Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/6RYd_DC7Cf73Hx8K1y-3rmOSD4s.roa
File: 6RYd_DC7Cf73Hx8K1y-3rmOSD4s.roa (raw, json)
Hash identifier: OWQTAkAKMkFCCK92cC1HCS+gMJAJqqkH8QUZ4pUAzxs=
Subject key identifier: E9:16:1D:FC:30:BB:09:FE:F7:1F:1F:0A:D7:2F:B7:AE:63:92:0F:8B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0196B21211BDE00D399B1AF7669C3F6A0312
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/6RYd_DC7Cf73Hx8K1y-3rmOSD4s.roa
Signing time: Thu 08 May 2025 22:44:10 +0000
ROA not before: Thu 08 May 2025 22:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:12:11:bd:e0:0d:39:9b:1a:f7:66:9c:3f:6a:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 8 22:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9161dfc30bb09fef71f1f0ad72fb7ae63920f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:80:e2:ae:12:71:c8:7a:13:99:c4:98:53:
fd:8c:22:2f:5b:0a:ba:bc:dd:39:14:bc:d9:99:31:
cb:9e:05:db:37:b5:8e:ea:c6:87:46:11:07:f2:86:
1d:da:3c:d6:77:3c:f3:f4:a2:a9:2a:b6:bc:22:50:
ea:e5:44:8e:eb:6d:37:c2:3f:43:69:c4:16:6d:45:
b2:be:e1:69:a4:9d:a6:13:1c:6e:1b:c1:76:c5:e7:
99:e9:8b:81:2d:e0:c9:a7:3b:f1:01:b9:bc:1f:85:
4d:b7:45:6d:ba:45:c6:44:10:4d:2a:3d:e0:90:58:
a8:09:b9:c1:02:dc:14:87:a3:e2:79:e4:e1:d8:05:
24:b8:2f:aa:2d:32:72:69:f0:a4:9b:49:13:a7:ba:
08:1b:44:77:f1:78:79:88:dc:c1:13:24:4e:2f:c6:
32:1f:f4:30:1a:fd:6a:98:eb:c1:4a:27:cb:6f:9d:
32:aa:6c:e1:d6:66:1e:9d:74:9b:0d:4c:03:73:6e:
bc:59:b8:61:03:24:78:45:8b:ea:b2:7a:91:f2:21:
10:0a:e3:9d:42:a0:53:2e:5e:b5:e6:9c:ad:b8:12:
28:e7:21:e7:71:4e:52:90:ec:da:2c:d9:fd:61:1c:
45:76:f6:21:85:5d:2d:24:7d:76:ef:47:ba:33:bb:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:1D:FC:30:BB:09:FE:F7:1F:1F:0A:D7:2F:B7:AE:63:92:0F:8B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/6RYd_DC7Cf73Hx8K1y-3rmOSD4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.160.0/24
91.148.168.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
97:38:55:e0:66:c6:23:28:36:8b:7d:35:f5:7e:86:f7:f4:77:
b6:48:38:df:6e:48:41:b0:9a:20:fc:2c:80:c9:18:51:1a:35:
61:1e:84:d8:71:f7:91:ae:82:2a:87:d2:01:cd:d2:92:12:95:
07:95:b2:c6:1b:d7:52:70:b1:7f:42:9a:5d:7d:c2:94:f6:44:
37:ec:94:30:d3:1c:c2:b6:3a:6d:cd:8d:d9:4c:d2:c3:ea:29:
02:cd:11:ce:1f:52:b4:d7:d3:f0:1e:d7:9e:65:9d:9c:39:07:
a8:3f:95:8e:33:35:e8:e0:dc:6d:71:f3:f1:cc:83:0a:d4:b2:
d2:e5:9c:23:ff:d8:bb:57:0e:d7:3f:73:e2:71:4e:3b:79:1b:
15:ce:09:bf:14:1e:6b:b9:1a:de:a8:8a:93:94:a3:01:13:93:
83:97:fc:01:cf:a9:f2:b3:60:34:f9:fb:3f:ff:4a:8b:90:e5:
29:a1:2a:e6:0c:24:38:13:cc:f4:aa:99:0e:a7:65:49:27:47:
d5:04:52:fa:c6:92:0d:93:31:19:78:2b:80:95:34:34:7f:21:
bd:97:fc:14:4b:f6:79:ba:6a:67:ee:99:25:4f:41:65:df:28:
7e:ce:bf:42:fd:c2:5f:d2:80:0a:66:79:46:7b:35:ee:eb:2d:
a8:62:5a:16
-----BEGIN CERTIFICATE-----
MIIG1jCCBb6gAwIBAgISAZayEhG94A05mxr3Zpw/agMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwNTA4MjI0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTE2MWRmYzMwYmIwOWZlZjcxZjFmMGFkNzJmYjdhZTYzOTIwZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXeA4q4Scch6E5nEmFP9jCIvWwq6
vN05FLzZmTHLngXbN7WO6saHRhEH8oYd2jzWdzzz9KKpKra8IlDq5USO6203wj9D
acQWbUWyvuFppJ2mExxuG8F2xeeZ6YuBLeDJpzvxAbm8H4VNt0VtukXGRBBNKj3g
kFioCbnBAtwUh6PieeTh2AUkuC+qLTJyafCkm0kTp7oIG0R38Xh5iNzBEyROL8Yy
H/QwGv1qmOvBSifLb50yqmzh1mYenXSbDUwDc268WbhhAyR4RYvqsnqR8iEQCuOd
QqBTLl615pytuBIo5yHncU5SkOzaLNn9YRxFdvYhhV0tJH1270e6M7toIQIDAQAB
o4ID4jCCA94wHQYDVR0OBBYEFOkWHfwwuwn+9x8fCtcvt65jkg+LMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvNlJZZF9EQzdDZjczSHg4SzF5LTNybU9TRDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB9gYIKwYBBQUHAQcBAf8EggHlMIIB4TCCAc4EAgABMIIB
xgMEAQVoqAMEAAVorgMEAE1MCAMEAU1MCgMEAE6AAAMEAE6ACAMEAE6AKwMEAE6A
PAMEAE6AQwMEAE6ASAMEAE6ATAMEAE6ATwMEAE6AUQMEAE6AXAMEAE6AXgMEAE6A
YgMEAU6AbAMEAE6OAQMEAU6OBAMEAE6OEQMEAE6OFAMEAE6OGDAMAwQATo4hAwQA
To4iMAwDBABOji8DBABOjjADBABOjjwDBABOjj8DBABPfAADBABPfA8DBAFPfBQw
DAMEAE98FwMEAE98HAMEAE98LwMEAU98MjAMAwQAT3xJAwQAT3xKAwQAT3xMAwQA
T3xPAwQAT3xSAwQAUnbgAwQAUnbsAwQAUnbuAwQAUnb0AwQBUnb2AwQAV/YCAwQA
W5SDAwQAW5SMAwQAW5SgAwQAW5SoAwQBW7/YAwQAXkiRAwQCXkiUAwQBXkieAwQA
grngAwQAgrniAwQAgrnlMAwDBACCuesDBAGCuewDBACCufgDBACCufoDBAGw8bAw
DAMEBLKEUAMEAbKEVAMEArmUoAMEArnFmAMEAbnonAMEALnonzAMAwQC2a6UAwQA
2a6WMAwDBAPZrpgDBADZrpoDBADZrp8wDQQCAAIwBwMFACoBh0AwDQYJKoZIhvcN
AQELBQADggEBAJc4VeBmxiMoNot9NfV+hvf0d7ZION9uSEGwmiD8LIDJGFEaNWEe
hNhx95GugiqH0gHN0pISlQeVssYb11JwsX9Cml19wpT2RDfslDDTHMK2Om3NjdlM
0sPqKQLNEc4fUrTX0/Ae155lnZw5B6g/lY4zNejg3G1x8/HMgwrUstLlnCP/2LtX
Dtc/c+JxTjt5GxXOCb8UHmu5Gt6oipOUowETk4OX/AHPqfKzYDT5+z//SouQ5Smh
KuYMJDgTzPSqmQ6nZUknR9UEUvrGkg2TMRl4K4CVNDR/Ib2X/BRL9nm6amfumSVP
QWXfKH7Ov0L9wl/SgApmeUZ7Ne7rLahiWhY=
-----END CERTIFICATE-----
Generated at Sat May 10 14:56:33 2025 by rpki-client