Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9yHs-BlsJ4OsoLbzpMAfPyeMB9k.roa
File: 9yHs-BlsJ4OsoLbzpMAfPyeMB9k.roa (raw, json)
Hash identifier: 75huCyF9o+J0wTF4oVqlupBmMoI8rOprVBdQWgQgsbk=
Subject key identifier: F7:21:EC:F8:19:6C:27:83:AC:A0:B6:F3:A4:C0:1F:3F:27:8C:07:D9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0199F18DFF902029D84BCBF1543A1F11C87E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9yHs-BlsJ4OsoLbzpMAfPyeMB9k.roa
Signing time: Fri 17 Oct 2025 09:43:59 +0000
ROA not before: Fri 17 Oct 2025 09:43:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41111
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.22.0/23 maxlen: 24
5.180.27.0/24 maxlen: 24
5.180.29.0/24 maxlen: 24
5.180.31.0/24 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
45.66.160.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.86.66.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.128.60.0/24 maxlen: 24
45.136.114.0/24 maxlen: 24
45.136.115.0/24 maxlen: 24
45.136.116.0/24 maxlen: 24
45.136.117.0/24 maxlen: 24
45.136.124.0/22 maxlen: 24
45.136.128.0/23 maxlen: 24
45.136.149.0/24 maxlen: 24
45.149.112.0/22 maxlen: 24
85.208.119.0/24 maxlen: 24
85.209.155.0/24 maxlen: 24
85.209.156.0/22 maxlen: 24
85.209.194.0/24 maxlen: 24
88.218.92.0/24 maxlen: 24
88.218.94.0/24 maxlen: 24
88.218.95.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.167.0/24 maxlen: 24
141.98.188.0/22 maxlen: 24
171.22.110.0/23 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.136.0/23 maxlen: 24
194.55.188.0/24 maxlen: 24
194.55.189.0/24 maxlen: 24
194.59.221.0/24 maxlen: 24
194.59.244.0/24 maxlen: 24
194.59.245.0/24 maxlen: 24
194.76.146.0/24 maxlen: 24
194.76.147.0/24 maxlen: 24
194.76.154.0/23 maxlen: 24
194.124.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:8d:ff:90:20:29:d8:4b:cb:f1:54:3a:1f:11:c8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 17 09:43:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f721ecf8196c2783aca0b6f3a4c01f3f278c07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:92:d5:91:9b:5b:81:11:0f:90:fc:ae:2a:
54:4e:97:36:54:01:3d:17:67:7f:be:13:91:df:48:
e1:b7:a2:f8:6c:3a:3a:f6:f8:be:b9:24:d7:02:6d:
5a:83:03:87:20:f8:74:51:21:fc:06:4f:c7:2a:62:
b6:38:07:1b:82:81:2d:81:cf:d0:e3:a4:52:f3:4e:
3b:0a:4d:65:b9:9f:19:54:40:96:85:c9:59:95:5b:
ec:31:79:e3:38:6c:e2:29:ff:b4:df:11:12:bc:78:
f9:a9:74:53:8d:87:cd:7f:02:57:2e:a6:69:f8:7b:
83:cc:20:07:c6:1c:88:27:4b:40:c8:40:a1:61:89:
76:d9:2d:68:7b:9f:2f:76:30:2b:0d:39:0f:ff:df:
16:f6:ec:16:cc:6b:3b:72:64:86:c9:f0:42:4e:92:
a5:88:68:37:3c:5d:1d:54:a5:e4:65:ab:f7:b2:14:
dd:50:06:c2:1b:a1:4b:31:7e:f9:ad:3d:d1:54:52:
63:d8:5c:b4:e7:73:6d:5b:73:36:ff:e4:9d:5e:d5:
3f:3f:25:de:49:59:e5:56:f2:55:a9:9a:d0:f8:25:
03:7a:fc:82:fd:6e:2b:87:26:13:36:4f:af:37:55:
5e:86:8b:f5:7f:67:19:ec:7e:6c:97:1e:98:a6:31:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:EC:F8:19:6C:27:83:AC:A0:B6:F3:A4:C0:1F:3F:27:8C:07:D9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9yHs-BlsJ4OsoLbzpMAfPyeMB9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/22
5.180.27.0/24
5.180.29.0/24
5.180.31.0/24
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
5.180.145.0/24
5.180.147.0/24
5.253.28.0/22
5.253.42.0/24
45.66.160.0/21
45.86.66.0/24
45.86.70.0/24
45.86.74.0/24
45.128.60.0/24
45.136.114.0-45.136.117.255
45.136.124.0-45.136.129.255
45.136.149.0/24
45.149.112.0/22
85.208.119.0/24
85.209.155.0-85.209.159.255
85.209.194.0/24
88.218.92.0/24
88.218.94.0/23
139.28.234.0/23
141.98.167.0/24
141.98.188.0/22
171.22.110.0/23
194.36.36.0/22
194.55.136.0/23
194.55.188.0/23
194.59.221.0/24
194.59.244.0/23
194.76.146.0/23
194.76.154.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
38:8a:19:fc:06:2f:f3:99:10:9f:d2:24:7d:ec:55:28:ac:4e:
e9:8f:24:62:22:9f:21:b3:81:59:7f:cb:38:bc:fc:41:2d:7c:
96:b3:76:29:b6:60:f7:66:1a:95:f1:48:5b:7d:ab:fe:0a:de:
e7:83:82:31:05:eb:14:75:df:26:98:03:55:5e:e6:c3:90:bc:
59:28:b0:7d:97:9b:4f:2f:cf:23:56:05:ac:40:d7:02:c0:4a:
2c:3e:78:4e:df:d9:b3:d8:2e:e9:74:2c:99:5f:ec:05:1a:9d:
a2:64:9e:89:40:dc:23:5a:59:1e:f7:60:46:14:25:e9:09:5e:
d0:61:ec:1a:a7:f9:7d:82:aa:e1:c2:43:a3:ac:0f:f3:41:7d:
43:d5:a4:81:52:23:0c:a1:b4:a7:d6:86:24:a8:bd:36:41:8a:
5e:d2:55:2a:c6:f2:68:4e:36:d6:8d:d6:2b:26:ea:bb:9e:4a:
ae:39:47:26:74:a8:13:18:79:d7:a4:c9:7b:2d:66:1d:4e:02:
19:b5:c2:99:c6:3d:49:45:d4:92:07:85:8d:ee:5d:2b:86:d9:
41:79:0d:d4:f9:9e:98:52:19:dc:10:97:9e:04:55:82:b0:8b:
19:aa:a7:1e:02:02:02:b9:ea:46:90:91:a1:7d:69:d6:bf:4b:
84:6c:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:29:02 2025 by rpki-client