Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/GjU_mJNlJFzzsuxULbJZ8-sONzg.roa
File: GjU_mJNlJFzzsuxULbJZ8-sONzg.roa (raw, json)
Hash identifier: LEJdYlI/AYNepLga7xbm/431PqVRVWZUyVsc0dPwS2Y=
Subject key identifier: 1A:35:3F:98:93:65:24:5C:F3:B2:EC:54:2D:B2:59:F3:EB:0E:37:38
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019778CE0901E1F6738586B345E3F5862248
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/GjU_mJNlJFzzsuxULbJZ8-sONzg.roa
Signing time: Mon 16 Jun 2025 12:54:17 +0000
ROA not before: Mon 16 Jun 2025 12:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:ce:09:01:e1:f6:73:85:86:b3:45:e3:f5:86:22:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jun 16 12:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a353f989365245cf3b2ec542db259f3eb0e3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:91:e9:a6:2f:f7:f4:fb:4a:53:75:1e:bf:
1c:35:26:ad:0a:aa:3f:47:f6:a0:0d:e3:dc:c0:02:
55:af:86:a1:36:eb:9c:a2:e9:db:45:bc:58:a4:18:
29:3a:ad:32:48:73:4c:cf:99:2b:1c:75:60:f6:a9:
e9:44:bb:b7:d2:40:5f:d6:50:87:64:73:3d:6e:79:
c9:58:5c:c5:66:34:97:e1:da:25:2c:6c:32:62:c4:
72:65:28:a7:59:03:e5:e6:53:fb:17:0d:e0:12:a9:
35:76:d9:03:17:fb:ea:4a:bd:3a:7b:07:3e:b9:ac:
e7:d9:fa:c1:f9:f2:40:d1:a0:3d:12:55:77:b8:9e:
bc:fb:31:a7:5f:9d:67:65:af:3e:14:f1:62:98:9f:
58:ba:91:04:34:c1:5d:64:6b:86:75:bb:18:9c:38:
ea:44:0f:17:55:a2:cd:d9:a7:cb:8d:3e:c4:c4:a0:
ac:17:91:ee:dc:93:1f:12:f6:6d:75:e5:06:69:42:
64:db:1f:8a:91:a1:81:f6:c4:95:c9:22:83:9e:e6:
1f:ca:45:26:34:28:21:19:fc:13:f3:e8:5e:2c:2a:
ff:91:86:9c:ac:75:cc:37:d2:e6:64:1c:0e:cc:f1:
ce:30:9a:69:fd:63:28:06:ca:f0:7e:4f:46:9c:e2:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:3F:98:93:65:24:5C:F3:B2:EC:54:2D:B2:59:F3:EB:0E:37:38
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/GjU_mJNlJFzzsuxULbJZ8-sONzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
47:46:06:9d:23:0b:d8:1c:55:7b:25:25:5e:9f:15:19:a1:48:
94:fd:5d:9d:ad:ac:1e:6c:b8:e4:ef:61:0e:0f:b1:be:5e:b4:
09:07:5e:d2:2c:6b:8e:b0:33:ec:f3:e0:17:49:fd:6b:ca:09:
0a:aa:83:b0:75:a5:61:33:7a:c7:e1:50:3f:84:c1:9d:87:5c:
14:3e:3a:03:3e:c1:6c:e6:79:50:5a:32:ad:48:d7:e7:20:9c:
83:01:cf:bd:3f:b7:41:af:e8:3b:ec:86:d0:f1:cb:ab:99:c9:
0e:7e:3c:e9:71:15:b4:64:bb:db:68:a7:ec:76:33:fd:50:1c:
48:a7:45:2f:19:6b:8d:77:75:07:a8:84:1b:2f:17:e9:c2:af:
19:31:ee:90:de:8b:b4:30:25:d3:ea:d9:12:25:af:4d:b2:79:
7e:0b:ba:d6:20:52:4c:04:e0:94:4a:5f:cb:f6:d5:7a:77:f8:
26:6d:c3:7d:bf:1d:8a:9d:54:f9:4a:0c:4d:8f:1f:38:cd:8c:
2e:b2:2f:4d:cf:d1:39:e7:fe:4e:43:90:a1:50:ea:78:35:99:
d1:e3:da:fb:3d:b5:8e:43:9c:b0:5b:49:8c:ff:a8:d3:19:b8:
b5:31:91:8a:56:09:6d:22:c4:2a:fa:0f:26:0a:eb:9f:30:e8:
34:71:9a:eb
-----BEGIN CERTIFICATE-----
MIIHpzCCBo+gAwIBAgISAZd4zgkB4fZzhYazReP1hiJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjUwNjE2MTI1NDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTM1M2Y5ODkzNjUyNDVjZjNiMmVjNTQyZGIyNTlmM2ViMGUzNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vOR6aYv9/T7SlN1Hr8cNSatCqo/
R/agDePcwAJVr4ahNuucounbRbxYpBgpOq0ySHNMz5krHHVg9qnpRLu30kBf1lCH
ZHM9bnnJWFzFZjSX4dolLGwyYsRyZSinWQPl5lP7Fw3gEqk1dtkDF/vqSr06ewc+
uazn2frB+fJA0aA9ElV3uJ68+zGnX51nZa8+FPFimJ9YupEENMFdZGuGdbsYnDjq
RA8XVaLN2afLjT7ExKCsF5Hu3JMfEvZtdeUGaUJk2x+KkaGB9sSVySKDnuYfykUm
NCghGfwT8+heLCr/kYacrHXMN9LmZBwOzPHOMJpp/WMoBsrwfk9GnOL83QIDAQAB
o4IEszCCBK8wHQYDVR0OBBYEFBo1P5iTZSRc87LsVC2yWfPrDjc4MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvR2pVX21KTmxKRnp6c3V4VUxiSlo4LXNPTnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICxwYIKwYBBQUHAQcBAf8EggK2MIICsjCCAp8EAgABMIIC
lwMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp
UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ
IDgDBANZIIgDBAJZIKwDBAJZIPwDBAJZIkQDBANZIsADBAJZIswDBAJZIugDBANZ
IwgDBANZIygDBAJZI1QDBAJZI8gDBAJZJJwDBAJZJSwDBABZJWgDBAJZJiADBAJZ
JkADBAJZJkwDBAJZJ0wDBAJZJ1QDBANZJ2ADBANZJ3ADBAJZKOQDBAZZKUADBAJZ
KkADBANZKkgDBAJZKmgDBAJZKoADBAJZKrQDBAJZKuADBAJZK4ADBAJZK6gDBAJZ
LJgDBAJZLSgDBAJZLqQwCwMEB1xygAMDAlxwAwQDXXFAAwQDXXFQAwQCXXFcAwQC
XXH0AwQDXXOIAwMAXXQDBARddTAwDAMEAl11RAMEBF11QAMEA111gDAMAwQCXXWM
AwQDXXWQMAwDBAJddZwDBAJddagDBAJddrADBAJddrwDBANdd2ADBAJdd2wDBANd
d4AwDAMEAl13jAMEA113kAMEA113oDAMAwQCXXfEAwQEXXfAMAwDBAJdd+QDBARd
d+ADBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQCvNBoAwQC
vNBwAwQDvNB4AwQCvNDAAwQCvNDMAwQDvNHYMAwDBAS80vADBAK80vgDBAK81AAD
BAO81AgDBAO81BgDBAO81CgDBAK81SQDBAK81TQDBAK81dwDBAK81ewDBAK81fQD
BAK81jwDBAK81ogDBAG81pIDBAO81sgDBAK81/wDAwC87QMEBdQAwDANBAIAAjAH
AwUDKgIKMDANBgkqhkiG9w0BAQsFAAOCAQEAR0YGnSML2BxVeyUlXp8VGaFIlP1d
na2sHmy45O9hDg+xvl60CQde0ixrjrAz7PPgF0n9a8oJCqqDsHWlYTN6x+FQP4TB
nYdcFD46Az7BbOZ5UFoyrUjX5yCcgwHPvT+3Qa/oO+yG0PHLq5nJDn486XEVtGS7
22in7HYz/VAcSKdFLxlrjXd1B6iEGy8X6cKvGTHukN6LtDAl0+rZEiWvTbJ5fgu6
1iBSTATglEpfy/bVenf4Jm3Dfb8dip1U+UoMTY8fOM2MLrIvTc/ROef+TkOQoVDq
eDWZ0ePa+z21jkOcsFtJjP+o0xm4tTGRilYJbSLEKvoPJgrrnzDoNHGa6w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:06:24 2025 by rpki-client