
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ass7xawPAaXBNu3YBiKNKgErlYw.roa
File: Ass7xawPAaXBNu3YBiKNKgErlYw.roa (raw, json)
Hash identifier: S/4qd6BgY5px7eMNl/hw2aUbnhb2FQFDLYVmAFFHc1Q=
Subject key identifier: 02:CB:3B:C5:AC:0F:01:A5:C1:36:ED:D8:06:22:8D:2A:01:2B:95:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199E8F9A5FE4DF0A80D2CD26BE944D8A175
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ass7xawPAaXBNu3YBiKNKgErlYw.roa
Signing time: Wed 15 Oct 2025 17:44:59 +0000
ROA not before: Wed 15 Oct 2025 17:44:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a06:b5c0::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:8880::/29 maxlen: 29
2a0e:c780::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:14::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3046:320::/48 maxlen: 48
2a0f:3240::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:e1c6::/32 maxlen: 32
2a0f:e4c0::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:3340::/29 maxlen: 29
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:4c40::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ba00::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:33::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:3080::/29 maxlen: 29
2a13:8c82:3::/48 maxlen: 48
2a13:df00::/29 maxlen: 29
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e102:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:f9:a5:fe:4d:f0:a8:0d:2c:d2:6b:e9:44:d8:a1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 15 17:44:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02cb3bc5ac0f01a5c136edd806228d2a012b958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:f1:43:ca:81:2e:2a:1a:75:69:0f:f2:ea:
d7:bf:7b:7b:e2:62:4e:fd:49:e8:55:e8:57:16:59:
4e:fd:d6:0e:29:ac:34:bd:2a:c0:16:12:c7:c9:84:
d8:5c:54:64:21:09:5c:32:38:cf:42:68:1d:46:3a:
ec:ea:64:fb:1c:a1:dc:75:4c:65:97:c9:51:81:1f:
55:1a:5e:9e:a9:6f:47:cf:d8:a6:a8:32:09:e5:6a:
b0:43:f3:7a:9c:17:13:56:6a:00:77:e4:80:b5:23:
57:17:18:5a:25:6a:00:02:d0:4a:40:ae:f7:e4:5b:
8a:70:17:ca:14:86:5a:42:52:f8:1c:0b:80:11:b5:
68:23:92:fc:f8:1b:be:12:34:39:da:64:b3:c7:5c:
ad:1e:af:8d:6f:7e:95:4b:1e:fc:bf:74:86:23:83:
62:0b:f5:6e:84:17:6f:cd:d0:a3:09:40:56:41:6c:
10:02:d9:8d:de:44:2c:54:0b:a5:e6:72:3d:f7:4e:
ae:de:81:7e:72:16:9c:85:46:69:de:c0:ce:ac:32:
e7:0d:7d:81:69:bd:37:d2:90:29:64:59:b4:7a:ed:
bb:2c:a1:41:65:26:03:3f:a5:e6:f7:15:bc:51:07:
82:5f:af:cb:fa:88:2e:d9:79:e8:51:a2:de:c6:c3:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:3B:C5:AC:0F:01:A5:C1:36:ED:D8:06:22:8D:2A:01:2B:95:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ass7xawPAaXBNu3YBiKNKgErlYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a06:b5c0::/29
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:8880::/29
2a0e:c780::/32
2a0e:f201::/32
2a0e:f600:14::/48
2a0f:140::/29
2a0f:e00::/29
2a0f:1740::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3046:320::/48
2a0f:3240::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:8300::/29
2a0f:b400::/29
2a0f:c400::/29
2a0f:e1c6::/32
2a0f:e4c0::/29
2a10:32c0::/29
2a10:3340::/29
2a10:35c0::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6500::/29
2a10:6d40::/29
2a10:7100::/29
2a10:7300::/29
2a10:7900::/29
2a10:7b00::/29
2a11:4c40::/29
2a11:5c80::/29
2a11:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ba00::/29
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6:33::/48
2a13:18c6:55::/48
2a13:3080::/29
2a13:8c82:3::/48
2a13:df00::/29
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e102:3::/48
Signature Algorithm: sha256WithRSAEncryption
99:3e:2d:ba:33:a6:19:92:a7:50:ee:77:9e:7e:50:73:4b:6e:
e1:02:3a:c0:60:68:7f:08:d2:43:a0:d7:0e:fd:a4:11:7c:21:
e7:b3:e1:ea:91:5b:02:4f:6f:34:f9:e6:c6:a4:dc:fe:06:e7:
44:e9:8c:c0:09:7e:59:e7:d0:0e:8a:b0:50:f1:da:5c:11:f5:
9d:62:e2:a0:24:83:97:8b:42:75:6e:8d:68:70:16:3a:9c:eb:
5f:a7:0e:5a:1d:38:72:b2:14:5a:ba:ff:c3:23:5e:78:a7:21:
22:ba:8c:d3:df:7b:4a:ef:0b:de:f4:08:3d:25:8d:fa:b2:a9:
c9:b6:28:8d:28:d2:e7:25:8e:71:71:12:ee:68:78:25:86:b3:
1a:6f:3c:6a:0f:2c:9a:3a:a5:63:b3:49:46:66:82:d7:1c:6a:
97:c3:2a:9a:86:d9:49:07:b2:28:0c:bf:30:e2:27:27:88:54:
71:41:55:6b:97:83:80:a6:03:58:24:2d:a8:70:e7:72:b9:b1:
24:87:04:cb:97:17:73:1c:c8:8a:4c:8c:6f:07:9e:38:dd:3a:
2f:4f:96:c6:ee:d5:23:ae:07:85:7c:dd:19:e7:51:bc:fa:ea:
59:eb:d8:44:5c:b7:2f:d8:47:c4:cf:b8:be:d6:83:f5:3a:e4:
17:ab:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:49 2025 by rpki-client