Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/u1CnbOWLzLXHMIAGQgwkM6vFUAQ.roa
File: u1CnbOWLzLXHMIAGQgwkM6vFUAQ.roa (raw, json)
Hash identifier: K3i75EIlXpx8ZbQow3ibFiQPjkMER64km2kkkaJJ48Q=
Subject key identifier: BB:50:A7:6C:E5:8B:CC:B5:C7:30:80:06:42:0C:24:33:AB:C5:50:04
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01979D340CCA1145488119C757C5E13CF703
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/u1CnbOWLzLXHMIAGQgwkM6vFUAQ.roa
Signing time: Mon 23 Jun 2025 14:32:03 +0000
ROA not before: Mon 23 Jun 2025 14:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.187.33.0/24 maxlen: 24
37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.151.73.0/24 maxlen: 24
45.151.74.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.136.0/24 maxlen: 24
83.172.138.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.159.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
93.113.99.0/24 maxlen: 24
93.113.215.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
193.3.55.0/24 maxlen: 24
213.111.176.0/24 maxlen: 24
213.111.178.0/24 maxlen: 24
213.111.180.0/24 maxlen: 24
213.111.182.0/24 maxlen: 24
213.111.183.0/24 maxlen: 24
213.111.184.0/24 maxlen: 24
213.111.185.0/24 maxlen: 24
213.111.188.0/24 maxlen: 24
213.111.191.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:46::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:34:0c:ca:11:45:48:81:19:c7:57:c5:e1:3c:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 23 14:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb50a76ce58bccb5c7308006420c2433abc55004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:67:e7:4d:98:e9:7a:fa:97:54:e3:f5:e3:
35:ea:57:b5:3c:69:0a:52:42:cc:ac:19:66:f4:f9:
29:ef:36:3e:ce:7d:a7:ae:fa:eb:cf:6c:6f:74:26:
55:25:40:58:7b:3e:81:78:99:b9:f4:1d:d1:3b:65:
bf:33:b7:d7:5b:9f:4e:03:a7:51:55:d7:95:d0:bb:
4a:2c:e8:fe:0d:3a:0e:0e:ce:e5:a5:22:ed:9c:53:
d8:cf:14:b1:d8:b0:24:6a:73:1a:9e:a1:18:5b:d0:
01:13:70:f7:ce:f6:95:ec:c1:5a:b3:5d:38:7c:d0:
c9:5a:75:58:89:bd:53:6d:b0:22:1a:4c:6a:e4:c4:
df:b6:69:92:bf:d5:a0:98:2b:1e:0f:3b:59:f7:aa:
c2:77:39:e8:0b:cd:e0:a0:af:0b:0f:92:db:09:1e:
63:d9:e4:6b:e9:04:fc:1e:22:06:5d:95:ad:00:64:
7b:3f:1c:fe:45:da:63:75:2b:4e:1e:d8:2c:5b:1f:
f0:f2:03:cc:77:b3:1f:94:d2:e4:b4:ff:56:bc:50:
b1:44:42:be:fa:ce:d5:97:05:ef:2d:81:3a:30:cf:
99:fc:c3:5e:b4:37:20:12:c5:3e:57:fd:c0:13:f1:
b8:d9:6e:6c:7a:d9:03:3d:72:79:45:db:30:4b:4e:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:A7:6C:E5:8B:CC:B5:C7:30:80:06:42:0C:24:33:AB:C5:50:04
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/u1CnbOWLzLXHMIAGQgwkM6vFUAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.33.0/24
37.235.48.0/24
37.235.51.0/24
45.151.73.0-45.151.74.255
45.153.127.0/24
46.183.187.0/24
83.172.134.0-83.172.136.255
83.172.138.0/24
83.172.150.0/24
83.172.159.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.40.105.0/24
89.46.232.0-89.46.236.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
93.113.99.0/24
93.113.215.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.122.187.0/24
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.214.32.0/24
193.3.55.0/24
213.111.176.0/24
213.111.178.0/24
213.111.180.0/24
213.111.182.0-213.111.185.255
213.111.188.0/24
213.111.191.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:358::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
bd:57:97:9a:20:1c:84:62:bd:16:95:b9:21:b4:48:cc:45:4b:
6d:fe:55:7b:b0:19:8f:ac:93:ba:cd:71:12:30:4b:20:f2:a7:
4e:4c:c2:70:e5:75:65:74:60:87:ac:1a:4f:68:eb:ee:5a:5d:
f8:a3:9a:7b:58:72:d9:14:a6:70:9d:99:5d:b4:8a:26:2f:5b:
28:10:95:1f:ec:1a:2b:04:bb:41:36:b1:92:b9:6f:ec:24:99:
7c:aa:9c:ea:32:e6:25:f4:71:b8:b3:2c:06:65:15:98:be:11:
32:92:17:81:f9:18:48:14:c4:eb:39:67:15:05:ac:35:1c:30:
ae:22:e8:c9:21:bb:32:b9:e1:32:e8:1a:d7:95:58:58:6f:ff:
d5:2f:42:fd:75:27:bd:d2:b5:a5:e2:da:36:45:37:7a:22:30:
26:a2:96:63:a0:fb:e9:79:58:63:bc:c3:d8:93:69:37:02:db:
01:b1:2b:dd:ae:bb:64:f9:9e:43:11:12:58:06:05:e5:bb:63:
6a:25:27:ae:31:9d:bd:02:ac:f3:9a:17:95:5a:21:86:ec:de:
71:74:94:66:e2:c6:cd:5f:44:51:05:a7:21:1a:86:e5:b1:36:
5f:a1:6e:0b:2c:64:d9:41:a3:a7:44:1c:a4:ef:c7:f9:c9:23:
6b:56:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:44:59 2025 by rpki-client