Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/CRfBYJKdAcJkuUOzDrxFtsvODlc.roa
File: CRfBYJKdAcJkuUOzDrxFtsvODlc.roa (raw, json)
Hash identifier: sg0iqsUzi8BvUCsL9xp2VmWGXPaK8k3OJtwqd24lwUE=
Subject key identifier: 09:17:C1:60:92:9D:01:C2:64:B9:43:B3:0E:BC:45:B6:CB:CE:0E:57
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 019961DAA7A0E36DCB7310FFA3C3163D4D56
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/CRfBYJKdAcJkuUOzDrxFtsvODlc.roa
Signing time: Fri 19 Sep 2025 12:02:23 +0000
ROA not before: Fri 19 Sep 2025 12:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16333
IP address blocks: 5.32.178.0/23 maxlen: 23
5.32.180.0/24 maxlen: 24
5.32.182.0/24 maxlen: 24
31.11.64.0/18 maxlen: 19
31.11.68.0/22 maxlen: 22
31.11.72.0/21 maxlen: 21
31.11.80.0/21 maxlen: 21
31.11.88.0/21 maxlen: 21
31.11.96.0/21 maxlen: 21
31.11.104.0/21 maxlen: 21
31.11.112.0/21 maxlen: 21
31.11.120.0/21 maxlen: 21
78.157.0.0/24 maxlen: 24
78.157.1.0/24 maxlen: 24
78.157.2.0/24 maxlen: 24
78.157.3.0/24 maxlen: 24
78.157.4.0/24 maxlen: 24
78.157.5.0/24 maxlen: 24
78.157.6.0/24 maxlen: 24
78.157.7.0/24 maxlen: 24
78.157.8.0/24 maxlen: 24
78.157.9.0/24 maxlen: 24
78.157.10.0/24 maxlen: 24
78.157.20.0/24 maxlen: 24
78.157.21.0/24 maxlen: 24
78.157.22.0/24 maxlen: 24
78.157.23.0/24 maxlen: 24
78.157.24.0/24 maxlen: 24
78.157.25.0/24 maxlen: 24
78.157.26.0/24 maxlen: 24
78.157.27.0/24 maxlen: 24
78.157.28.0/24 maxlen: 24
78.157.29.0/24 maxlen: 24
78.157.30.0/24 maxlen: 24
78.157.31.0/24 maxlen: 24
79.126.128.0/17 maxlen: 17
79.126.128.0/18 maxlen: 18
79.126.192.0/18 maxlen: 18
85.30.64.0/18 maxlen: 18
85.30.64.0/19 maxlen: 19
85.30.64.0/21 maxlen: 21
85.30.72.0/22 maxlen: 22
85.30.80.0/22 maxlen: 22
85.30.92.0/22 maxlen: 22
85.30.96.0/19 maxlen: 19
85.30.96.0/22 maxlen: 22
85.30.101.0/24 maxlen: 24
85.30.104.0/22 maxlen: 22
85.30.110.0/24 maxlen: 24
85.30.112.0/24 maxlen: 24
85.30.119.0/24 maxlen: 24
85.30.120.0/21 maxlen: 21
89.31.152.0/21 maxlen: 21
95.128.186.0/24 maxlen: 24
109.69.40.0/21 maxlen: 21
146.255.69.0/24 maxlen: 24
146.255.70.0/24 maxlen: 24
146.255.86.0/24 maxlen: 24
146.255.90.0/23 maxlen: 23
185.2.188.0/22 maxlen: 22
185.5.4.0/22 maxlen: 22
185.80.164.0/22 maxlen: 22
185.89.244.0/22 maxlen: 22
185.100.244.0/22 maxlen: 22
212.110.64.0/23 maxlen: 23
212.110.80.0/21 maxlen: 21
212.110.88.0/22 maxlen: 22
212.158.176.0/20 maxlen: 24
217.16.64.0/19 maxlen: 19
217.16.64.0/20 maxlen: 20
217.16.80.0/20 maxlen: 20
217.16.87.0/24 maxlen: 24
217.16.88.0/22 maxlen: 22
217.196.192.0/20 maxlen: 20
2a01:5b8::/29 maxlen: 29
2a01:5b8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:da:a7:a0:e3:6d:cb:73:10:ff:a3:c3:16:3d:4d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Sep 19 12:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0917c160929d01c264b943b30ebc45b6cbce0e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:cb:3a:98:9e:25:f1:10:f8:30:6b:84:9f:
33:77:5e:c0:cc:7a:17:75:d3:45:6e:31:c8:dc:3c:
8f:b8:9d:31:d5:34:d9:d8:c4:a8:8a:57:a0:9e:21:
d8:7d:da:29:77:02:4d:7f:b1:c3:22:e1:2a:3d:3a:
9b:ec:69:9b:e6:81:c8:fc:c4:d1:40:9b:4c:01:b0:
ab:5a:2d:3e:54:3d:13:51:a7:d0:8e:e2:43:ca:31:
8c:06:dc:65:d7:0f:ad:87:c2:a9:01:ea:15:09:e9:
e9:fa:36:e4:1d:43:c7:1d:b5:55:6c:ba:08:cf:d4:
ea:51:df:a3:f1:50:e8:7e:2a:57:ed:a0:e7:87:d9:
0a:60:95:bb:7a:f0:f1:ef:21:d2:b2:e4:3c:ff:0a:
ec:7c:e7:9a:0d:06:48:8e:9b:cb:25:56:3f:87:5d:
19:f9:51:91:d9:57:bd:3e:15:14:bf:09:4c:56:7f:
c7:c6:a2:c9:3b:10:0b:d0:e0:83:a5:d7:88:48:fd:
65:e2:1d:4e:2d:88:7d:01:38:2e:ed:ff:7d:78:d5:
29:31:87:16:45:91:80:45:f1:c8:3c:6e:d9:04:f2:
5b:51:f6:09:cb:95:86:e5:41:65:03:ba:b8:2f:31:
71:9d:49:77:2d:d9:8d:fb:85:4c:63:78:90:23:70:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:C1:60:92:9D:01:C2:64:B9:43:B3:0E:BC:45:B6:CB:CE:0E:57
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/CRfBYJKdAcJkuUOzDrxFtsvODlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.178.0-5.32.180.255
5.32.182.0/24
31.11.64.0/18
78.157.0.0-78.157.10.255
78.157.20.0-78.157.31.255
79.126.128.0/17
85.30.64.0/18
89.31.152.0/21
95.128.186.0/24
109.69.40.0/21
146.255.69.0-146.255.70.255
146.255.86.0/24
146.255.90.0/23
185.2.188.0/22
185.5.4.0/22
185.80.164.0/22
185.89.244.0/22
185.100.244.0/22
212.110.64.0/23
212.110.80.0-212.110.91.255
212.158.176.0/20
217.16.64.0/19
217.196.192.0/20
IPv6:
2a01:5b8::/29
Signature Algorithm: sha256WithRSAEncryption
a7:99:23:9a:84:9f:3c:64:fd:ae:f9:d7:5a:33:7a:6c:24:2a:
1f:7f:2f:59:e1:93:77:48:f0:83:35:04:91:07:47:56:a0:10:
70:13:65:f6:8b:9b:bb:7c:bd:9e:c0:17:f8:26:a3:6e:93:4f:
b6:4c:0f:4b:c9:53:17:de:79:00:b6:42:a7:ef:34:29:73:cc:
a5:ac:95:2d:43:ba:a1:68:ac:76:91:28:35:9d:e7:f8:51:55:
41:3d:e9:8a:43:80:12:a1:cf:7e:a8:86:6b:df:6b:a3:95:09:
2f:a6:50:c5:20:72:8e:dd:6c:4f:7a:12:ce:92:af:48:9c:89:
26:37:ab:c3:54:8e:f8:4e:01:23:79:04:58:95:28:7e:06:ee:
cf:0c:01:55:10:67:a4:e0:a7:3a:f7:2a:15:a2:3f:9e:eb:4a:
83:fc:00:35:cc:08:3b:ed:8e:27:1c:3c:7f:35:09:8a:20:b1:
d5:bf:f9:9f:82:c7:a6:16:ee:15:a5:d2:d4:c8:c8:1e:72:69:
5a:85:e7:12:3b:09:d0:6f:16:78:e1:02:3d:75:4a:59:f1:ef:
29:23:98:30:fa:39:7e:51:b8:a7:df:b7:78:4d:5b:d1:7c:dd:
d3:09:e5:6d:ec:de:ae:ff:96:c0:d3:75:c8:f9:d6:4c:c6:c1:
a4:ea:73:b1
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZlh2qeg423LcxD/o8MWPU1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm
YzJjNDAwHhcNMjUwOTE5MTIwMjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTE3YzE2MDkyOWQwMWMyNjRiOTQzYjMwZWJjNDViNmNiY2UwZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv57LOpieJfEQ+DBrhJ8zd17AzHoX
ddNFbjHI3DyPuJ0x1TTZ2MSoilegniHYfdopdwJNf7HDIuEqPTqb7Gmb5oHI/MTR
QJtMAbCrWi0+VD0TUafQjuJDyjGMBtxl1w+th8KpAeoVCenp+jbkHUPHHbVVbLoI
z9TqUd+j8VDofipX7aDnh9kKYJW7evDx7yHSsuQ8/wrsfOeaDQZIjpvLJVY/h10Z
+VGR2Ve9PhUUvwlMVn/HxqLJOxAL0OCDpdeISP1l4h1OLYh9ATgu7f99eNUpMYcW
RZGARfHIPG7ZBPJbUfYJy5WG5UFlA7q4LzFxnUl3LdmN+4VMY3iQI3DivQIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFAkXwWCSnQHCZLlDsw68RbbLzg5XMB8GA1UdIwQY
MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt
YjJkY2MxODYzZThiLzEvQ1JmQllKS2RBY0prdVVPekRyeEZ0c3ZPRGxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi
LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBuAQCAAEwgbEwDAME
AQUgsgMEAAUgtAMEAAUgtgMEBh8LQDALAwMATp0DBABOnQowDAMEAk6dFAMEBU6d
AAMEB09+gAMEBlUeQAMEA1kfmAMEAF+AugMEA21FKDAMAwQAkv9FAwQAkv9GAwQA
kv9WAwQBkv9aAwQCuQK8AwQCuQUEAwQCuVCkAwQCuVn0AwQCuWT0AwQB1G5AMAwD
BATUblADBALUblgDBATUnrADBAXZEEADBATZxMAwDQQCAAIwBwMFAyoBBbgwDQYJ
KoZIhvcNAQELBQADggEBAKeZI5qEnzxk/a7511ozemwkKh9/L1nhk3dI8IM1BJEH
R1agEHATZfaLm7t8vZ7AF/gmo26TT7ZMD0vJUxfeeQC2QqfvNClzzKWslS1DuqFo
rHaRKDWd5/hRVUE96YpDgBKhz36ohmvfa6OVCS+mUMUgco7dbE96Es6Sr0iciSY3
q8NUjvhOASN5BFiVKH4G7s8MAVUQZ6Tgpzr3KhWiP57rSoP8ADXMCDvtjiccPH81
CYogsdW/+Z+Cx6YW7hWl0tTIyB5yaVqF5xI7CdBvFnjhAj11Slnx7ykjmDD6OX5R
uKfft3hNW9F83dMJ5W3s3q7/lsDTdcj51kzGwaTqc7E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:01 2025 by rpki-client