Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3KeHXMrW-yUzASTiyymbruRmA3Q.roa
File: 3KeHXMrW-yUzASTiyymbruRmA3Q.roa (raw, json)
Hash identifier: agXEAI9EKxKrI445OHHgTa/bn42CxC9Gj51ypwOBdJY=
Subject key identifier: DC:A7:87:5C:CA:D6:FB:25:33:01:24:E2:CB:29:9B:AE:E4:66:03:74
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197A7FFAD5DBF9DDA68749031F41A9ABF83
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3KeHXMrW-yUzASTiyymbruRmA3Q.roa
Signing time: Wed 25 Jun 2025 16:50:40 +0000
ROA not before: Wed 25 Jun 2025 16:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.85.160.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
80.253.251.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1206:44::/48 maxlen: 48
2a0f:1583::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a10:3240::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc0:271::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:c9a1::/48 maxlen: 48
2a13:8c82:3::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:cf01::/32 maxlen: 32
2a13:cf03::/32 maxlen: 32
2a13:cf06::/32 maxlen: 32
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e102:3::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:ff:ad:5d:bf:9d:da:68:74:90:31:f4:1a:9a:bf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 25 16:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca7875ccad6fb25330124e2cb299baee4660374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:54:1d:f1:55:38:af:aa:d4:9f:b5:c4:73:
88:d4:b1:8d:fb:54:83:52:2a:3d:dc:85:35:61:5f:
34:20:39:bf:40:ee:7c:e9:ab:3d:e9:b6:fa:bc:ac:
86:0f:11:d9:83:88:13:e7:1a:4c:fc:d7:fc:a9:93:
fc:4b:e2:55:86:7f:3e:1d:0e:68:64:91:8d:a1:61:
87:c8:fb:95:7a:87:dd:0f:c5:13:d5:0b:f6:bb:98:
97:0b:4a:2b:2f:d0:84:82:62:7e:a3:b7:d8:49:bb:
28:72:63:0d:b3:af:14:ef:04:ff:64:32:41:d0:91:
9d:63:6b:a1:16:cc:b1:c4:d9:4a:d7:69:f8:88:c4:
44:a6:ab:a3:da:0f:35:c6:35:51:e8:f3:bd:5d:68:
e0:6d:5a:8c:3a:9a:2a:09:8c:56:cb:f1:50:6b:75:
a6:dd:9f:2a:ea:99:d2:55:a1:b2:a6:ec:fe:e5:82:
fe:50:4e:0c:85:13:d6:35:4a:f4:69:c1:ac:1d:57:
b6:f9:ec:b7:cf:16:15:48:ec:ff:3d:d9:05:0e:dc:
3b:79:bf:7f:a1:97:27:02:46:26:7e:9d:5a:c3:a3:
f9:62:df:60:b9:67:7e:62:23:0e:d5:51:89:35:f0:
90:94:82:3e:c8:f0:5f:07:e8:52:e8:ef:5a:2d:eb:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:87:5C:CA:D6:FB:25:33:01:24:E2:CB:29:9B:AE:E4:66:03:74
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3KeHXMrW-yUzASTiyymbruRmA3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.160.0/24
45.86.247.0/24
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/23
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
195.66.24.0/23
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1184:33::/48
2a06:35c2::/32
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:1a83:66::/48
2a0e:c780::/31
2a0e:f201::/32
2a0f:1206:44::/48
2a0f:1583::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e6c5::/32
2a0f:e7c6:55::/48
2a0f:e844:8642::/48
2a10:3240::/29
2a10:32c0::/29
2a10:35c0::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:6d40::/29
2a10:7500::/29
2a10:7900::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc0:271::/48
2a12:ecc0:3e2::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:55::/48
2a13:18c6:c9a1::/48
2a13:8c82:3::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:cf01::/32
2a13:cf03::/32
2a13:cf06::/32
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e102:3::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
c0:35:53:43:3d:bd:0d:61:4b:ab:33:0e:19:ee:d3:0d:31:30:
ea:d1:ff:c3:bb:16:31:75:89:42:a5:a6:78:95:31:26:38:d7:
1c:8d:40:d2:2d:b0:d0:4b:e9:ce:d3:2f:fb:8e:f9:07:4a:56:
20:56:f6:a0:7d:b5:9d:24:58:1a:1f:e5:05:da:b4:b3:71:14:
7e:d9:80:c8:d1:73:a4:10:d0:05:bb:52:f0:ba:88:36:d9:a3:
a9:45:b1:04:d6:f8:30:4f:95:36:5b:14:25:76:17:ad:db:49:
30:f7:09:f3:a7:b1:64:a3:b1:a2:71:f6:32:aa:4e:35:e7:f9:
88:67:d8:12:a7:f0:ee:13:b3:37:e4:66:40:66:25:43:34:f3:
59:3e:17:d1:f7:a7:e4:2b:0f:5c:7a:e9:38:e7:81:3d:38:d0:
fa:10:02:b6:b7:ae:a6:5c:49:7a:45:12:37:2d:f5:31:6d:d7:
01:e0:5d:75:89:fd:2a:79:81:2b:29:8a:21:42:7b:0a:ab:0d:
92:21:4b:63:64:22:15:0a:ab:2b:46:c8:b7:74:e6:59:95:f5:
ac:a5:d7:0b:89:5f:f1:8b:4c:fe:e9:ca:72:c7:09:a1:34:89:
db:16:ab:17:fa:56:a2:24:35:22:75:01:d3:e1:bf:56:4c:58:
43:85:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:07:49 2025 by rpki-client