Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eH5ZTAWR04eH4bU17HXJOA7gqag.roa
File: eH5ZTAWR04eH4bU17HXJOA7gqag.roa (raw, json)
Hash identifier: KgMiObS9xgfvg/nakzLfiHN9ukbCdZP78EIMeMnns9s=
Subject key identifier: 78:7E:59:4C:05:91:D3:87:87:E1:B5:35:EC:75:C9:38:0E:E0:A9:A8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196B0B714976AC75FC2E14654D5F3C6E747
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eH5ZTAWR04eH4bU17HXJOA7gqag.roa
Signing time: Thu 08 May 2025 16:25:10 +0000
ROA not before: Thu 08 May 2025 16:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.85.160.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
80.253.251.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a07:bb40::/29 maxlen: 29
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1206:44::/48 maxlen: 48
2a0f:1583::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a10:30c0::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc0:271::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:c9a1::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:cf01::/32 maxlen: 32
2a13:cf03::/32 maxlen: 32
2a13:cf06::/32 maxlen: 32
2a13:df00::/29 maxlen: 29
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:b7:14:97:6a:c7:5f:c2:e1:46:54:d5:f3:c6:e7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 8 16:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=787e594c0591d38787e1b535ec75c9380ee0a9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:42:24:8f:a0:a1:25:29:9c:cd:bd:e9:77:
0c:f8:f5:9b:ce:aa:54:54:16:39:9b:cb:1e:9c:66:
4c:18:13:00:18:c8:e6:48:7f:64:6a:1b:a6:50:cf:
6f:c2:99:61:e6:96:70:83:af:f8:23:45:ae:49:42:
c2:e3:7f:0c:b8:c4:ae:41:e0:da:a8:f5:9d:aa:64:
72:3b:9b:29:ab:44:cb:ab:8e:ab:9c:f6:8f:78:51:
57:7d:57:94:2c:66:74:14:01:eb:51:7b:f1:51:f3:
aa:db:81:fc:62:c4:e3:dd:b8:41:7c:c9:4e:ca:49:
e9:ba:e2:71:e0:8f:25:3d:d2:f4:d1:62:12:e3:8b:
18:aa:c9:7e:f5:df:df:5d:8e:c3:89:47:7f:dd:75:
29:9a:b7:c5:f7:84:df:dd:55:69:dc:d6:01:dc:2a:
50:3d:6f:95:19:75:ef:27:77:71:78:5b:7b:34:70:
ae:75:1e:3d:38:14:89:55:9a:94:8c:f2:22:da:32:
25:fa:99:52:ea:f2:55:0e:5b:25:fc:b9:69:0a:c9:
13:d4:48:f1:9d:09:f7:8c:57:e9:40:5c:4a:09:7d:
8e:f6:ca:6d:d4:07:a1:dc:37:4a:a4:7f:1b:6c:48:
a5:eb:b1:e2:52:79:76:47:8a:cf:33:2b:05:fd:f0:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7E:59:4C:05:91:D3:87:87:E1:B5:35:EC:75:C9:38:0E:E0:A9:A8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eH5ZTAWR04eH4bU17HXJOA7gqag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.160.0/24
45.86.247.0/24
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/23
103.139.50.0/24
185.164.59.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
195.66.24.0/23
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1184:33::/48
2a06:35c2::/32
2a07:bb40::/29
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:1a83:66::/48
2a0e:c780::/31
2a0e:f201:1::/48
2a0f:1206:44::/48
2a0f:1583::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e6c5::/32
2a0f:e7c6:55::/48
2a0f:e844:8642::/48
2a10:30c0::/29
2a10:32c0::/29
2a10:35c0::/29
2a10:36c0::/29
2a10:3740::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6400::/29
2a10:6b00::/29
2a10:6d40::/29
2a10:7100::/29
2a10:7500::/29
2a10:7d00::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc0:271::/48
2a12:ecc0:3e2::/48
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:55::/48
2a13:18c6:c9a1::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:cf01::/32
2a13:cf03::/32
2a13:cf06::/32
2a13:df00::/29
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
ba:83:84:4d:20:17:6d:04:12:c6:45:a7:09:d1:6b:62:39:91:
01:d3:e4:11:c8:82:85:7c:6f:82:21:c7:a3:7c:ff:38:27:18:
a6:f9:82:41:0e:a6:a8:cd:06:6f:cd:f5:86:45:a6:85:49:a3:
8f:94:68:46:57:5c:b1:ea:2e:27:15:10:70:61:c8:6d:c7:3c:
c5:34:6a:4e:f0:92:47:e2:82:2d:a8:ec:e0:5d:9c:e6:ba:92:
b5:a2:76:ab:ab:5f:62:05:df:bd:78:13:4e:6e:61:ac:dc:49:
66:65:81:73:68:da:f5:ea:0b:dc:54:4e:04:96:39:39:30:1b:
43:19:d0:1f:a0:7c:0b:d3:0a:ea:6a:26:e9:00:fd:22:fe:53:
b6:8d:57:4e:df:f1:89:20:2a:de:56:78:51:e9:42:a4:b7:68:
6d:c6:58:d5:2f:10:96:04:b6:b7:43:34:03:15:de:ea:f0:8e:
a7:17:ce:8d:b9:f6:ca:b6:1e:a9:6b:07:87:0f:d6:c5:d4:31:
71:0c:5e:a5:d3:0a:0f:b9:e5:b5:75:e0:8d:b2:2e:3a:38:64:
92:b4:95:f0:d8:4b:83:89:2c:3a:85:6a:ac:4d:72:a3:95:5e:
8b:35:00:d9:f1:8c:19:24:c5:51:c6:5d:4e:49:21:c3:93:73:
72:1a:04:f1
-----BEGIN CERTIFICATE-----
MIIHrjCCBpagAwIBAgISAZawtxSXasdfwuFGVNXzxudHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTA4MTYyNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODdlNTk0YzA1OTFkMzg3ODdlMWI1MzVlYzc1YzkzODBlZTBhOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8tCJI+goSUpnM296XcM+PWbzqpU
VBY5m8senGZMGBMAGMjmSH9kahumUM9vwplh5pZwg6/4I0WuSULC438MuMSuQeDa
qPWdqmRyO5spq0TLq46rnPaPeFFXfVeULGZ0FAHrUXvxUfOq24H8YsTj3bhBfMlO
yknpuuJx4I8lPdL00WIS44sYqsl+9d/fXY7DiUd/3XUpmrfF94Tf3VVp3NYB3CpQ
PW+VGXXvJ3dxeFt7NHCudR49OBSJVZqUjPIi2jIl+plS6vJVDlsl/LlpCskT1Ejx
nQn3jFfpQFxKCX2O9spt1Aeh3DdKpH8bbEil67HiUnl2R4rPMysF/fCSVQIDAQAB
o4IEujCCBLYwHQYDVR0OBBYEFHh+WUwFkdOHh+G1Nex1yTgO4KmoMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZUg1WlRBV1IwNGVINGJVMTdIWEpPQTdncWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICzgYIKwYBBQUHAQcBAf8EggK9MIICuTBUBAIAATBOAwQA
LVWgAwQALVb3AwQALYBNAwQALYF/AwQALYclAwQALZ0lAwQBUP36AwQAZ4syAwQA
uaQ7AwQAwRsVAwQAwRsXAwQAwaTHAwQBw0IYMIICXwQCAAIwggJXAwcAKgYRgAHF
AwcAKgYRgQEAAwcAKgYRhAAzAwUAKgY1wgMFAyoHu0ADBQAqCRfEAwcAKgotBAEA
AwcAKgotBgAzAwcAKgx4hgALAwcAKgx4hgAzAwcAKg4VxwCIAwcAKg4agCVBAwUA
Kg4agQMHACoOGoMAZgMFASoOx4ADBwAqDvIBAAEDBwAqDxIGAEQDBQAqDxWDAwcA
Kg8eAAEjAwcAKg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcAKg8e
AQABAwcAKg8egQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8egaPQ
AwcAKg8egc2uAwUDKg8ugAMFACoPMEUDBQAqDz2EAwcAKg99AgABAwcAKg99AgEA
AwcAKg99BvydAwUAKg/fRAMFACoP4cYDBQAqD+bFAwcAKg/nxgBVAwcAKg/oRIZC
AwUDKhAwwAMFAyoQMsADBQMqEDXAAwUDKhA2wAMFAyoQN0ADBQMqEDfAAwUDKhBK
AAMFAyoQVAADBQMqEGQAAwUDKhBrAAMFAyoQbUADBQMqEHEAAwUDKhB1AAMFAyoQ
fQADBQMqEf2AAwUBKhKsQAMHACoS7MACcQMHACoS7MAD4gMHACoS7MQiEwMFAyoS
9UADBwAqExjAAAEDBQAqExjEAwcAKhMYxgBVAwcAKhMYxsmhAwUAKhOMhAMFACoT
koADBQAqE8kEAwUAKhPPAQMFACoTzwMDBQAqE88GAwUDKhPfAAMHACoT4QATEgMH
ACoT4QEAAgMFACoT4QQwDQYJKoZIhvcNAQELBQADggEBALqDhE0gF20EEsZFpwnR
a2I5kQHT5BHIgoV8b4Ihx6N8/zgnGKb5gkEOpqjNBm/N9YZFpoVJo4+UaEZXXLHq
LicVEHBhyG3HPMU0ak7wkkfigi2o7OBdnOa6krWidqurX2IF3714E05uYazcSWZl
gXNo2vXqC9xUTgSWOTkwG0MZ0B+gfAvTCupqJukA/SL+U7aNV07f8YkgKt5WeFHp
QqS3aG3GWNUvEJYEtrdDNAMV3urwjqcXzo259sq2HqlrB4cP1sXUMXEMXqXTCg+5
5bV14I2yLjo4ZJK0lfDYS4OJLDqFaqxNcqOVXos1ANnxjBkkxVHGXU5JIcOTc3Ia
BPE=
-----END CERTIFICATE-----
Generated at Sat May 10 02:30:21 2025 by rpki-client