Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/cNRaod0wXiYY9QZ7HGvg0HsWHOQ.roa
File: cNRaod0wXiYY9QZ7HGvg0HsWHOQ.roa (raw, json)
Hash identifier: b0HSVu4fm/x7OuI+LvVWiIL2lWBUvgVUFtG9IicvQrI=
Subject key identifier: 70:D4:5A:A1:DD:30:5E:26:18:F5:06:7B:1C:6B:E0:D0:7B:16:1C:E4
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0196AC88D3B80350D815F42A325C1185A93A
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/cNRaod0wXiYY9QZ7HGvg0HsWHOQ.roa
Signing time: Wed 07 May 2025 20:56:10 +0000
ROA not before: Wed 07 May 2025 20:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:1c5a::/48 maxlen: 48
2a06:98c0:1c5b::/48 maxlen: 48
2a06:98c0:1c5c::/48 maxlen: 48
2a06:98c0:1c5d::/48 maxlen: 48
2a06:98c0:1c5e::/48 maxlen: 48
2a06:98c0:1c5f::/48 maxlen: 48
2a06:98c0:1c60::/48 maxlen: 48
2a06:98c0:1c61::/48 maxlen: 48
2a06:98c0:1c62::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:4a::/48 maxlen: 48
2a06:98c1:4b::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:57::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:59::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:88:d3:b8:03:50:d8:15:f4:2a:32:5c:11:85:a9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: May 7 20:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70d45aa1dd305e2618f5067b1c6be0d07b161ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:69:5a:8a:bb:4d:fa:0c:c6:09:50:05:7a:
c4:05:3a:36:7b:e1:72:a6:0f:15:7d:c1:ea:f4:ea:
fa:fc:6d:49:26:0b:77:ed:2b:0d:ed:bd:7e:ba:da:
eb:bc:b2:66:7d:4f:f0:e2:a4:64:6e:44:40:7d:26:
d4:0e:5f:e0:b0:ff:68:0b:54:39:02:f6:6e:c9:ab:
d0:58:ca:6c:2c:b1:53:5b:d8:51:d5:fd:ee:0d:b6:
fe:4c:73:12:38:e1:d0:20:95:18:a5:2d:91:78:92:
a0:88:bc:e8:7e:9d:44:88:cb:0a:c9:a3:ff:03:d8:
92:9a:19:94:56:79:ad:6d:bc:d4:c9:d0:7b:43:1c:
a2:c0:63:cd:e4:5f:82:8d:e9:3d:60:63:16:e3:ac:
05:65:1f:7d:00:af:dd:45:ba:ae:e5:7e:53:bf:16:
9e:9b:69:e6:ae:08:c3:73:dc:c5:09:aa:03:89:c1:
d0:d4:ee:75:09:72:24:50:b0:62:cb:43:f2:5d:b2:
3e:fd:f3:34:da:33:71:96:4d:f7:96:3e:1f:42:30:
b5:a6:3a:37:14:9a:82:36:82:00:92:12:ca:31:0f:
60:71:1b:de:5b:7c:74:1b:c5:f1:13:24:8b:63:f2:
6f:20:47:f4:f4:cc:86:a5:d0:a7:d0:ec:48:42:a0:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:5A:A1:DD:30:5E:26:18:F5:06:7B:1C:6B:E0:D0:7B:16:1C:E4
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/cNRaod0wXiYY9QZ7HGvg0HsWHOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c58:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c5a::-2a06:98c0:1c62:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/46
2a06:98c1:50::-2a06:98c1:59:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
84:4a:78:32:8a:2a:58:c6:20:2a:08:85:e4:80:07:5b:1f:8f:
d9:78:c7:98:51:65:5c:6a:53:66:c0:fd:f6:14:d9:1f:66:e0:
23:ef:39:12:09:55:e4:1b:1f:47:c8:d8:31:ed:bc:65:d0:3f:
e6:2a:d9:45:ea:97:ba:a8:76:88:a8:ca:8f:8c:2c:56:fa:77:
14:02:60:90:55:ae:ab:d6:f9:b2:6f:14:9a:97:d6:21:c5:7c:
57:8c:9d:db:93:83:28:dc:1f:51:1a:1d:2f:51:c5:6c:5d:64:
11:bb:c4:b7:b3:7c:6e:11:dd:26:98:ca:69:68:89:97:84:ba:
f1:4d:6e:31:14:8a:76:a3:51:94:61:fb:5a:26:e6:ff:5a:7e:
92:38:29:bb:c3:e3:d4:ba:54:0e:b3:30:69:80:9f:eb:ec:c7:
f1:e3:2e:3d:1f:49:9b:bd:3c:eb:ba:60:19:6c:50:e2:24:35:
06:23:bc:e1:e7:03:83:37:9f:7d:52:68:10:a7:93:f3:1b:ee:
39:31:38:fc:0e:af:49:d9:7e:2c:17:12:7b:b0:de:26:46:e2:
95:12:76:75:79:cc:a1:cb:5a:74:ba:5d:11:53:44:27:5e:b2:
18:cf:67:13:ff:3e:bd:0b:ed:44:99:b4:6a:8f:be:59:d8:7c:
7f:07:af:fb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgISAZasiNO4A1DYFfQqMlwRhak6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjUwNTA3MjA1NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGQ0NWFhMWRkMzA1ZTI2MThmNTA2N2IxYzZiZTBkMDdiMTYxY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEVpWoq7TfoMxglQBXrEBTo2e+Fy
pg8VfcHq9Or6/G1JJgt37SsN7b1+utrrvLJmfU/w4qRkbkRAfSbUDl/gsP9oC1Q5
AvZuyavQWMpsLLFTW9hR1f3uDbb+THMSOOHQIJUYpS2ReJKgiLzofp1EiMsKyaP/
A9iSmhmUVnmtbbzUydB7QxyiwGPN5F+Cjek9YGMW46wFZR99AK/dRbqu5X5Tvxae
m2nmrgjDc9zFCaoDicHQ1O51CXIkULBiy0PyXbI+/fM02jNxlk33lj4fQjC1pjo3
FJqCNoIAkhLKMQ9gcRveW3x0G8XxEySLY/JvIEf09MyGpdCn0OxIQqD68wIDAQAB
o4IDBDCCAwAwHQYDVR0OBBYEFHDUWqHdMF4mGPUGexxr4NB7FhzkMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvY05SYW9kMHdYaVlZOVFaN0hHdmcwSHNXSE9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGAYIKwYBBQUHAQcBAf8EggEHMIIBAzA+BAIAATA4MAwD
BAaNZUADBAGNZUwwDAMEAY1lUgMEB41lADAMAwQFvHJgAwQAvHJoMAwDBAG8cmoD
BAS8cmAwgcAEAgACMIG5MBIDBwAqBpjAHAEDBwAqBpjAHAowEgMHAioGmMAcDAMH
ACoGmMAcEDASAwcFKgaYwBwgAwcBKgaYwBxIMBIDBwAqBpjAHEsDBwAqBpjAHFgw
EgMHASoGmMAcWgMHACoGmMAcYjASAwcAKgaYwDYZAwcAKgaYwDYaAwcCKgaYwQBA
AwcCKgaYwQBIMBIDBwQqBpjBAFADBwEqBpjBAFgDBwQqBpjBMQADBwIqBpjBMSAD
BwAqBpjBMgAwDQYJKoZIhvcNAQELBQADggEBAIRKeDKKKljGICoIheSAB1sfj9l4
x5hRZVxqU2bA/fYU2R9m4CPvORIJVeQbH0fI2DHtvGXQP+Yq2UXql7qodoioyo+M
LFb6dxQCYJBVrqvW+bJvFJqX1iHFfFeMnduTgyjcH1EaHS9RxWxdZBG7xLezfG4R
3SaYymloiZeEuvFNbjEUinajUZRh+1om5v9afpI4KbvD49S6VA6zMGmAn+vsx/Hj
Lj0fSZu9POu6YBlsUOIkNQYjvOHnA4M3n31SaBCnk/Mb7jkxOPwOr0nZfiwXEnuw
3iZG4pUSdnV5zKHLWnS6XRFTRCdeshjPZxP/Pr0L7USZtGqPvlnYfH8Hr/s=
-----END CERTIFICATE-----
Generated at Mon May 12 12:48:31 2025 by rpki-client