Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cmlwnaRJPxI_PYZMgNEf-K9lzSU.roa
File: cmlwnaRJPxI_PYZMgNEf-K9lzSU.roa (raw, json)
Hash identifier: iQYbRgHjJUK6eRVjCdjxLKw37hu7oK5HJRGtc6EaknM=
Subject key identifier: 72:69:70:9D:A4:49:3F:12:3F:3D:86:4C:80:D1:1F:F8:AF:65:CD:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198C68AD79AAB96D2588B546CB95EFBD7E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cmlwnaRJPxI_PYZMgNEf-K9lzSU.roa
Signing time: Wed 20 Aug 2025 08:14:04 +0000
ROA not before: Wed 20 Aug 2025 08:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1583::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3046:320::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:b400::/29 maxlen: 29
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
2a0f:e7c6:55::/48 maxlen: 48
2a10:3240::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:33::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:8c82:3::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e102:3::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:8a:d7:9a:ab:96:d2:58:8b:54:6c:b9:5e:fb:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 08:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7269709da4493f123f3d864c80d11ff8af65cd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:bb:af:6b:29:56:80:bc:72:b1:05:67:c2:
ce:94:51:a8:90:e4:23:19:8e:03:07:d9:1b:63:f2:
e2:33:cc:94:ec:01:07:21:59:77:36:91:57:7e:dc:
4b:2c:e9:d7:fe:60:26:f6:76:36:17:f3:90:3d:aa:
e0:7a:d1:4a:d9:a7:d1:01:36:77:ca:5c:b8:bf:16:
e3:fa:a8:f7:ca:82:92:22:64:95:bf:20:f2:c6:fe:
7d:e9:b5:19:c9:5d:5a:76:6a:c0:27:1a:b7:ba:ee:
8e:bf:0e:e9:0b:09:4f:c5:a9:4e:9f:32:8e:5a:6a:
24:f2:25:c4:48:a2:ff:f5:48:8d:f5:89:fd:f7:47:
07:c8:87:16:68:f3:3e:d4:bc:4b:2f:db:51:b2:d3:
3d:d8:78:3f:94:e1:7c:ed:2b:ad:a2:bd:7d:01:6a:
7c:8d:33:f9:b4:fa:3c:3d:7a:34:49:31:ea:57:61:
28:33:04:8a:49:5b:14:3a:37:e5:08:dd:cd:81:a1:
c1:8b:46:88:f9:da:76:10:7b:64:6a:c3:31:86:01:
d7:af:29:78:c6:af:71:65:dd:8f:36:2e:97:46:be:
ab:89:28:78:0a:2e:c7:ec:8f:e3:2b:06:07:f0:27:
91:72:77:53:98:b6:29:16:02:f2:88:86:10:1b:db:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:70:9D:A4:49:3F:12:3F:3D:86:4C:80:D1:1F:F8:AF:65:CD:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cmlwnaRJPxI_PYZMgNEf-K9lzSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1184:33::/48
2a06:35c2::/32
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:c780::/31
2a0e:f201::/32
2a0f:1583::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3046:320::/48
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:b400::/29
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e6c5::/32
2a0f:e7c6:55::/48
2a10:3240::/29
2a10:32c0::/29
2a10:35c0::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:6d40::/29
2a10:7900::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:33::/48
2a13:18c6:55::/48
2a13:8c82:3::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e102:3::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
ca:e2:d8:41:c3:fe:34:80:27:08:03:88:68:56:d8:30:cc:31:
e0:0c:60:a9:eb:04:e2:22:7e:9d:21:89:74:cd:00:93:9f:dd:
6f:60:1f:c4:24:3e:9e:cf:30:24:1c:7d:86:2e:93:db:c3:7e:
75:63:94:11:43:9f:1a:d2:4f:4f:86:57:3a:c9:f1:28:11:45:
5b:e2:bb:8d:51:b7:b7:2b:8a:13:78:10:38:13:5a:f8:ee:cd:
27:9f:30:6a:74:3d:32:2f:a0:09:65:a0:3c:42:44:88:69:40:
73:98:ab:23:a4:6d:bd:89:6c:15:1b:d0:ae:90:4b:49:e2:b9:
8e:76:e0:1b:e1:90:0d:e6:7b:94:e8:e6:76:d1:31:40:7e:9f:
d7:83:d6:ef:80:97:6a:2b:8d:cd:6f:29:7e:20:e4:93:35:f4:
b5:d3:47:f1:e0:4e:ff:70:4b:c1:0b:07:7d:19:4b:d2:9b:49:
d6:3b:c6:db:14:9e:41:0a:b4:94:ce:1f:1c:fc:e1:f0:40:aa:
92:c9:35:7e:26:ad:d8:9b:d8:67:56:cd:7b:a0:d5:bd:15:ae:
61:86:4c:a6:e8:04:d6:d4:dd:57:8b:3b:4e:39:ad:dc:9c:86:
22:8b:a7:f2:70:bd:f0:0f:5b:5f:db:84:7c:2a:11:15:53:74:
a2:4a:17:b7
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgISAZjGiteaq5bSWItUbLle+9foMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwODIwMDgxNDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjY5NzA5ZGE0NDkzZjEyM2YzZDg2NGM4MGQxMWZmOGFmNjVjZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qi7r2spVoC8crEFZ8LOlFGokOQj
GY4DB9kbY/LiM8yU7AEHIVl3NpFXftxLLOnX/mAm9nY2F/OQPargetFK2afRATZ3
yly4vxbj+qj3yoKSImSVvyDyxv596bUZyV1admrAJxq3uu6Ovw7pCwlPxalOnzKO
Wmok8iXESKL/9UiN9Yn990cHyIcWaPM+1LxLL9tRstM92Hg/lOF87Sutor19AWp8
jTP5tPo8PXo0STHqV2EoMwSKSVsUOjflCN3NgaHBi0aI+dp2EHtkasMxhgHXryl4
xq9xZd2PNi6XRr6riSh4Ci7H7I/jKwYH8CeRcndTmLYpFgLyiIYQG9v/twIDAQAB
o4IESDCCBEQwHQYDVR0OBBYEFHJpcJ2kST8SPz2GTIDRH/ivZc0lMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvY21sd25hUkpQeElfUFlaTWdORWYtSzlselNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICXAYIKwYBBQUHAQcBAf8EggJLMIICRzA8BAIAATA2AwQA
LYBNAwQALYF/AwQALYclAwQALZ0lAwQAUP36AwQAZ4syAwQAwQV9AwQAwRsXAwQA
waTHMIICBQQCAAIwggH9AwcAKgYRgAHFAwcAKgYRgQEAAwcAKgYRhAAzAwUAKgY1
wgMFACoJF8QDBwAqCi0EAQADBwAqCi0GADMDBwAqCi0GAFUDBwAqDHiGAAsDBwAq
DHiGADMDBwAqDhXHAIgDBwAqDhqAJUEDBQAqDhqBAwUBKg7HgAMFACoO8gEDBQAq
DxWDAwcAKg8eAAEjAwcAKg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75
AwcAKg8eAQABAwcAKg8egQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcA
Kg8egaPQAwcAKg8egc2uAwUAKg8tgQMFAyoPLoADBQAqDzBFAwcAKg8wRgMgAwUA
Kg89hAMHACoPfQIAAQMHACoPfQIBAAMHACoPfQb8nQMFAyoPtAADBQAqD99EAwUA
Kg/hxgMFACoP5sUDBwAqD+fGAFUDBQMqEDJAAwUDKhAywAMFAyoQNcADBQMqEDfA
AwUDKhBKAAMFAyoQbUADBQMqEHkAAwUDKhH9gAMFASoSrEADBQMqEvVAAwcAKhMY
wAABAwUAKhMYxAMHACoTGMYAMwMHACoTGMYAVQMHACoTjIIAAwMFACoTjIQDBQAq
E5KAAwUAKhPJBAMHACoT4QATEgMHACoT4QEAAgMHACoT4QIAAwMFACoT4QQwDQYJ
KoZIhvcNAQELBQADggEBAMri2EHD/jSAJwgDiGhW2DDMMeAMYKnrBOIifp0hiXTN
AJOf3W9gH8QkPp7PMCQcfYYuk9vDfnVjlBFDnxrST0+GVzrJ8SgRRVviu41Rt7cr
ihN4EDgTWvjuzSefMGp0PTIvoAlloDxCRIhpQHOYqyOkbb2JbBUb0K6QS0niuY52
4BvhkA3me5To5nbRMUB+n9eD1u+Al2orjc1vKX4g5JM19LXTR/HgTv9wS8ELB30Z
S9KbSdY7xtsUnkEKtJTOHxz84fBAqpLJNX4mrdib2GdWzXug1b0VrmGGTKboBNbU
3VeLO045rdychiKLp/JwvfAPW1/bhHwqERVTdKJKF7c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:09 2025 by rpki-client