Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/_6g9hACvWcVAEeTkzJOAyhX-tWg.roa
File: _6g9hACvWcVAEeTkzJOAyhX-tWg.roa (raw, json)
Hash identifier: qUZvDYSWm9vpCRTIRF10lCkqAXJtkr/0IHLPg39jHcQ=
Subject key identifier: FF:A8:3D:84:00:AF:59:C5:40:11:E4:E4:CC:93:80:CA:15:FE:B5:68
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01975E8D26522E7AB3FAFD279016D52158D3
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/_6g9hACvWcVAEeTkzJOAyhX-tWg.roa
Signing time: Wed 11 Jun 2025 10:33:18 +0000
ROA not before: Wed 11 Jun 2025 10:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206065
IP address blocks: 31.25.104.0/21 maxlen: 24
31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.225.0/24 maxlen: 24
37.114.246.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.191.75.0/24 maxlen: 24
37.191.80.0/21 maxlen: 24
37.191.88.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.17.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/21 maxlen: 24
46.34.184.0/22 maxlen: 22
46.34.188.0/22 maxlen: 22
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
109.230.93.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.158.0/23 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.192.0/23 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:8d:26:52:2e:7a:b3:fa:fd:27:90:16:d5:21:58:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jun 11 10:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa83d8400af59c54011e4e4cc9380ca15feb568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:f0:e6:79:c6:7f:f3:71:6f:b4:b1:1e:9c:
52:f1:f9:92:3e:e1:78:7d:13:a4:47:47:06:3a:26:
eb:f2:21:95:a5:ea:95:bd:be:07:1d:7b:35:df:54:
e1:df:2f:3b:4d:9f:87:dd:53:ce:4d:94:f5:98:f4:
06:be:00:13:e0:0e:6e:a0:80:04:97:d3:76:d7:15:
37:df:b3:db:99:0f:df:20:5f:08:bf:b0:ff:a9:dc:
1e:5b:95:ba:af:bf:ee:bc:02:85:b4:ec:c2:30:d7:
ef:9a:38:6b:6c:8c:db:34:98:27:84:0e:85:60:0e:
e0:11:40:b8:54:e7:f5:6e:14:fc:8c:f2:42:23:41:
2d:69:20:cb:e8:4e:61:8d:d5:3c:2e:20:47:f5:4e:
7d:e8:34:2c:e3:d1:71:b1:ff:7d:2d:84:af:ab:35:
7e:62:b7:01:fe:9c:a6:50:24:0d:25:83:bc:15:f9:
7d:82:11:95:66:85:c7:99:f4:a2:aa:a7:7b:80:a7:
0a:78:0a:a1:64:78:bc:9e:0c:75:e2:a7:8e:ee:aa:
36:fb:41:ed:a2:e0:28:4a:92:20:40:cb:08:54:f3:
d0:ab:0a:9a:6e:95:82:2c:40:21:7b:4d:46:fa:3a:
fb:e9:f0:00:2c:01:c1:86:56:d0:f8:b7:dd:05:b6:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:3D:84:00:AF:59:C5:40:11:E4:E4:CC:93:80:CA:15:FE:B5:68
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/_6g9hACvWcVAEeTkzJOAyhX-tWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.75.0/24
37.191.80.0-37.191.91.255
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.122.0/23
188.121.128.0/19
188.136.134.0/24
188.136.141.0/24
188.136.145.0/24
188.136.148.0/24
188.136.151.0/24
188.136.157.0-188.136.159.255
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.203.255
188.136.208.0/23
188.136.212.0-188.136.223.255
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
76:ac:78:ac:d4:6e:aa:7e:e7:bf:52:f5:1a:5d:ad:08:4a:61:
e0:76:1e:5b:a8:92:b8:26:9e:b0:30:80:40:39:d6:cd:45:0b:
3d:2d:df:a9:ed:fa:80:57:e3:fb:96:f4:ad:ca:43:37:44:cf:
c8:d2:9c:4c:26:c5:ef:70:5c:12:17:a5:84:44:80:e4:37:68:
4e:e2:e5:63:c3:48:3b:a9:e8:89:4d:81:06:ee:0e:0d:2d:31:
05:44:40:41:72:80:27:3b:25:b4:67:6d:4e:de:58:01:e2:a9:
98:2b:49:66:99:9e:d3:7e:f1:90:35:b4:d3:9b:4d:ea:a3:78:
b5:a0:50:d0:3a:82:4c:71:ac:a4:6b:48:59:eb:68:f4:84:b3:
42:a6:75:89:0c:a9:85:cc:4e:72:3e:b6:f1:af:97:e1:76:b8:
84:85:d6:d8:4c:80:06:90:b0:e5:ee:99:63:d0:a7:7d:55:70:
7b:15:2b:24:06:aa:f0:82:00:b3:4e:77:94:61:7e:64:56:f9:
4d:51:ae:fd:72:c8:88:04:f0:db:9a:df:2b:a0:42:fe:17:1c:
ed:3c:78:13:f2:97:1b:69:c9:f4:2c:3a:7a:e1:3c:40:bd:8f:
fa:3f:3d:a4:29:2e:c9:b6:38:ef:a9:0f:06:a9:86:24:18:fc:
4d:b9:ca:74
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgISAZdejSZSLnqz+v0nkBbVIVjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjUwNjExMTAzMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmE4M2Q4NDAwYWY1OWM1NDAxMWU0ZTRjYzkzODBjYTE1ZmViNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDDw5nnGf/Nxb7SxHpxS8fmSPuF4
fROkR0cGOibr8iGVpeqVvb4HHXs131Th3y87TZ+H3VPOTZT1mPQGvgAT4A5uoIAE
l9N21xU337PbmQ/fIF8Iv7D/qdweW5W6r7/uvAKFtOzCMNfvmjhrbIzbNJgnhA6F
YA7gEUC4VOf1bhT8jPJCI0EtaSDL6E5hjdU8LiBH9U596DQs49Fxsf99LYSvqzV+
YrcB/pymUCQNJYO8Ffl9ghGVZoXHmfSiqqd7gKcKeAqhZHi8ngx14qeO7qo2+0Ht
ouAoSpIgQMsIVPPQqwqabpWCLEAhe01G+jr76fAALAHBhlbQ+LfdBbbu7QIDAQAB
o4IESDCCBEQwHQYDVR0OBBYEFP+oPYQAr1nFQBHk5MyTgMoV/rVoMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvXzZnOWhBQ3ZXY1ZBRWVUa3pKT0F5aFgtdFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICXAYIKwYBBQUHAQcBAf8EggJLMIICRzCCAjQEAgABMIIC
LAMEAx8ZaAMEAx/Z0AMEBCUTUAMEBiVywAMEACW/SzAMAwQEJb9QAwQCJb9YAwQG
Jd0AAwQEJesQAwQCLYCMAwQCLZB8AwQALiAFAwQALiAJAwQALiAOMAwDBAIuIqQD
BAQuIqAwDAMEAS4isgMEBi4igAMEAU6etgMEAk+EyAMEAE+E1TAMAwQAT4TZAwQB
T4TcAwQAUEdxMAwDBAFQR3oDBAFQR3wDBABQR38DBABRHfMDBANRHfgDBARRW5AD
BAFWbSADBAJWbSQDBABWbSkDBAFWbS4DBABWbTUDBAJWbTgDBAFWbT4DBAFX97QD
BARbuEADBANcPbgDBAJcd0QDBARei6ADBANt5kADBARt5lADBACw3UEDBAC5DD4D
BAK5FUwDBAK5HkwDBAK5KPADBAK5LbwDBAK5RjwDBAG5UqQDBAK5VUQDBAC5aOQD
BAK5hZgwDAMEALmO6QMEArmO6AMEArmsAAMEArm+FAMEArnFRAMEAbnQlgMEALxL
XAMEALxLXgMEAbxLZgMEALxLawMEAbxLbjAMAwQAvEtxAwQBvEt0AwQBvEt6AwQF
vHmAAwQAvIiGAwQAvIiNAwQAvIiRAwQAvIiUAwQAvIiXMAwDBAC8iJ0DBAW8iIAw
DAMEAbyIrgMEAbyIvAMEAryIwDAMAwQAvIjFAwQCvIjIAwQBvIjQMAwDBAK8iNQD
BAW8iMADBALVwxADBATVz8ADBADZQtADBADZQtMwDQQCAAIwBwMFAyoMAQAwDQYJ
KoZIhvcNAQELBQADggEBAHaseKzUbqp+579S9RpdrQhKYeB2HluokrgmnrAwgEA5
1s1FCz0t36nt+oBX4/uW9K3KQzdEz8jSnEwmxe9wXBIXpYREgOQ3aE7i5WPDSDup
6IlNgQbuDg0tMQVEQEFygCc7JbRnbU7eWAHiqZgrSWaZntN+8ZA1tNObTeqjeLWg
UNA6gkxxrKRrSFnraPSEs0KmdYkMqYXMTnI+tvGvl+F2uISF1thMgAaQsOXumWPQ
p31VcHsVKyQGqvCCALNOd5RhfmRW+U1Rrv1yyIgE8Nua3yugQv4XHO08eBPylxtp
yfQsOnrhPEC9j/o/PaQpLsm2OO+pDwaphiQY/E25ynQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:09 2025 by rpki-client