Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/nQWi6amR_qcuwksKUqZBYPI5MkQ.roa
File: nQWi6amR_qcuwksKUqZBYPI5MkQ.roa (raw, json)
Hash identifier: deAg4an+AFgHQs+zd8oYxOw/amzJmpB2JJ48YPqhCOY=
Subject key identifier: 9D:05:A2:E9:A9:91:FE:A7:2E:C2:4B:0A:52:A6:41:60:F2:39:32:44
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01965CC228FAC1B6BB42E2AB8C1679F974AA
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/nQWi6amR_qcuwksKUqZBYPI5MkQ.roa
Signing time: Tue 22 Apr 2025 09:09:10 +0000
ROA not before: Tue 22 Apr 2025 09:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51684
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
5.181.198.0/24 maxlen: 24
5.181.199.0/24 maxlen: 24
46.161.200.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.216.0/24 maxlen: 24
82.199.217.0/24 maxlen: 24
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
82.199.220.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.200.0/24 maxlen: 24
89.46.201.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.203.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
185.16.26.0/24 maxlen: 24
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.247.36.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.38.0/24 maxlen: 24
185.247.39.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.200.0/24 maxlen: 24
185.254.201.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.133.0/24 maxlen: 24
212.95.134.0/24 maxlen: 24
212.95.135.0/24 maxlen: 24
212.95.136.0/24 maxlen: 24
212.95.137.0/24 maxlen: 24
212.95.138.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
212.95.140.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
212.95.143.0/24 maxlen: 24
212.95.144.0/24 maxlen: 24
212.95.145.0/24 maxlen: 24
212.95.146.0/24 maxlen: 24
212.95.147.0/24 maxlen: 24
212.95.151.0/24 maxlen: 24
212.95.152.0/24 maxlen: 24
212.95.153.0/24 maxlen: 24
212.95.154.0/24 maxlen: 24
212.95.155.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
2a12:f680:80::/48 maxlen: 48
2a12:f680:81::/48 maxlen: 48
2a12:f680:82::/48 maxlen: 48
2a12:f680:84::/48 maxlen: 48
2a12:f680:85::/48 maxlen: 48
2a12:f680:86::/48 maxlen: 48
2a12:f680:281::/48 maxlen: 48
2a12:f680:282::/48 maxlen: 48
2a12:f680:283::/48 maxlen: 48
2a12:f680:284::/48 maxlen: 48
2a12:f680:285::/48 maxlen: 48
2a12:f680:380::/48 maxlen: 48
2a12:f680:381::/48 maxlen: 48
2a12:f680:382::/48 maxlen: 48
2a12:f680:384::/48 maxlen: 48
2a12:f680:385::/48 maxlen: 48
2a12:f680:400::/48 maxlen: 48
2a12:f680:401::/48 maxlen: 48
2a12:f680:402::/48 maxlen: 48
2a12:f680:404::/48 maxlen: 48
2a12:f680:405::/48 maxlen: 48
2a12:f680:480::/48 maxlen: 48
2a12:f680:481::/48 maxlen: 48
2a12:f680:482::/48 maxlen: 48
2a12:f680:484::/48 maxlen: 48
2a12:f680:485::/48 maxlen: 48
2a12:f680:486::/48 maxlen: 48
2a12:f680:487::/48 maxlen: 48
2a12:f680:488::/48 maxlen: 48
2a12:f680:489::/48 maxlen: 48
2a12:f680:490::/48 maxlen: 48
2a12:f680:500::/48 maxlen: 48
2a12:f680:501::/48 maxlen: 48
2a12:f680:502::/48 maxlen: 48
2a12:f680:504::/48 maxlen: 48
2a12:f680:580::/48 maxlen: 48
2a12:f680:581::/48 maxlen: 48
2a12:f680:582::/48 maxlen: 48
2a12:f680:584::/48 maxlen: 48
2a12:f680:585::/48 maxlen: 48
2a12:f680:680::/48 maxlen: 48
2a12:f680:681::/48 maxlen: 48
2a12:f680:682::/48 maxlen: 48
2a12:f680:684::/48 maxlen: 48
2a12:f680:700::/48 maxlen: 48
2a12:f680:701::/48 maxlen: 48
2a12:f680:702::/48 maxlen: 48
2a12:f680:704::/48 maxlen: 48
2a12:f680:780::/48 maxlen: 48
2a12:f680:781::/48 maxlen: 48
2a12:f680:782::/48 maxlen: 48
2a12:f680:784::/48 maxlen: 48
2a12:f680:785::/48 maxlen: 48
2a12:f680:880::/48 maxlen: 48
2a12:f680:881::/48 maxlen: 48
2a12:f680:882::/48 maxlen: 48
2a12:f680:884::/48 maxlen: 48
2a12:f680:900::/48 maxlen: 48
2a12:f680:901::/48 maxlen: 48
2a12:f680:902::/48 maxlen: 48
2a12:f680:904::/48 maxlen: 48
2a12:f680:980::/48 maxlen: 48
2a12:f680:981::/48 maxlen: 48
2a12:f680:982::/48 maxlen: 48
2a12:f680:984::/48 maxlen: 48
2a12:f680:a00::/48 maxlen: 48
2a12:f680:a01::/48 maxlen: 48
2a12:f680:a02::/48 maxlen: 48
2a12:f680:a04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:c2:28:fa:c1:b6:bb:42:e2:ab:8c:16:79:f9:74:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Apr 22 09:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d05a2e9a991fea72ec24b0a52a64160f2393244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:d4:b7:77:cb:53:19:f8:f1:ed:a2:9c:e4:
4b:8e:50:a2:7d:35:47:14:a7:46:ec:81:10:fb:40:
cb:6f:8e:f7:3d:84:8d:1c:4b:29:58:a9:0d:5b:59:
c4:63:7f:68:70:b2:f4:aa:04:dd:e5:d1:51:e5:53:
94:ea:c7:89:05:f5:65:84:dc:a3:98:4a:ab:b8:1f:
fd:7c:7a:d1:f9:d6:2a:d0:f1:d4:c6:97:08:41:48:
4a:ad:5d:fc:2d:23:42:9e:30:eb:3d:31:82:f6:7d:
cc:47:6d:6e:c2:5d:81:c5:9e:3b:76:e9:53:b5:77:
8a:34:c7:c6:05:9e:f7:a9:58:83:b2:c5:93:e3:32:
75:fd:7f:1d:0c:6d:94:30:0b:4b:7a:ec:01:d9:35:
29:ed:83:9f:6b:2e:b2:92:9a:2d:70:1b:df:3a:6f:
f9:88:a0:2a:10:05:c5:97:4b:2f:e8:02:56:9a:51:
73:81:58:f5:f5:fe:48:b2:35:d9:1e:3b:55:8f:76:
2e:52:ad:14:07:59:fc:ea:f7:c4:db:5c:ff:bb:7c:
84:05:7a:4c:7d:c5:f2:af:87:00:d4:e6:50:96:24:
c7:0f:ac:3b:93:3e:4c:57:df:bc:b1:52:64:0a:94:
21:d5:c5:ef:75:6c:06:d0:9d:b4:57:6f:22:5c:33:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:A2:E9:A9:91:FE:A7:2E:C2:4B:0A:52:A6:41:60:F2:39:32:44
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/nQWi6amR_qcuwksKUqZBYPI5MkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/22
46.161.200.0/24
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.141.255
212.95.143.0-212.95.147.255
212.95.151.0-212.95.155.255
223.25.120.0-223.25.126.255
IPv6:
2a12:f680:80::-2a12:f680:82:ffff:ffff:ffff:ffff:ffff
2a12:f680:84::-2a12:f680:86:ffff:ffff:ffff:ffff:ffff
2a12:f680:281::-2a12:f680:285:ffff:ffff:ffff:ffff:ffff
2a12:f680:380::-2a12:f680:382:ffff:ffff:ffff:ffff:ffff
2a12:f680:384::/47
2a12:f680:400::-2a12:f680:402:ffff:ffff:ffff:ffff:ffff
2a12:f680:404::/47
2a12:f680:480::-2a12:f680:482:ffff:ffff:ffff:ffff:ffff
2a12:f680:484::-2a12:f680:489:ffff:ffff:ffff:ffff:ffff
2a12:f680:490::/48
2a12:f680:500::-2a12:f680:502:ffff:ffff:ffff:ffff:ffff
2a12:f680:504::/48
2a12:f680:580::-2a12:f680:582:ffff:ffff:ffff:ffff:ffff
2a12:f680:584::/47
2a12:f680:680::-2a12:f680:682:ffff:ffff:ffff:ffff:ffff
2a12:f680:684::/48
2a12:f680:700::-2a12:f680:702:ffff:ffff:ffff:ffff:ffff
2a12:f680:704::/48
2a12:f680:780::-2a12:f680:782:ffff:ffff:ffff:ffff:ffff
2a12:f680:784::/47
2a12:f680:880::-2a12:f680:882:ffff:ffff:ffff:ffff:ffff
2a12:f680:884::/48
2a12:f680:900::-2a12:f680:902:ffff:ffff:ffff:ffff:ffff
2a12:f680:904::/48
2a12:f680:980::-2a12:f680:982:ffff:ffff:ffff:ffff:ffff
2a12:f680:984::/48
2a12:f680:a00::-2a12:f680:a02:ffff:ffff:ffff:ffff:ffff
2a12:f680:a04::/48
Signature Algorithm: sha256WithRSAEncryption
0f:09:1f:01:fb:e3:c8:24:80:bf:4f:d3:be:66:d7:f6:84:8a:
e3:95:f6:bc:03:bf:0e:80:20:79:2f:bb:66:99:c2:df:de:66:
be:fe:5d:e2:04:b7:3d:0f:8a:73:5f:fb:9a:76:3a:22:fb:82:
d0:85:d1:65:99:c7:09:4c:3c:ec:12:64:e8:60:b0:af:5d:d9:
f7:85:75:f7:30:60:38:f5:00:b5:9e:0d:c7:aa:6a:a5:ba:0e:
d8:69:0b:cd:d8:66:f6:ab:86:4a:d9:74:74:ca:2f:d5:a3:15:
1d:af:c2:b5:14:5f:d7:80:8a:b9:a9:10:ca:1a:11:00:1d:f6:
a4:cb:b8:9d:e2:c5:78:b8:8c:46:4b:ca:e6:12:9a:af:23:32:
de:d2:d4:51:d5:ff:b5:b4:b2:5e:6d:02:95:9e:9e:07:e6:1b:
66:ce:1f:ca:19:b3:33:0c:d1:71:4e:be:c1:f5:28:8a:ab:2f:
64:99:90:ad:42:db:e8:7b:84:b4:07:9b:11:25:f1:bf:f5:ec:
de:37:0a:aa:88:2e:c7:dc:2a:1a:6d:98:bf:6f:b4:55:25:fc:
13:18:75:17:de:55:7c:46:52:bf:37:bf:aa:ed:03:fb:65:85:
49:b8:32:3b:53:a2:f3:8e:63:83:07:ac:28:c0:7e:db:e9:f1:
8e:42:07:48
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgISAZZcwij6wba7QuKrjBZ5+XSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz
MzhmZmUwHhcNMjUwNDIyMDkwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDA1YTJlOWE5OTFmZWE3MmVjMjRiMGE1MmE2NDE2MGYyMzkzMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDnUt3fLUxn48e2inORLjlCifTVH
FKdG7IEQ+0DLb473PYSNHEspWKkNW1nEY39ocLL0qgTd5dFR5VOU6seJBfVlhNyj
mEqruB/9fHrR+dYq0PHUxpcIQUhKrV38LSNCnjDrPTGC9n3MR21uwl2BxZ47dulT
tXeKNMfGBZ73qViDssWT4zJ1/X8dDG2UMAtLeuwB2TUp7YOfay6ykpotcBvfOm/5
iKAqEAXFl0sv6AJWmlFzgVj19f5IsjXZHjtVj3YuUq0UB1n86vfE21z/u3yEBXpM
fcXyr4cA1OZQliTHD6w7kz5MV9+8sVJkCpQh1cXvdWwG0J20V28iXDO2UwIDAQAB
o4IENzCCBDMwHQYDVR0OBBYEFJ0Foumpkf6nLsJLClKmQWDyOTJEMB8GA1UdIwQY
MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt
Y2VlYzQ5MTI0YzBmLzEvblFXaTZhbVJfcWN1d2tzS1VxWkJZUEk1TWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm
LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICSwYIKwYBBQUHAQcBAf8EggI6MIICNjCBgAQCAAEwegME
AgW1xAMEAC6hyAMEBFLH0AMEA1kuyAMEAFvVvwMEAFvZuQMEAbkQGgMEArlfzAME
Arn3JAMEAbn+yAMEALn+yzAMAwQH1F+AAwQB1F+MMAwDBADUX48DBALUX5AwDAME
ANRflwMEAtRfmDAMAwQD3xl4AwQA3xl+MIIBrwQCAAIwggGnMBIDBwcqEvaAAIAD
BwAqEvaAAIIwEgMHAioS9oAAhAMHACoS9oAAhjASAwcAKhL2gAKBAwcBKhL2gAKE
MBIDBwcqEvaAA4ADBwAqEvaAA4IDBwEqEvaAA4QwEQMGAioS9oAEAwcAKhL2gAQC
AwcBKhL2gAQEMBIDBwcqEvaABIADBwAqEvaABIIwEgMHAioS9oAEhAMHASoS9oAE
iAMHACoS9oAEkDARAwYAKhL2gAUDBwAqEvaABQIDBwAqEvaABQQwEgMHByoS9oAF
gAMHACoS9oAFggMHASoS9oAFhDASAwcHKhL2gAaAAwcAKhL2gAaCAwcAKhL2gAaE
MBEDBgAqEvaABwMHACoS9oAHAgMHACoS9oAHBDASAwcHKhL2gAeAAwcAKhL2gAeC
AwcBKhL2gAeEMBIDBwcqEvaACIADBwAqEvaACIIDBwAqEvaACIQwEQMGACoS9oAJ
AwcAKhL2gAkCAwcAKhL2gAkEMBIDBwcqEvaACYADBwAqEvaACYIDBwAqEvaACYQw
EQMGASoS9oAKAwcAKhL2gAoCAwcAKhL2gAoEMA0GCSqGSIb3DQEBCwUAA4IBAQAP
CR8B++PIJIC/T9O+Ztf2hIrjlfa8A78OgCB5L7tmmcLf3ma+/l3iBLc9D4pzX/ua
djoi+4LQhdFlmccJTDzsEmToYLCvXdn3hXX3MGA49QC1ng3Hqmqlug7YaQvN2Gb2
q4ZK2XR0yi/VoxUdr8K1FF/XgIq5qRDKGhEAHfaky7id4sV4uIxGS8rmEpqvIzLe
0tRR1f+1tLJebQKVnp4H5htmzh/KGbMzDNFxTr7B9SiKqy9kmZCtQtvoe4S0B5sR
JfG/9ezeNwqqiC7H3CoabZi/b7RVJfwTGHUX3lV8RlK/N7+q7QP7ZYVJuDI7U6Lz
jmODB6wowH7b6fGOQgdI
-----END CERTIFICATE-----
Generated at Thu May 8 10:37:27 2025 by rpki-client