Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa
File: fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa (raw, json)
Hash identifier: wA10+gQDMIvjO6vwOkogAfMa2WdHrOFvQ0AHKy4MA4g=
Subject key identifier: 7F:05:75:93:9D:A5:3B:42:A5:F0:F2:AA:CF:AA:F4:8A:FB:7E:11:CC
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0198BC2F77FE1E2803AACE18C5B6EFC6CB49
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa
Signing time: Mon 18 Aug 2025 07:58:04 +0000
ROA not before: Mon 18 Aug 2025 07:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.61.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.113.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.125.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
212.98.31.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.231.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.237.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:2f:77:fe:1e:28:03:aa:ce:18:c5:b6:ef:c6:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Aug 18 07:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f0575939da53b42a5f0f2aacfaaf48afb7e11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:2c:7a:7e:3e:4e:f0:78:39:8f:29:c6:f8:
f6:da:90:4c:31:4d:e3:ec:9e:ab:eb:03:0d:43:0b:
e7:1e:1a:79:ef:bc:f3:00:e4:4d:95:d6:e0:4b:6b:
48:45:32:dd:1c:3e:3a:50:f6:9d:fb:75:2d:ed:81:
51:84:50:7c:2d:9e:89:00:13:82:ab:8d:4d:97:e1:
d8:4c:2a:5e:87:76:1b:4d:2d:2d:e3:d5:0a:8b:bb:
b8:d5:d6:11:ec:5f:de:f7:04:16:33:10:87:2d:ed:
1c:40:14:7d:d2:d0:d6:e9:33:73:ce:32:1f:c7:ec:
76:99:ec:f2:89:2a:4d:5e:3c:6f:05:a7:71:d7:a6:
93:24:60:20:67:9c:e8:5b:0f:ab:73:eb:42:9f:89:
61:f6:09:44:0a:7f:8d:31:7c:dd:c2:09:43:f2:2a:
4d:43:60:6d:52:ae:df:0e:d6:33:d5:56:35:26:90:
fd:9f:b6:86:9b:b4:12:64:f3:95:6e:81:3f:14:bb:
73:00:87:1e:a3:da:47:6c:f6:96:45:8e:48:77:34:
32:1f:7d:73:0d:9e:a3:14:a2:62:e5:83:4e:a3:7e:
10:d1:66:39:3d:2f:2c:72:c2:7c:ca:e2:a4:61:32:
3b:42:ff:db:0d:f9:86:25:f5:77:a7:94:17:b6:bc:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:75:93:9D:A5:3B:42:A5:F0:F2:AA:CF:AA:F4:8A:FB:7E:11:CC
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
6a:34:ee:13:6c:21:41:75:92:56:c9:78:ee:0c:fc:85:38:16:
74:c0:a7:bc:43:54:bf:75:2a:5f:67:d1:70:ef:c8:54:3e:7f:
83:28:28:7c:d0:5e:dd:2e:e8:c8:a2:87:10:2b:db:ee:94:a5:
d6:1b:c1:f3:64:0a:b7:51:8f:e1:af:c3:7e:f4:06:b4:d5:4a:
f4:92:7e:b2:ec:d3:3d:03:16:a1:72:7b:dc:5c:8a:35:fe:92:
20:05:24:ad:76:db:7b:93:a4:9f:0b:cf:35:42:18:7d:5c:26:
c0:dc:b6:94:36:86:f6:b5:36:0a:b1:b5:48:ce:bc:94:dc:9a:
ae:87:2f:5c:74:b2:c0:09:97:97:fd:91:3f:f4:66:7e:54:84:
b4:af:bf:a3:91:c1:67:50:65:db:51:70:18:24:46:f3:75:75:
80:40:ff:fe:e2:78:5e:44:ed:c6:de:f4:37:b0:81:0f:70:85:
bc:c0:93:70:e3:c1:36:19:43:b2:22:c9:b6:01:92:bd:5c:cc:
34:22:aa:11:85:ff:e7:f3:4f:19:b9:7f:f2:70:c8:08:e7:9d:
5a:d6:5d:b7:fa:a4:2c:c4:c2:eb:e6:c9:76:07:49:c7:1a:20:
2c:c0:08:e8:c2:81:58:c3:e8:43:a5:c3:e1:28:91:16:c2:f8:
b1:97:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:01:55 2025 by rpki-client