgAMEBbzQ4AMEArzW
BAMEArzWVAMEArzXGAMEArzXWDAMAwQF1cMgAwQC1cMwMDsEAgACMDUDEQAqA+9A
AAAAAAAAAAAAAAAAMA8DBQEqA+9CAwYGKgPvQwADBwAqA+9DwAADBgYqA+9EADAN
BgkqhkiG9w0BAQsFAAOCAQEAQsByEYNFIDatIT+XaSaI/bR7KGLGA8OKBcILWgiM
NSduFZVp2OJDKQ1kHtBSy+ar/8kIGx7CNKXZ8RyUURUkpDWep0pAXPO4M/ci/Pe1
y+XBhdR4E+yUK3QJ4+Lhwno7Us3yuvmmIaDIqhmjkoHA9bmt2VuuC9kgb+W+HgW5
dw8sy993twjcrp1Lve8klwwSPdKABqDD2XbmMDqV7Djqf4XEXIPCdotQCoeIisPd
d9IX8IInB3sEzAzOiN5IMToHK2nPPOMdN2TgfJs7gIpON5b8kUqt2XEwjs91QxTm
aIYBkgIRF9K56Y8cT/P0x5Lb0yFl+yIayyvGrii8xMToUQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:03 2025 by rpki-client