
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3PuYjT2dSWw6ofPJ6dn61PFPyJ0.roa
File: 3PuYjT2dSWw6ofPJ6dn61PFPyJ0.roa (raw, json)
Hash identifier: zegUEpM06J/ibMjxoWGYwjws2aTwLRL7QbK6PvEUOSk=
Subject key identifier: DC:FB:98:8D:3D:9D:49:6C:3A:A1:F3:C9:E9:D9:FA:D4:F1:4F:C8:9D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197B986B5C342E642B0C35384C40577C7AF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3PuYjT2dSWw6ofPJ6dn61PFPyJ0.roa
Signing time: Sun 29 Jun 2025 02:31:42 +0000
ROA not before: Sun 29 Jun 2025 02:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.138.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.193.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.197.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.200.0/24 maxlen: 24
5.175.201.0/24 maxlen: 24
5.175.202.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.210.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.214.0/24 maxlen: 24
5.175.215.0/24 maxlen: 24
5.175.219.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.40.0/24 maxlen: 24
5.230.102.0/24 maxlen: 32
5.230.113.0/24 maxlen: 24
5.230.114.0/24 maxlen: 24
5.230.116.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.230.199.0/24 maxlen: 24
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.55.0/24 maxlen: 24
5.231.58.0/24 maxlen: 24
5.231.60.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.112.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.227.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.243.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.20.0/24 maxlen: 24
77.90.27.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
83.243.86.0/24 maxlen: 24
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.5.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.174.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.178.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.32.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:10::/48 maxlen: 48
2a02:2fc0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:86:b5:c3:42:e6:42:b0:c3:53:84:c4:05:77:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 29 02:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfb988d3d9d496c3aa1f3c9e9d9fad4f14fc89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:4e:b6:40:4e:12:fb:a9:5e:74:55:0f:a1:
9d:43:d8:82:d3:9c:e8:cc:76:88:8b:14:f7:2e:6f:
9c:e2:4a:7f:14:d2:38:87:72:0f:81:b8:89:b2:be:
a2:ff:eb:e7:9a:81:fa:7f:29:98:aa:3d:08:a3:7f:
98:10:bc:eb:7d:f5:21:12:c7:1c:97:08:05:c7:fb:
81:ef:c9:7d:31:57:0d:35:23:02:17:15:ac:09:7a:
2c:8f:c1:8c:30:d2:f0:75:29:a4:7f:41:0f:79:32:
43:5c:e4:89:9b:79:eb:ab:c1:d6:24:19:77:1c:d0:
84:62:0e:fc:95:d7:17:bf:35:e3:5d:ee:60:0e:82:
c8:e6:e3:48:d4:92:e0:dd:2c:7f:62:2e:c2:00:45:
39:89:9d:b4:6c:9c:f8:ac:e6:82:b3:ce:f9:c0:b4:
ea:5e:49:93:8e:43:d2:08:5c:96:2a:31:b1:61:2d:
90:7b:5e:fc:3b:b6:84:42:b6:1f:46:0c:0e:73:97:
70:ef:6f:6d:0c:3e:c4:fa:f7:8a:8b:1c:8e:07:19:
56:be:32:81:1a:63:36:18:d1:a1:14:63:30:cd:ea:
95:de:b8:5c:0d:e3:ec:8a:4e:5c:ef:56:8f:57:db:
94:57:07:71:36:69:66:83:94:5c:ce:63:d0:ec:b5:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:98:8D:3D:9D:49:6C:3A:A1:F3:C9:E9:D9:FA:D4:F1:4F:C8:9D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3PuYjT2dSWw6ofPJ6dn61PFPyJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.193.0/24
5.175.196.0-5.175.202.255
5.175.204.0/23
5.175.207.0-5.175.215.255
5.175.219.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
11:37:8e:53:e1:a1:cd:84:78:d8:d8:b0:3a:6e:38:b0:f7:3a:
24:d6:65:9e:ab:a2:eb:82:57:02:fc:46:e2:3d:40:f2:7c:a4:
0a:9d:e9:65:f9:5b:d3:37:95:da:ce:79:56:93:be:c9:4d:98:
50:62:3e:69:a8:c2:39:6b:2e:39:9f:c9:ad:cb:88:00:16:77:
3a:db:00:47:7f:43:94:85:cc:64:10:b3:59:0e:c2:ea:3d:0e:
00:d7:8d:9d:d1:5e:ad:50:a5:cd:52:70:91:a1:96:53:5f:bf:
86:fa:db:e3:9b:09:1e:e3:b1:ed:c6:b2:69:42:bc:1f:e9:bb:
87:cd:90:c1:19:be:88:8b:89:d6:50:b1:84:bb:94:0b:c9:d7:
81:3c:dd:8e:ef:29:f8:8a:43:d6:49:e5:d7:5c:40:8f:d8:f8:
38:8e:64:46:be:54:a6:c1:3a:3a:e1:47:2d:57:f4:3c:ff:55:
8d:82:d7:16:b3:2e:8d:97:a7:8c:2c:62:b7:1b:78:9e:92:44:
84:82:6c:3d:28:19:e6:7f:3a:e6:44:8a:df:16:87:51:3a:1e:
ca:b1:01:5c:82:0b:ca:7a:de:4b:bd:f8:91:33:6e:2d:8f:8c:
c5:5f:df:f9:79:bb:30:94:2f:31:91:ae:95:5a:3a:90:1e:1f:
32:9c:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:56:47 2025 by rpki-client