Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5RBinPwOy0Ur02K4skRXrZ57oe4.roa
File: 5RBinPwOy0Ur02K4skRXrZ57oe4.roa (raw, json)
Hash identifier: FohLkPaRCdpVe1POii3jQVhmOCscuDyAYaI/LSwOnms=
Subject key identifier: E5:10:62:9C:FC:0E:CB:45:2B:D3:62:B8:B2:44:57:AD:9E:7B:A1:EE
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01979D340D06801813CB5E7AA73BD6C6A227
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5RBinPwOy0Ur02K4skRXrZ57oe4.roa
Signing time: Mon 23 Jun 2025 14:32:03 +0000
ROA not before: Mon 23 Jun 2025 14:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
83.172.151.0/24 maxlen: 24
83.172.153.0/24 maxlen: 24
83.172.169.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.122.184.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.211.166.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
213.111.177.0/24 maxlen: 24
213.111.186.0/24 maxlen: 24
213.111.187.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f82:abcd::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:34:0d:06:80:18:13:cb:5e:7a:a7:3b:d6:c6:a2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 23 14:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e510629cfc0ecb452bd362b8b24457ad9e7ba1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:0e:8e:75:12:aa:5c:ac:6d:0f:ff:92:ed:
cd:a3:6d:52:59:e6:d9:dc:ab:f4:7a:a2:d6:d2:c4:
67:57:0f:fb:dc:24:9e:e0:5a:4e:dd:32:2f:f7:e1:
fd:3d:01:5c:7a:94:51:55:d8:cb:71:04:bf:7f:d9:
ba:3f:cd:69:a0:10:84:44:a8:ab:23:1b:36:47:f6:
5e:5c:f8:c4:5e:4f:c0:a2:4c:08:22:3c:a6:9c:2b:
fc:0f:1c:b7:d8:e2:6b:f1:30:d2:73:ba:c5:c6:bb:
cc:43:16:d7:0d:1c:2e:cd:c3:dc:f1:d5:5c:ae:ea:
1a:07:28:dc:e8:bb:01:fd:fc:45:d8:c2:ba:4d:bf:
48:42:87:40:e9:ab:f5:0f:d3:8b:d0:d1:68:36:20:
66:47:ea:d7:3e:cf:82:75:92:25:ca:4b:30:47:31:
cf:13:22:78:b6:ff:a5:c9:cf:70:52:c9:67:82:e4:
df:44:44:38:32:90:ab:11:a9:82:de:87:41:29:73:
52:8b:98:06:61:72:26:5a:65:84:2b:1b:6c:4e:09:
7c:aa:c9:f1:c0:41:37:51:ab:7b:7c:38:8c:d5:71:
dd:2c:0f:b4:a8:48:58:20:4a:61:03:62:ae:9f:3d:
e4:56:56:a5:22:b2:9b:b9:ee:22:da:ce:fd:4f:42:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:62:9C:FC:0E:CB:45:2B:D3:62:B8:B2:44:57:AD:9E:7B:A1:EE
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5RBinPwOy0Ur02K4skRXrZ57oe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
45.153.125.0/24
83.172.151.0/24
83.172.153.0/24
83.172.169.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
95.156.205.0/24
103.57.250.0/24
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
185.122.184.0/24
185.193.51.0/24
185.195.65.0/24
188.211.166.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
213.111.177.0/24
213.111.186.0/23
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::/48
2a03:f80:56::/47
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::/48
2a03:f80:359::/48
2a03:f80:370::/47
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f82:abcd::/48
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
33:7b:60:76:6e:c1:40:48:45:f1:71:27:e5:a2:93:c3:cc:7c:
68:46:f6:2a:55:fc:46:26:10:b9:d3:f6:52:fb:ea:92:5a:07:
9c:f1:83:13:24:81:34:14:80:bf:4a:1c:36:1a:42:ea:b8:94:
fb:b3:45:93:04:4e:4f:52:0a:ff:6f:f2:c9:4a:c7:09:6e:29:
46:6a:57:84:c9:82:1c:1f:92:09:b5:cc:5d:90:95:1c:3a:ef:
a4:b8:e7:f3:01:c2:0a:5f:6e:4c:5e:b2:42:dc:15:ea:a7:1e:
85:5b:b2:1a:e9:49:2e:78:a0:f8:82:dc:33:46:c0:b7:70:9b:
37:c4:cd:7c:86:e7:9f:09:db:eb:08:8f:de:28:40:c4:57:65:
de:f1:25:c6:4d:83:64:8e:3c:79:13:d8:36:83:b4:03:05:3a:
08:08:59:10:12:c7:e5:4f:79:d3:82:6b:cc:60:a4:85:af:a5:
a1:7b:93:c1:78:d4:a1:d4:8a:b9:a5:e8:dd:3a:18:6a:23:62:
f7:5d:3b:aa:dd:9f:48:8a:d1:e6:db:6a:5f:ee:b3:ab:a8:35:
a1:c0:e9:5b:b4:a9:cb:95:50:55:8e:35:85:06:36:3d:20:2f:
65:a4:94:66:5f:95:09:24:8c:75:af:27:c8:ca:8f:7b:4f:f9:
ae:11:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:08:51 2025 by rpki-client