Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/USWcvgNcEilORVKmACRuhwkRBOc.roa
File: USWcvgNcEilORVKmACRuhwkRBOc.roa (raw, json)
Hash identifier: ddQ+Ypi58Q8pIAp3pcektRPTSu+2sdx4cjmGyvh7AqQ=
Subject key identifier: 51:25:9C:BE:03:5C:12:29:4E:45:52:A6:00:24:6E:87:09:11:04:E7
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 0198C6BB5B9ED6827F88B16788F0BFA4FD01
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/USWcvgNcEilORVKmACRuhwkRBOc.roa
Signing time: Wed 20 Aug 2025 09:07:04 +0000
ROA not before: Wed 20 Aug 2025 09:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 62.145.192.0/18 maxlen: 18
62.145.192.0/19 maxlen: 19
62.145.224.0/19 maxlen: 19
80.112.0.0/17 maxlen: 17
80.112.0.0/18 maxlen: 18
80.112.64.0/18 maxlen: 18
80.114.0.0/17 maxlen: 17
80.114.0.0/18 maxlen: 18
80.114.64.0/18 maxlen: 18
80.114.192.0/18 maxlen: 18
80.114.192.0/19 maxlen: 19
80.114.224.0/19 maxlen: 19
80.115.0.0/17 maxlen: 17
80.115.0.0/18 maxlen: 18
80.115.64.0/18 maxlen: 18
80.115.128.0/18 maxlen: 18
80.115.128.0/19 maxlen: 19
80.115.160.0/19 maxlen: 19
82.72.0.0/14 maxlen: 14
82.72.0.0/15 maxlen: 15
82.74.0.0/15 maxlen: 15
82.101.192.0/18 maxlen: 18
82.101.192.0/19 maxlen: 19
82.101.224.0/19 maxlen: 19
82.151.160.0/19 maxlen: 19
82.151.160.0/20 maxlen: 20
82.151.176.0/20 maxlen: 20
82.217.0.0/16 maxlen: 16
82.217.0.0/17 maxlen: 17
82.217.128.0/17 maxlen: 17
83.80.0.0/13 maxlen: 13
83.80.0.0/14 maxlen: 14
83.84.0.0/14 maxlen: 14
84.24.0.0/13 maxlen: 13
84.24.0.0/14 maxlen: 14
84.28.0.0/14 maxlen: 14
84.104.0.0/14 maxlen: 14
84.104.0.0/15 maxlen: 15
84.106.0.0/15 maxlen: 15
85.147.0.0/16 maxlen: 16
85.147.0.0/17 maxlen: 17
85.147.128.0/17 maxlen: 17
89.220.128.0/17 maxlen: 17
89.220.128.0/18 maxlen: 18
89.220.192.0/18 maxlen: 18
94.208.0.0/13 maxlen: 13
94.208.0.0/14 maxlen: 14
94.212.0.0/14 maxlen: 14
185.130.168.0/22 maxlen: 22
212.54.32.0/19 maxlen: 19
212.54.32.0/20 maxlen: 20
212.54.48.0/20 maxlen: 20
212.120.64.0/18 maxlen: 18
212.120.64.0/19 maxlen: 19
212.120.96.0/19 maxlen: 19
212.127.128.0/17 maxlen: 17
212.127.128.0/18 maxlen: 18
212.127.192.0/18 maxlen: 18
212.204.128.0/18 maxlen: 18
212.204.128.0/19 maxlen: 19
212.204.160.0/19 maxlen: 19
213.34.96.0/19 maxlen: 19
213.34.96.0/20 maxlen: 20
213.34.112.0/20 maxlen: 20
213.51.0.0/16 maxlen: 16
213.73.128.0/17 maxlen: 17
213.73.128.0/18 maxlen: 18
213.73.192.0/18 maxlen: 18
217.62.0.0/16 maxlen: 16
217.62.0.0/17 maxlen: 17
217.62.128.0/17 maxlen: 17
217.63.0.0/18 maxlen: 18
217.63.0.0/19 maxlen: 19
217.63.32.0/19 maxlen: 19
217.63.192.0/18 maxlen: 18
217.63.192.0/19 maxlen: 19
217.63.224.0/19 maxlen: 19
217.101.0.0/16 maxlen: 16
217.101.0.0/17 maxlen: 17
217.101.128.0/17 maxlen: 17
217.102.128.0/18 maxlen: 18
217.102.128.0/19 maxlen: 19
217.102.160.0/19 maxlen: 19
217.102.192.0/19 maxlen: 19
217.102.192.0/20 maxlen: 20
217.102.208.0/20 maxlen: 20
217.104.0.0/17 maxlen: 17
217.104.0.0/18 maxlen: 18
217.104.64.0/18 maxlen: 18
217.105.64.0/18 maxlen: 18
217.105.64.0/19 maxlen: 19
217.105.96.0/19 maxlen: 19
217.105.128.0/18 maxlen: 18
217.105.128.0/19 maxlen: 19
217.105.160.0/19 maxlen: 19
217.120.0.0/14 maxlen: 14
217.120.0.0/15 maxlen: 15
217.122.0.0/15 maxlen: 15
2001:b88::/33 maxlen: 33
2001:1c00::/23 maxlen: 23
2001:1c00::/24 maxlen: 24
2001:1d00::/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:bb:5b:9e:d6:82:7f:88:b1:67:88:f0:bf:a4:fd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Aug 20 09:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51259cbe035c12294e4552a600246e87091104e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:1f:21:5c:2e:43:a0:5f:41:69:53:f7:d8:
31:57:c1:02:9e:1c:98:d3:d3:30:a8:a4:9e:42:7e:
e1:d3:50:d3:86:e1:9e:56:a8:b6:fd:0f:e7:5e:f7:
61:4a:54:ec:40:b2:4a:62:e7:ea:a9:c6:72:35:89:
cf:a6:7f:ac:82:4c:b6:06:39:7f:81:9d:97:95:b9:
57:85:fc:49:2b:41:32:07:79:67:92:67:52:84:a3:
7c:76:26:a2:73:e3:96:72:3c:93:92:bb:8c:85:46:
10:13:15:c1:02:b1:f9:18:df:e0:11:9a:db:2c:f0:
24:d7:d6:de:c6:bd:e4:f7:94:0c:34:01:48:a8:0c:
58:e9:6a:03:68:01:1c:4f:cc:16:ee:65:8f:de:bf:
d0:fb:86:e4:3e:85:b8:cc:03:01:fc:9a:48:c4:d9:
22:be:97:4d:b5:c7:ad:e1:f1:fb:ff:ff:9b:ff:ff:
c8:a1:23:fa:8a:6b:6a:68:9d:ef:0f:b9:4e:28:aa:
42:34:6d:bb:20:d2:87:e7:d6:2d:b4:53:6d:f1:3c:
3a:cc:84:94:08:79:41:51:1c:0b:24:a5:bf:1f:44:
0f:a9:2f:db:93:8c:31:d3:93:1b:67:32:f0:1d:1d:
d2:0e:c4:13:26:53:87:f2:a1:a9:7a:0f:90:66:3b:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:9C:BE:03:5C:12:29:4E:45:52:A6:00:24:6E:87:09:11:04:E7
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/USWcvgNcEilORVKmACRuhwkRBOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.192.0/18
80.112.0.0/17
80.114.0.0/17
80.114.192.0-80.115.191.255
82.72.0.0/14
82.101.192.0/18
82.151.160.0/19
82.217.0.0/16
83.80.0.0/13
84.24.0.0/13
84.104.0.0/14
85.147.0.0/16
89.220.128.0/17
94.208.0.0/13
185.130.168.0/22
212.54.32.0/19
212.120.64.0/18
212.127.128.0/17
212.204.128.0/18
213.34.96.0/19
213.51.0.0/16
213.73.128.0/17
217.62.0.0-217.63.63.255
217.63.192.0/18
217.101.0.0/16
217.102.128.0-217.102.223.255
217.104.0.0/17
217.105.64.0-217.105.191.255
217.120.0.0/14
IPv6:
2001:b88::/33
2001:1c00::/23
Signature Algorithm: sha256WithRSAEncryption
3f:4f:e0:05:01:ff:1d:3c:db:01:3a:d0:d3:54:ca:b9:f1:d7:
5c:0a:7b:84:cb:a8:00:7c:f2:aa:ae:11:58:27:75:2a:96:4e:
bf:45:fc:ee:0b:c8:aa:b3:53:73:ca:20:72:40:13:d8:8d:f0:
19:1b:0c:b9:ab:50:c8:2d:28:74:a0:43:cb:0e:db:f2:41:b4:
ab:64:08:16:33:3c:39:af:c5:43:99:c1:b2:0f:d5:96:97:87:
7c:13:eb:35:5b:04:d2:45:0b:64:7e:f5:04:39:4e:ac:2c:c7:
1f:ed:60:04:76:05:4d:67:3f:e0:62:c6:32:c5:3a:37:70:dc:
75:d6:3f:37:c5:c3:90:a6:f8:37:2a:6c:4b:30:a9:a8:80:de:
98:9f:0e:28:d7:45:bf:60:3b:37:71:8a:1c:63:eb:0b:c6:a6:
4c:23:a0:32:19:e6:64:79:95:0e:c3:4b:cd:d9:9e:a9:16:49:
df:7a:2b:ff:4b:70:5e:1a:74:06:77:fe:df:6b:e3:b7:99:ad:
ea:34:8c:c6:16:8e:d7:36:8f:c1:bb:3d:b4:59:1d:3e:bf:d7:
07:f1:a2:7d:6a:54:7b:2c:57:2a:d4:b0:c0:ee:82:40:0f:e0:
63:a7:76:b8:eb:67:e0:c2:5f:35:29:f1:97:d2:a5:1c:02:12:
f7:b2:a1:d5
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgISAZjGu1ue1oJ/iLFniPC/pP0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTk2OWFjNzVhYmNkNTk2OGYxODllMGQ0NWRiYmRhYjI5
ODJiZGEwHhcNMjUwODIwMDkwNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTI1OWNiZTAzNWMxMjI5NGU0NTUyYTYwMDI0NmU4NzA5MTEwNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpwfIVwuQ6BfQWlT99gxV8ECnhyY
09MwqKSeQn7h01DThuGeVqi2/Q/nXvdhSlTsQLJKYufqqcZyNYnPpn+sgky2Bjl/
gZ2XlblXhfxJK0EyB3lnkmdShKN8diaic+OWcjyTkruMhUYQExXBArH5GN/gEZrb
LPAk19bexr3k95QMNAFIqAxY6WoDaAEcT8wW7mWP3r/Q+4bkPoW4zAMB/JpIxNki
vpdNtcet4fH7//+b///IoSP6imtqaJ3vD7lOKKpCNG27INKH59YttFNt8Tw6zISU
CHlBURwLJKW/H0QPqS/bk4wx05MbZzLwHR3SDsQTJlOH8qGpeg+QZjsuCwIDAQAB
o4IC4TCCAt0wHQYDVR0OBBYEFFElnL4DXBIpTkVSpgAkbocJEQTnMB8GA1UdIwQY
MBaAFAGZaax1q81ZaPGJ4NRdu9qymCvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpscHJIV3J6VmxvOFluZzFGMjcycktZSzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82Y2IxNDUtZmU2YS00NWI3LTg4NWYt
NjFkMWY3ZmIxMDQ0LzEvVVNXY3ZnTmNFaWxPUlZLbUFDUnVod2tSQk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82Y2IxNDUtZmU2YS00NWI3LTg4NWYtNjFkMWY3ZmIxMDQ0
LzEvQVpscHJIV3J6VmxvOFluZzFGMjcycktZSzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH2BggrBgEFBQcBBwEB/wSB5jCB4zCBygQCAAEwgcMDBAY+
kcADBAdQcAADBAdQcgAwDAMEBlBywAMEBlBzgAMDAlJIAwQGUmXAAwQFUpegAwMA
UtkDAwNTUAMDA1QYAwMCVGgDAwBVkwMEB1ncgAMDA17QAwQCuYKoAwQF1DYgAwQG
1HhAAwQH1H+AAwQG1MyAAwQF1SJgAwMA1TMDBAfVSYAwCwMDAdk+AwQG2T8AAwQG
2T/AAwMA2WUwDAMEB9lmgAMEBdlmwAMEB9loADAMAwQG2WlAAwQG2WmAAwMC2Xgw
FAQCAAIwDgMGByABC4gAAwQBIAEcMA0GCSqGSIb3DQEBCwUAA4IBAQA/T+AFAf8d
PNsBOtDTVMq58ddcCnuEy6gAfPKqrhFYJ3Uqlk6/RfzuC8iqs1NzyiByQBPYjfAZ
Gwy5q1DILSh0oEPLDtvyQbSrZAgWMzw5r8VDmcGyD9WWl4d8E+s1WwTSRQtkfvUE
OU6sLMcf7WAEdgVNZz/gYsYyxTo3cNx11j83xcOQpvg3KmxLMKmogN6Ynw4o10W/
YDs3cYocY+sLxqZMI6AyGeZkeZUOw0vN2Z6pFknfeiv/S3BeGnQGd/7fa+O3ma3q
NIzGFo7XNo/Buz20WR0+v9cH8aJ9alR7LFcq1LDA7oJAD+Bjp3a462fgwl81KfGX
0qUcAhL3sqHV
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:45 2025 by rpki-client