Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa
File: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (raw, json)
Hash identifier: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=
Subject key identifier: E6:23:9A:A1:70:79:9E:46:30:AF:CB:48:80:55:B2:56:75:C4:86:39
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 0199E32246122C2A25D6BD775AF2A8E04840
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa
Signing time: Tue 14 Oct 2025 14:31:38 +0000
ROA not before: Tue 14 Oct 2025 14:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201838
IP address blocks: 45.12.172.0/22 maxlen: 24
45.81.72.0/22 maxlen: 22
45.86.8.0/22 maxlen: 24
45.89.84.0/22 maxlen: 22
45.89.156.0/22 maxlen: 22
45.90.172.0/22 maxlen: 22
45.91.112.0/22 maxlen: 22
45.93.172.0/22 maxlen: 22
45.94.60.0/22 maxlen: 22
45.94.176.0/22 maxlen: 22
45.95.248.0/22 maxlen: 22
45.117.136.0/22 maxlen: 22
45.128.32.0/22 maxlen: 22
45.128.136.0/22 maxlen: 22
45.132.136.0/21 maxlen: 24
45.133.88.0/22 maxlen: 24
45.141.236.0/22 maxlen: 22
45.144.56.0/22 maxlen: 24
45.144.160.0/22 maxlen: 24
45.146.8.0/22 maxlen: 22
45.146.60.0/22 maxlen: 24
45.148.12.0/22 maxlen: 22
45.148.56.0/22 maxlen: 22
45.148.252.0/22 maxlen: 24
45.149.72.0/22 maxlen: 24
45.149.220.0/22 maxlen: 22
45.150.144.0/22 maxlen: 22
45.152.4.0/22 maxlen: 24
45.153.220.0/22 maxlen: 24
45.159.88.0/22 maxlen: 22
45.159.152.0/22 maxlen: 24
45.248.144.0/22 maxlen: 24
46.102.170.0/23 maxlen: 23
46.102.170.0/24 maxlen: 24
46.102.171.0/24 maxlen: 24
62.133.48.0/22 maxlen: 22
62.197.132.0/22 maxlen: 24
77.75.60.0/22 maxlen: 24
79.171.153.0/24 maxlen: 24
79.171.154.0/23 maxlen: 23
79.171.156.0/22 maxlen: 22
80.76.56.0/22 maxlen: 22
89.36.112.0/20 maxlen: 20
89.43.208.0/21 maxlen: 24
89.45.176.0/20 maxlen: 20
89.222.16.0/20 maxlen: 20
91.209.86.0/24 maxlen: 24
93.113.26.0/23 maxlen: 23
94.176.208.0/23 maxlen: 23
94.177.138.0/23 maxlen: 23
94.247.86.0/23 maxlen: 23
95.214.184.0/22 maxlen: 22
95.214.228.0/22 maxlen: 22
103.7.204.0/22 maxlen: 22
103.205.24.0/22 maxlen: 24
130.255.16.0/22 maxlen: 24
130.255.28.0/22 maxlen: 24
147.12.128.0/17 maxlen: 24
171.22.104.0/22 maxlen: 22
178.239.192.0/22 maxlen: 24
178.239.200.0/22 maxlen: 24
178.255.88.0/21 maxlen: 24
185.59.124.0/22 maxlen: 22
185.71.36.0/22 maxlen: 22
185.103.72.0/22 maxlen: 24
185.111.172.0/22 maxlen: 22
185.115.144.0/22 maxlen: 24
185.121.228.0/22 maxlen: 24
185.229.104.0/22 maxlen: 24
185.230.248.0/22 maxlen: 24
185.236.60.0/22 maxlen: 24
185.237.60.0/22 maxlen: 22
185.238.220.0/22 maxlen: 22
185.240.196.0/22 maxlen: 22
185.241.164.0/22 maxlen: 22
185.245.236.0/22 maxlen: 24
188.212.122.0/23 maxlen: 23
188.215.16.0/23 maxlen: 23
188.215.74.0/23 maxlen: 23
188.241.106.0/23 maxlen: 23
192.166.208.0/22 maxlen: 22
192.166.212.0/22 maxlen: 24
193.42.52.0/22 maxlen: 24
193.164.20.0/22 maxlen: 22
194.4.156.0/22 maxlen: 24
212.132.192.0/18 maxlen: 18
213.32.248.0/22 maxlen: 24
2a02:6b60::/28 maxlen: 28
2a02:6b60::/29 maxlen: 29
2a03:3820::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:22:46:12:2c:2a:25:d6:bd:77:5a:f2:a8:e0:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Oct 14 14:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6239aa170799e4630afcb488055b25675c48639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:0c:9b:2b:ba:ed:7d:81:61:a4:73:f2:a7:
cd:4f:55:32:0d:ef:7a:36:54:38:56:b2:e4:26:0f:
be:0f:83:e5:b8:1f:87:d1:fa:94:a2:5f:4d:f3:d2:
80:5d:19:03:0f:29:57:63:ea:af:97:44:04:ee:af:
9c:4f:44:36:c7:1a:74:b4:6f:60:55:e9:d7:99:7a:
f3:fe:62:78:93:0b:26:21:de:08:e3:6d:f3:16:f8:
45:4c:ef:50:3a:12:55:54:63:8d:4d:00:f2:69:1c:
7c:75:48:b9:54:d4:61:7c:56:4d:15:de:1c:66:82:
1f:be:ba:b5:14:f2:5a:52:6c:64:13:02:e8:8b:99:
19:27:ba:9b:a7:40:eb:3c:28:7f:50:51:15:b1:2b:
e9:c7:24:78:fc:8e:be:4f:36:43:8c:8a:dd:55:64:
f1:a2:41:a6:46:3f:69:60:c0:a7:dd:24:7a:81:ae:
61:db:d2:25:c9:4d:5b:4f:a8:08:f8:45:21:0c:37:
b6:6e:9d:d6:89:6b:ec:aa:2e:d5:96:d0:5e:02:92:
5b:19:82:ed:1a:e6:88:59:6e:30:e9:22:16:79:ad:
5e:f1:96:93:b5:fa:ed:c5:36:a5:ef:a2:d9:3c:63:
61:d1:59:51:63:f1:f7:7e:0c:df:cc:f0:88:0a:b6:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:9A:A1:70:79:9E:46:30:AF:CB:48:80:55:B2:56:75:C4:86:39
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.172.0/22
45.81.72.0/22
45.86.8.0/22
45.89.84.0/22
45.89.156.0/22
45.90.172.0/22
45.91.112.0/22
45.93.172.0/22
45.94.60.0/22
45.94.176.0/22
45.95.248.0/22
45.117.136.0/22
45.128.32.0/22
45.128.136.0/22
45.132.136.0/21
45.133.88.0/22
45.141.236.0/22
45.144.56.0/22
45.144.160.0/22
45.146.8.0/22
45.146.60.0/22
45.148.12.0/22
45.148.56.0/22
45.148.252.0/22
45.149.72.0/22
45.149.220.0/22
45.150.144.0/22
45.152.4.0/22
45.153.220.0/22
45.159.88.0/22
45.159.152.0/22
45.248.144.0/22
46.102.170.0/23
62.133.48.0/22
62.197.132.0/22
77.75.60.0/22
79.171.153.0-79.171.159.255
80.76.56.0/22
89.36.112.0/20
89.43.208.0/21
89.45.176.0/20
89.222.16.0/20
91.209.86.0/24
93.113.26.0/23
94.176.208.0/23
94.177.138.0/23
94.247.86.0/23
95.214.184.0/22
95.214.228.0/22
103.7.204.0/22
103.205.24.0/22
130.255.16.0/22
130.255.28.0/22
147.12.128.0/17
171.22.104.0/22
178.239.192.0/22
178.239.200.0/22
178.255.88.0/21
185.59.124.0/22
185.71.36.0/22
185.103.72.0/22
185.111.172.0/22
185.115.144.0/22
185.121.228.0/22
185.229.104.0/22
185.230.248.0/22
185.236.60.0/22
185.237.60.0/22
185.238.220.0/22
185.240.196.0/22
185.241.164.0/22
185.245.236.0/22
188.212.122.0/23
188.215.16.0/23
188.215.74.0/23
188.241.106.0/23
192.166.208.0/21
193.42.52.0/22
193.164.20.0/22
194.4.156.0/22
212.132.192.0/18
213.32.248.0/22
IPv6:
2a02:6b60::/28
2a03:3820::/32
Signature Algorithm: sha256WithRSAEncryption
4c:98:46:2d:ef:03:9a:24:3d:1a:01:26:a8:14:92:f3:9c:27:
4d:16:e0:8c:10:7e:aa:07:67:25:76:07:c2:fd:09:ed:53:a7:
ab:42:59:ff:f3:20:9d:92:fd:c1:b1:df:57:af:41:f6:67:6f:
6c:52:41:de:43:2a:05:3f:01:af:6b:68:9a:bc:dd:a7:35:44:
aa:27:c4:4e:d5:84:26:21:09:6f:21:36:6a:bd:e4:1b:8c:cb:
75:39:43:b4:68:a8:13:21:d0:d4:99:e2:67:ac:8f:be:f8:31:
ca:e4:08:f3:dd:2d:93:93:98:1b:e1:64:94:b5:19:f4:7c:3e:
0d:5d:57:82:88:16:3a:d0:65:55:4f:fa:e0:bd:89:bc:5f:c8:
e1:ad:0e:94:9d:2b:6d:63:e0:10:91:40:e9:cb:69:ec:f0:32:
19:de:9a:b3:98:67:ad:b5:e1:5a:4c:2c:06:d2:65:db:59:50:
2a:70:e9:06:bf:64:78:8b:36:09:9c:94:b4:ac:e8:5c:c2:08:
1a:25:da:c7:ee:be:11:30:13:0c:c0:00:ed:cf:e7:23:ca:c2:
58:cd:29:9b:a6:98:be:a9:88:43:db:55:1d:f7:e3:bd:26:2c:
d5:ec:d9:22:17:74:3a:90:56:00:5e:54:c6:09:10:ab:53:ab:
00:4f:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:34:44 2025 by rpki-client