Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/vyRqPubr78kinBziiMEaPG49ruw.roa
File: vyRqPubr78kinBziiMEaPG49ruw.roa (raw, json)
Hash identifier: 9bi61mv9b1sVW+H/ztvpnoQsGJ5Kou6WnHLuM2n1U7U=
Subject key identifier: BF:24:6A:3E:E6:EB:EF:C9:22:9C:1C:E2:88:C1:1A:3C:6E:3D:AE:EC
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 0198CE24552837DAFCCAEFF75CA0AC7483D1
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/vyRqPubr78kinBziiMEaPG49ruw.roa
Signing time: Thu 21 Aug 2025 19:39:04 +0000
ROA not before: Thu 21 Aug 2025 19:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48551
IP address blocks: 5.253.225.0/24 maxlen: 24
31.193.186.0/24 maxlen: 24
45.94.252.0/24 maxlen: 24
45.94.254.0/24 maxlen: 24
45.94.255.0/24 maxlen: 24
45.150.150.0/24 maxlen: 24
45.159.196.0/24 maxlen: 24
45.159.197.0/24 maxlen: 24
45.159.198.0/24 maxlen: 24
45.159.199.0/24 maxlen: 24
91.217.177.0/24 maxlen: 24
103.216.60.0/24 maxlen: 24
103.216.61.0/24 maxlen: 24
103.216.62.0/24 maxlen: 24
103.216.63.0/24 maxlen: 24
157.119.188.0/24 maxlen: 24
157.119.190.0/24 maxlen: 24
157.119.191.0/24 maxlen: 24
185.63.114.0/24 maxlen: 24
185.74.221.0/24 maxlen: 24
185.86.180.0/24 maxlen: 24
185.86.181.0/24 maxlen: 24
185.128.40.0/24 maxlen: 24
185.149.192.0/24 maxlen: 24
185.159.189.0/24 maxlen: 24
185.228.58.0/24 maxlen: 24
185.229.135.0/24 maxlen: 24
185.236.36.0/24 maxlen: 24
185.236.37.0/24 maxlen: 24
185.236.38.0/24 maxlen: 24
185.236.39.0/24 maxlen: 24
185.238.143.0/24 maxlen: 24
194.147.212.0/24 maxlen: 24
194.147.222.0/24 maxlen: 24
195.114.4.0/24 maxlen: 24
195.114.5.0/24 maxlen: 24
195.114.8.0/24 maxlen: 24
195.114.9.0/24 maxlen: 24
2a0d:9500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:24:55:28:37:da:fc:ca:ef:f7:5c:a0:ac:74:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Aug 21 19:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf246a3ee6ebefc9229c1ce288c11a3c6e3daeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:56:a6:93:f6:da:04:f3:10:f5:a6:1d:b6:
a0:2a:87:81:62:a3:3f:32:10:45:9e:e0:ec:c7:f3:
a0:4c:aa:9a:c0:fd:a1:14:d0:31:a6:c3:c8:47:98:
6e:6a:95:c1:8d:f4:66:37:ce:3c:5e:e9:16:be:30:
b5:be:ca:3c:3e:a1:ff:b9:70:ac:6c:87:0d:2d:88:
dc:3a:a1:6a:bd:f6:4e:21:7f:38:20:24:ff:18:ed:
18:93:72:80:06:81:3a:81:99:20:58:dd:84:95:d5:
87:4c:25:f1:93:81:ac:a1:5a:fd:47:cc:ea:47:35:
31:99:92:a2:aa:b2:4d:a8:39:a2:d1:36:11:15:76:
4d:c9:4c:53:6d:a2:4a:70:33:35:31:e0:0a:7d:06:
7f:b1:4d:f3:39:fd:6e:31:87:3f:5a:05:a8:18:4b:
88:00:f8:d7:aa:0b:dc:28:14:a8:30:c0:b7:c3:5f:
92:ee:95:54:ad:a6:dd:61:ef:36:9e:ca:7f:6d:b6:
0b:bc:f6:dd:d6:0e:85:03:95:36:f5:4e:9a:ec:aa:
3b:60:00:39:75:9b:10:bc:8c:5f:98:28:ac:3e:17:
7e:59:9f:7f:f6:96:51:b2:9f:f0:ff:e3:46:01:86:
fb:41:d7:fd:a9:7e:a8:fd:1d:0e:74:a6:c6:c8:7d:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:6A:3E:E6:EB:EF:C9:22:9C:1C:E2:88:C1:1A:3C:6E:3D:AE:EC
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/vyRqPubr78kinBziiMEaPG49ruw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.225.0/24
31.193.186.0/24
45.94.252.0/24
45.94.254.0/23
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
103.216.60.0/22
157.119.188.0/24
157.119.190.0/23
185.63.114.0/24
185.74.221.0/24
185.86.180.0/23
185.128.40.0/24
185.149.192.0/24
185.159.189.0/24
185.228.58.0/24
185.229.135.0/24
185.236.36.0/22
185.238.143.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a0d:9500::/29
Signature Algorithm: sha256WithRSAEncryption
a0:35:ea:e7:5e:e4:15:63:0a:6c:1d:10:7d:55:27:7e:88:59:
a8:35:05:17:f9:39:a4:3e:c4:76:2c:a1:56:a2:f1:aa:03:25:
d8:94:83:3f:98:34:84:c7:bb:2e:ba:99:12:d4:6d:c6:b6:eb:
88:a4:64:ed:39:f5:f9:bd:38:e0:8a:3d:30:5f:c6:df:88:f6:
98:55:a8:be:5f:68:d9:e1:b3:08:fd:f1:a6:c2:5d:9f:df:c1:
f6:5c:98:7a:d9:d3:8e:28:5a:5c:87:69:e2:9f:49:ea:fe:c8:
47:b3:52:32:1d:db:7c:d5:22:9e:9b:e5:ef:aa:48:da:43:0c:
ae:ae:b6:57:6e:2a:16:b9:79:89:77:28:84:df:99:4f:ce:10:
80:e3:1b:9e:13:f7:78:cf:60:33:aa:3c:2a:6d:54:19:c8:2d:
98:93:d1:a5:90:12:16:a6:bd:d6:c9:7f:57:8a:c8:a9:8d:60:
8d:2d:a4:96:fc:4a:57:08:76:b2:84:c8:81:cc:40:ca:b5:ce:
31:4a:59:e0:51:7d:dc:40:09:fd:cc:31:0a:23:3b:cf:42:50:
e7:9e:23:a1:0d:8c:87:98:a4:fe:48:f7:5e:8d:a8:58:43:47:
d5:3c:0f:a8:f0:c6:79:65:76:0f:0e:c0:4b:5c:8c:0f:94:d8:
11:a4:21:0f
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAZjOJFUoN9r8yu/3XKCsdIPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4
NGU1NWQwHhcNMjUwODIxMTkzOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjI0NmEzZWU2ZWJlZmM5MjI5YzFjZTI4OGMxMWEzYzZlM2RhZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNlWppP22gTzEPWmHbagKoeBYqM/
MhBFnuDsx/OgTKqawP2hFNAxpsPIR5huapXBjfRmN848XukWvjC1vso8PqH/uXCs
bIcNLYjcOqFqvfZOIX84ICT/GO0Yk3KABoE6gZkgWN2EldWHTCXxk4GsoVr9R8zq
RzUxmZKiqrJNqDmi0TYRFXZNyUxTbaJKcDM1MeAKfQZ/sU3zOf1uMYc/WgWoGEuI
APjXqgvcKBSoMMC3w1+S7pVUrabdYe82nsp/bbYLvPbd1g6FA5U29U6a7Ko7YAA5
dZsQvIxfmCisPhd+WZ9/9pZRsp/w/+NGAYb7Qdf9qX6o/R0OdKbGyH3LawIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFL8kaj7m6+/JIpwc4ojBGjxuPa7sMB8GA1UdIwQY
MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt
NTAwMTUzOWQ3MTg1LzEvdnlScVB1YnI3OGtpbkJ6aWlNRWFQRzQ5cnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1
LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBlwQCAAEwgZADBAAF
/eEDBAAfwboDBAAtXvwDBAEtXv4DBAAtlpYDBAItn8QDBABb2bEDBAJn2DwDBACd
d7wDBAGdd74DBAC5P3IDBAC5St0DBAG5VrQDBAC5gCgDBAC5lcADBAC5n70DBAC5
5DoDBAC55YcDBAK57CQDBAC57o8DBADCk9QDBADCk94DBAHDcgQDBAHDcggwDQQC
AAIwBwMFAyoNlQAwDQYJKoZIhvcNAQELBQADggEBAKA16ude5BVjCmwdEH1VJ36I
Wag1BRf5OaQ+xHYsoVai8aoDJdiUgz+YNITHuy66mRLUbca264ikZO059fm9OOCK
PTBfxt+I9phVqL5faNnhswj98abCXZ/fwfZcmHrZ044oWlyHaeKfSer+yEezUjId
23zVIp6b5e+qSNpDDK6utlduKha5eYl3KITfmU/OEIDjG54T93jPYDOqPCptVBnI
LZiT0aWQEhamvdbJf1eKyKmNYI0tpJb8SlcIdrKEyIHMQMq1zjFKWeBRfdxACf3M
MQojO89CUOeeI6ENjIeYpP5I916NqFhDR9U8D6jwxnlldg8OwEtcjA+U2BGkIQ8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:23 2025 by rpki-client