Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/gjoNK49uecjVNDy_jIk_HGzo0s4.roa
File: gjoNK49uecjVNDy_jIk_HGzo0s4.roa (raw, json)
Hash identifier: xgBO5Rze7InmM2HWzMrEBfR+86xRvjIlmFEyhDJ4HtQ=
Subject key identifier: 82:3A:0D:2B:8F:6E:79:C8:D5:34:3C:BF:8C:89:3F:1C:6C:E8:D2:CE
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01988925600C2BF4B182C6D3C3B63802B0D9
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/gjoNK49uecjVNDy_jIk_HGzo0s4.roa
Signing time: Fri 08 Aug 2025 10:06:24 +0000
ROA not before: Fri 08 Aug 2025 10:06:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:25:60:0c:2b:f4:b1:82:c6:d3:c3:b6:38:02:b0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Aug 8 10:06:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=823a0d2b8f6e79c8d5343cbf8c893f1c6ce8d2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:6d:fd:d1:ef:f8:94:1e:81:d1:75:72:98:
c7:6c:04:cf:4d:48:82:38:20:59:56:c0:79:50:e2:
ed:ee:9a:d5:ba:8b:56:bb:2b:b8:c4:a1:69:d3:10:
f6:57:1c:c4:8f:84:23:e3:44:20:17:da:ab:83:3e:
a5:da:91:05:db:c4:5c:1e:70:86:fb:30:1c:3f:02:
79:3e:e0:8b:33:ae:32:8e:05:a8:b2:87:87:b6:47:
25:58:94:13:5c:51:d8:af:67:2f:cd:6b:62:ef:d8:
71:89:51:51:83:81:a6:3a:04:34:a0:70:83:c7:60:
9d:1c:e2:ef:ff:bd:d1:e5:f5:19:a8:7f:b0:46:0e:
16:27:c5:c3:84:63:e6:95:1f:16:7f:cf:02:10:a3:
b6:b8:ac:23:2a:f3:44:75:91:b4:48:dc:fa:c1:6d:
78:44:26:81:86:01:54:0c:9e:14:59:08:30:fd:d6:
d5:a8:20:2c:a0:68:ef:4f:86:03:af:27:28:4c:14:
7b:92:93:c9:cd:83:50:3c:44:f7:a4:d8:b9:ea:f4:
53:56:93:84:52:15:6f:32:5e:0e:01:dc:62:62:42:
1c:64:e1:31:58:74:b0:31:18:40:b9:f0:d9:8b:eb:
73:2a:fb:ed:47:e7:2c:d4:98:c5:00:e5:c4:22:bf:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:0D:2B:8F:6E:79:C8:D5:34:3C:BF:8C:89:3F:1C:6C:E8:D2:CE
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/gjoNK49uecjVNDy_jIk_HGzo0s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.251.0/24
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:d9:e3:e8:17:73:31:69:a2:6e:4d:cb:9a:40:2c:86:5e:44:
4d:ca:2c:fc:b5:4f:22:6a:a1:13:15:cc:6b:c9:c5:2a:fb:f0:
92:b8:3b:ea:d3:90:81:48:05:33:ae:92:9f:d2:c9:30:03:5a:
a7:47:a6:f6:ed:e3:2d:70:c8:cb:11:31:ea:aa:98:a5:50:ad:
e5:08:fd:ed:68:e9:3b:d3:7c:2f:93:ac:da:26:9a:bf:50:4b:
2f:a5:46:d8:7e:40:05:52:59:0d:5b:fc:73:93:34:e5:c9:3c:
26:91:04:3a:36:1a:99:fc:13:21:4e:64:25:ff:0c:fc:4f:26:
dd:03:c9:ae:53:9d:e4:7f:24:38:96:39:e9:bc:84:85:25:71:
15:d8:2f:34:3f:87:3d:82:e4:01:5c:01:f3:58:7b:8b:40:59:
ca:3f:0d:81:e4:40:4a:93:0a:e6:28:d6:e1:31:2d:4f:a0:11:
a1:c0:20:5a:8c:7d:27:ce:53:7e:0d:6f:6c:64:e2:d9:3f:c5:
7f:17:39:7c:3e:6b:4c:df:44:66:08:d4:7d:07:f4:20:4c:7b:
d8:27:2a:75:61:80:6c:2d:c4:34:22:ec:b3:f2:2c:97:63:73:
34:a6:ac:f8:79:98:63:c7:10:86:79:b0:88:0a:69:90:0a:15:
50:6d:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:42 2025 by rpki-client