Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa
File: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (raw, json)
Hash identifier: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=
Subject key identifier: 1E:DE:85:B0:22:06:2B:15:DA:03:73:F4:A0:8C:A3:A6:12:84:3E:99
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019425FC1391190B57BD1EA938A5511B3738
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 5.180.64.0/24 maxlen: 24
5.180.65.0/24 maxlen: 24
5.180.66.0/24 maxlen: 24
5.180.67.0/24 maxlen: 24
27.123.244.0/22 maxlen: 24
31.214.144.0/24 maxlen: 24
45.10.25.0/24 maxlen: 24
45.10.26.0/24 maxlen: 24
45.10.27.0/24 maxlen: 24
45.91.100.0/24 maxlen: 24
45.91.101.0/24 maxlen: 24
45.91.102.0/24 maxlen: 24
45.91.103.0/24 maxlen: 24
45.133.8.0/24 maxlen: 24
45.133.10.0/23 maxlen: 24
46.251.251.0/24 maxlen: 24
88.218.224.0/24 maxlen: 24
88.218.225.0/24 maxlen: 24
88.218.226.0/24 maxlen: 24
91.210.225.0/24 maxlen: 24
91.210.226.0/24 maxlen: 24
91.210.227.0/24 maxlen: 24
91.216.245.0/24 maxlen: 24
94.199.212.0/24 maxlen: 24
94.199.213.0/24 maxlen: 24
94.199.214.0/24 maxlen: 24
94.199.215.0/24 maxlen: 24
103.241.48.0/22 maxlen: 24
109.230.219.0/24 maxlen: 24
134.255.244.0/24 maxlen: 24
134.255.247.0/24 maxlen: 24
152.89.236.0/24 maxlen: 24
152.89.237.0/24 maxlen: 24
152.89.238.0/24 maxlen: 24
185.194.236.0/24 maxlen: 24
185.194.237.0/24 maxlen: 24
185.194.238.0/24 maxlen: 24
185.194.239.0/24 maxlen: 24
185.242.112.0/24 maxlen: 24
185.242.113.0/24 maxlen: 24
185.242.114.0/24 maxlen: 24
185.242.115.0/24 maxlen: 24
185.245.97.0/24 maxlen: 24
185.245.98.0/24 maxlen: 24
185.245.99.0/24 maxlen: 24
185.248.141.0/24 maxlen: 24
185.248.142.0/24 maxlen: 24
185.248.143.0/24 maxlen: 24
185.250.248.0/24 maxlen: 24
185.250.249.0/24 maxlen: 24
185.250.250.0/24 maxlen: 24
185.250.251.0/24 maxlen: 24
193.32.220.0/24 maxlen: 24
193.32.221.0/24 maxlen: 24
193.32.222.0/24 maxlen: 24
193.32.223.0/24 maxlen: 24
193.135.8.0/24 maxlen: 24
193.135.9.0/24 maxlen: 24
193.135.11.0/24 maxlen: 24
193.142.40.0/24 maxlen: 24
193.142.41.0/24 maxlen: 24
193.142.42.0/24 maxlen: 24
193.142.43.0/24 maxlen: 24
194.26.180.0/24 maxlen: 24
194.26.181.0/24 maxlen: 24
194.26.182.0/24 maxlen: 24
194.26.183.0/24 maxlen: 24
194.45.36.0/24 maxlen: 24
194.45.37.0/24 maxlen: 24
194.45.196.0/23 maxlen: 24
194.48.168.0/24 maxlen: 24
194.48.169.0/24 maxlen: 24
194.48.170.0/24 maxlen: 24
194.48.171.0/24 maxlen: 24
213.190.28.0/24 maxlen: 24
213.190.29.0/24 maxlen: 24
213.190.30.0/24 maxlen: 24
213.190.31.0/24 maxlen: 24
2a0a:51c0::/32 maxlen: 32
2a0a:51c1::/32 maxlen: 48
2a0a:51c2::/32 maxlen: 32
2a0a:51c3::/32 maxlen: 32
2a0a:51c4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:13:91:19:0b:57:bd:1e:a9:38:a5:51:1b:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ede85b022062b15da0373f4a08ca3a612843e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:c8:e9:dd:85:5f:34:f6:4a:b3:ac:a6:a6:
a0:95:24:98:1b:9f:64:27:60:88:a4:5e:c7:54:43:
02:6f:4c:93:a1:33:a1:76:31:68:29:ab:48:a0:ac:
fe:9c:b8:09:82:1d:9b:04:ff:86:c9:27:35:ed:ef:
02:9f:bd:10:fd:77:a3:e7:31:32:2d:1c:79:23:e2:
98:50:7f:06:bf:c5:39:bb:da:12:16:de:29:7d:83:
44:d8:b1:5e:2a:77:2a:1c:5a:7c:7c:e3:03:3b:65:
0e:b5:18:e8:85:ba:86:7d:2f:37:c0:a6:f7:5b:e1:
cd:63:8e:4c:7b:39:59:05:0e:2b:09:45:9a:99:b5:
c0:38:42:38:3d:b7:1a:00:87:b4:10:06:0c:1f:a7:
b2:13:b1:b4:5d:7e:f1:29:b0:80:8a:91:d6:c5:c0:
32:e7:0e:c2:e9:96:ef:b4:5e:7d:d7:e5:25:08:55:
2a:78:9e:af:4d:89:c3:3d:e3:47:b0:72:c2:6a:f6:
c7:e6:e4:c4:47:01:6e:b7:14:4c:1c:77:5b:2c:70:
64:b3:14:f9:59:94:32:8d:5b:27:55:3a:f2:6c:0e:
d0:f0:6d:bf:40:45:45:8b:20:7d:31:8a:43:33:e7:
b2:4a:a1:84:13:43:93:20:22:22:75:af:25:b4:44:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:85:B0:22:06:2B:15:DA:03:73:F4:A0:8C:A3:A6:12:84:3E:99
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.64.0/22
27.123.244.0/22
31.214.144.0/24
45.10.25.0-45.10.27.255
45.91.100.0/22
45.133.8.0/24
45.133.10.0/23
46.251.251.0/24
88.218.224.0-88.218.226.255
91.210.225.0-91.210.227.255
91.216.245.0/24
94.199.212.0/22
103.241.48.0/22
109.230.219.0/24
134.255.244.0/24
134.255.247.0/24
152.89.236.0-152.89.238.255
185.194.236.0/22
185.242.112.0/22
185.245.97.0-185.245.99.255
185.248.141.0-185.248.143.255
185.250.248.0/22
193.32.220.0/22
193.135.8.0/23
193.135.11.0/24
193.142.40.0/22
194.26.180.0/22
194.45.36.0/23
194.45.196.0/23
194.48.168.0/22
213.190.28.0/22
IPv6:
2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:b5:2d:94:d3:68:99:1c:40:75:24:fe:0e:95:74:08:f8:b3:
fe:47:7e:8a:ff:cf:1c:07:db:13:bc:3a:82:25:16:9f:74:17:
0f:68:ae:5c:2e:30:3d:7a:dc:36:8c:6d:03:19:89:1e:4b:4a:
38:2a:ea:b5:78:6a:f8:3b:77:78:c9:82:4d:e5:27:45:22:49:
1d:49:70:44:f1:d9:0f:4c:54:aa:b4:5d:dc:ca:6c:9e:5c:07:
c0:74:ee:4d:2a:69:fc:fc:fb:a9:a6:36:95:de:af:23:d7:07:
94:85:4b:eb:66:4c:b0:58:0a:f4:4c:e7:1a:70:04:35:7c:8d:
1b:54:33:00:8c:0d:cc:ba:0a:36:67:83:51:72:91:2c:d2:1b:
6c:b8:d0:74:e8:fe:7a:bb:64:5c:60:64:b4:cc:e7:ec:c7:0d:
7a:cf:ac:18:8e:ad:a3:fb:51:5f:3f:a8:04:9c:92:bb:ae:e0:
f7:0b:27:95:28:62:89:3b:8c:a0:01:b1:7f:17:aa:84:5a:c8:
2f:6b:ea:68:14:bc:94:3f:93:3f:9a:3e:d8:e3:05:4a:66:22:
e5:b4:98:0e:ad:4c:a3:1a:72:ab:aa:6f:03:4c:cf:c9:a9:f0:
01:1b:a9:9a:36:e7:85:8b:66:70:8c:6b:96:27:ea:c1:ef:15:
f8:0d:f1:e0
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAZQl/BORGQtXvR6pOKVRGzc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzAwN2U1MDgyYjhlOGQ4Mjg5MDE4NzE4Y2ZkNTI3YTc4
OTNlNWUwHhcNMjUwMTAyMDc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWRlODViMDIyMDYyYjE1ZGEwMzczZjRhMDhjYTNhNjEyODQzZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1XI6d2FXzT2SrOspqaglSSYG59k
J2CIpF7HVEMCb0yToTOhdjFoKatIoKz+nLgJgh2bBP+GySc17e8Cn70Q/Xej5zEy
LRx5I+KYUH8Gv8U5u9oSFt4pfYNE2LFeKncqHFp8fOMDO2UOtRjohbqGfS83wKb3
W+HNY45MezlZBQ4rCUWambXAOEI4PbcaAIe0EAYMH6eyE7G0XX7xKbCAipHWxcAy
5w7C6ZbvtF591+UlCFUqeJ6vTYnDPeNHsHLCavbH5uTERwFutxRMHHdbLHBksxT5
WZQyjVsnVTrybA7Q8G2/QEVFiyB9MYpDM+eySqGEE0OTICIida8ltERTBQIDAQAB
o4IDDTCCAwkwHQYDVR0OBBYEFB7ehbAiBisV2gNz9KCMo6YShD6ZMB8GA1UdIwQY
MBaAFCfAB+UIK46NgokBhxjP1SeniT5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEt
MmM2NGMyOTEzNTNlLzEvSHQ2RnNDSUdLeFhhQTNQMG9JeWpwaEtFUHBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEtMmM2NGMyOTEzNTNl
LzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCB8QQCAAEwgeoD
BAIFtEADBAIbe/QDBAAf1pAwDAMEAC0KGQMEAi0KGAMEAi1bZAMEAC2FCAMEAS2F
CgMEAC77+zAMAwQFWNrgAwQAWNriMAwDBABb0uEDBAJb0uADBABb2PUDBAJex9QD
BAJn8TADBABt5tsDBACG//QDBACG//cwDAMEAphZ7AMEAJhZ7gMEArnC7AMEArny
cDAMAwQAufVhAwQCufVgMAwDBAC5+I0DBAS5+IADBAK5+vgDBALBINwDBAHBhwgD
BADBhwsDBALBjigDBALCGrQDBAHCLSQDBAHCLcQDBALCMKgDBALVvhwwFgQCAAIw
EDAOAwUGKgpRwAMFACoKUcQwDQYJKoZIhvcNAQELBQADggEBAFy1LZTTaJkcQHUk
/g6VdAj4s/5Hfor/zxwH2xO8OoIlFp90Fw9orlwuMD163DaMbQMZiR5LSjgq6rV4
avg7d3jJgk3lJ0UiSR1JcETx2Q9MVKq0XdzKbJ5cB8B07k0qafz8+6mmNpXeryPX
B5SFS+tmTLBYCvRM5xpwBDV8jRtUMwCMDcy6CjZng1FykSzSG2y40HTo/nq7ZFxg
ZLTM5+zHDXrPrBiOraP7UV8/qASckruu4PcLJ5UoYok7jKABsX8XqoRayC9r6mgU
vJQ/kz+aPtjjBUpmIuW0mA6tTKMacquqbwNMz8mp8AEbqZo254WLZnCMa5Yn6sHv
FfgN8eA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:04 2025 by rpki-client