Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/DLqkJtVUmV3t_NSFK9gSKIls7d0.roa
File: DLqkJtVUmV3t_NSFK9gSKIls7d0.roa (raw, json)
Hash identifier: mC4NzL71O1LVPsjh1kWalWyRrj4+h6csfx67YmiitPc=
Subject key identifier: 0C:BA:A4:26:D5:54:99:5D:ED:FC:D4:85:2B:D8:12:28:89:6C:ED:DD
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 0197A24C529D7D5DF555B098557095594904
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/DLqkJtVUmV3t_NSFK9gSKIls7d0.roa
Signing time: Tue 24 Jun 2025 14:16:40 +0000
ROA not before: Tue 24 Jun 2025 14:16:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.232.0/21 maxlen: 24
37.98.232.0/22 maxlen: 24
37.98.232.0/23 maxlen: 23
37.98.232.0/24 maxlen: 24
37.98.233.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.234.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 24
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
136.242.128.0/17 maxlen: 17
138.12.128.0/17 maxlen: 17
148.139.0.0/16 maxlen: 16
148.139.0.0/24 maxlen: 24
148.139.1.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.4.0/22 maxlen: 24
148.139.8.0/22 maxlen: 24
148.139.12.0/22 maxlen: 24
148.139.16.0/22 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.29.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 24
148.139.48.0/20 maxlen: 24
148.139.64.0/20 maxlen: 24
148.139.80.0/20 maxlen: 24
148.139.96.0/22 maxlen: 24
148.139.100.0/22 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.105.0/24 maxlen: 24
148.139.108.0/22 maxlen: 24
148.139.112.0/22 maxlen: 24
148.139.116.0/22 maxlen: 24
148.139.120.0/22 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.125.0/24 maxlen: 24
148.139.136.0/22 maxlen: 24
148.139.140.0/24 maxlen: 24
148.139.141.0/24 maxlen: 24
148.139.142.0/24 maxlen: 24
148.139.143.0/24 maxlen: 24
148.139.144.0/22 maxlen: 24
148.139.144.0/24 maxlen: 24
148.139.148.0/22 maxlen: 24
148.139.152.0/22 maxlen: 24
148.139.156.0/22 maxlen: 24
148.139.160.0/20 maxlen: 24
148.139.176.0/20 maxlen: 24
148.139.192.0/24 maxlen: 24
148.139.193.0/24 maxlen: 24
148.139.214.0/24 maxlen: 24
148.139.215.0/24 maxlen: 24
157.5.128.0/17 maxlen: 17
157.70.0.0/17 maxlen: 17
163.120.128.0/17 maxlen: 17
165.171.0.0/17 maxlen: 17
2a04:37c0::/29 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:3910::/48 maxlen: 48
2a04:37c0:3920::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:4c:52:9d:7d:5d:f5:55:b0:98:55:70:95:59:49:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Jun 24 14:16:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbaa426d554995dedfcd4852bd81228896ceddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fa:5d:06:bd:0e:bb:87:fd:b4:c6:17:d1:94:
13:3b:32:9f:00:a1:24:d0:68:88:31:9e:bb:26:9c:
1e:75:b3:46:73:6f:1a:60:0d:4e:f6:e1:bf:ac:96:
9d:68:f0:58:bf:a8:bc:b2:9d:1f:da:86:a6:c2:e5:
dc:ef:4d:e9:68:34:9f:f2:f6:37:99:52:ac:90:ac:
90:61:86:ab:5d:36:d2:56:b5:65:85:b0:75:aa:c6:
3a:5b:c9:1f:3d:4f:e9:9e:14:9e:64:a7:e1:ce:34:
77:d7:7b:03:48:f8:75:57:c2:50:a6:29:79:56:31:
c5:ec:78:c6:f3:90:a4:24:29:af:ba:5d:d4:2d:f5:
d5:27:ad:ca:86:9a:5b:f5:2b:d2:35:24:b7:2c:61:
28:9b:92:4e:0d:55:c1:85:9b:a3:91:34:a0:99:13:
60:00:6d:19:1e:52:85:2a:89:ed:12:bb:e9:85:88:
12:33:06:3a:fa:89:2c:48:5b:d6:36:ca:4d:07:84:
00:0e:ee:f5:73:33:3e:70:2d:7d:c0:e3:f0:d2:a2:
3a:42:21:08:77:2e:96:de:6f:7b:cd:d9:3a:8e:e6:
b4:c9:79:ca:f9:37:0f:3e:74:54:66:bf:2b:7f:6c:
0c:f2:05:89:14:a0:6a:53:bd:d5:9a:c7:94:5a:6e:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:A4:26:D5:54:99:5D:ED:FC:D4:85:2B:D8:12:28:89:6C:ED:DD
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/DLqkJtVUmV3t_NSFK9gSKIls7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:9f:41:da:41:1e:eb:a8:77:3a:67:75:ca:b0:d8:9f:5f:a9:
ec:1f:de:77:06:30:a4:49:c0:6b:16:c7:cc:d7:08:bf:7f:4e:
a5:cf:f6:bc:ac:a1:15:ba:c9:3d:e8:7f:b6:cd:10:1c:41:78:
bc:52:eb:a8:b8:53:d1:c0:06:ef:e4:dc:5f:b5:6e:43:b2:5e:
80:c6:b5:99:c4:1f:26:ed:b0:a2:6c:d5:06:16:a1:82:1a:2b:
47:0e:a3:be:2f:1b:8b:07:42:b4:3d:24:cd:db:13:e6:31:62:
ca:e6:98:a1:d7:61:91:30:0e:ec:9f:66:84:56:bd:5f:e3:dc:
d7:7f:1e:1f:78:c2:06:31:11:8d:90:88:ab:fc:dd:65:2b:7b:
90:0f:11:55:1c:48:a9:1a:f7:6f:17:23:a1:af:7f:44:fb:ec:
24:8b:77:69:03:82:9b:81:33:95:46:c3:b3:ad:58:fb:3b:d9:
8f:37:37:2e:e9:95:8c:ee:2e:74:27:be:d6:9d:7d:a4:ab:2c:
81:70:fd:f0:4d:20:5a:58:8c:f3:37:ca:70:0d:42:d6:1e:a6:
fe:a3:eb:61:85:10:1f:d0:1c:83:69:6c:3a:19:3d:c8:73:49:
e3:b0:2c:fd:2b:6b:12:2d:59:3e:48:2b:bc:e1:f6:f4:d8:11:
54:13:3c:5f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZeiTFKdfV31VbCYVXCVWUkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4
ZTcxYTUwHhcNMjUwNjI0MTQxNjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2JhYTQyNmQ1NTQ5OTVkZWRmY2Q0ODUyYmQ4MTIyODg5NmNlZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vpdBr0Ou4f9tMYX0ZQTOzKfAKEk
0GiIMZ67JpwedbNGc28aYA1O9uG/rJadaPBYv6i8sp0f2oamwuXc703paDSf8vY3
mVKskKyQYYarXTbSVrVlhbB1qsY6W8kfPU/pnhSeZKfhzjR313sDSPh1V8JQpil5
VjHF7HjG85CkJCmvul3ULfXVJ63Khppb9SvSNSS3LGEom5JODVXBhZujkTSgmRNg
AG0ZHlKFKontErvphYgSMwY6+oksSFvWNspNB4QADu71czM+cC19wOPw0qI6QiEI
dy6W3m97zdk6jua0yXnK+TcPPnRUZr8rf2wM8gWJFKBqU73VmseUWm4YTwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFAy6pCbVVJld7fzUhSvYEiiJbO3dMB8GA1UdIwQY
MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt
YjI5ZjEwY2MwMzI4LzEvRExxa0p0VlVtVjN0X05TRks5Z1NLSWxzN2QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4
LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQDJWLoAwQH
iPKAAwQHigyAAwMAlIsDBAedBYADBAedRgADBAejeIADBAelqwAwDQQCAAIwBwMF
AyoEN8AwDQYJKoZIhvcNAQELBQADggEBAI2fQdpBHuuodzpndcqw2J9fqewf3ncG
MKRJwGsWx8zXCL9/TqXP9rysoRW6yT3of7bNEBxBeLxS66i4U9HABu/k3F+1bkOy
XoDGtZnEHybtsKJs1QYWoYIaK0cOo74vG4sHQrQ9JM3bE+YxYsrmmKHXYZEwDuyf
ZoRWvV/j3Nd/Hh94wgYxEY2QiKv83WUre5APEVUcSKka928XI6Gvf0T77CSLd2kD
gpuBM5VGw7OtWPs72Y83Ny7plYzuLnQnvtadfaSrLIFw/fBNIFpYjPM3ynANQtYe
pv6j62GFEB/QHINpbDoZPchzSeOwLP0raxItWT5IK7zh9vTYEVQTPF8=
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:44:50 2025 by rpki-client