Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/1-I9wvebt-1hzIuhIUJLkLhuxDRI.roa
File: 1-I9wvebt-1hzIuhIUJLkLhuxDRI.roa (raw, json)
Hash identifier: gNrZtA31MPSmjg4FiPE11kRYzRt9vM98Sugau6QnufE=
Subject key identifier: F8:8F:70:BD:E6:ED:FB:58:73:22:E8:48:50:92:E4:2E:1B:B1:0D:12
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01988694F08FBF210035510295CB13C32CA4
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/1-I9wvebt-1hzIuhIUJLkLhuxDRI.roa
Signing time: Thu 07 Aug 2025 22:09:24 +0000
ROA not before: Thu 07 Aug 2025 22:09:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.244.0/23 maxlen: 24
217.154.247.0/24 maxlen: 24
217.154.248.0/21 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:94:f0:8f:bf:21:00:35:51:02:95:cb:13:c3:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Aug 7 22:09:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f88f70bde6edfb587322e8485092e42e1bb10d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:4b:cc:95:41:f0:09:cc:b4:cb:1f:c1:38:
bf:8b:90:d2:65:cd:db:6c:bd:3f:bf:2b:8a:6f:70:
2d:6e:43:d3:0c:46:85:a6:bd:85:15:e7:12:49:48:
7a:99:9d:65:0d:2f:af:ee:8e:6f:2f:d8:10:f7:f4:
64:e8:32:a9:34:22:37:35:b5:3b:6d:65:4f:e8:bc:
82:13:5d:ee:fa:d4:7d:56:be:57:43:5b:1f:1a:05:
1e:c7:b9:ce:60:80:92:aa:44:e3:0a:3d:41:a6:bd:
28:11:1a:d3:e3:dc:6e:46:af:87:0f:66:e0:09:ed:
8d:7b:cc:73:03:61:8a:77:70:e8:ab:0b:bc:b1:81:
7f:43:4b:83:8a:bc:18:fb:f0:cc:3b:28:68:06:fc:
65:80:81:d3:b9:08:04:4f:8a:b5:29:ce:2b:76:45:
c4:88:4e:16:d5:56:97:4e:e8:ae:06:32:a9:d8:54:
e9:fb:33:8a:64:fc:ba:ca:6c:83:a0:54:25:37:20:
3c:f2:98:9a:2d:ec:85:c1:74:72:08:a4:fb:f3:35:
19:66:b6:74:3d:7a:4d:41:df:f9:5f:d4:9a:fb:7f:
fd:08:0e:d2:6e:3b:11:d1:35:ed:3d:4d:87:f6:8a:
62:ce:4e:55:6e:5b:68:f9:2b:78:3c:ae:7f:7d:24:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:70:BD:E6:ED:FB:58:73:22:E8:48:50:92:E4:2E:1B:B1:0D:12
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/1-I9wvebt-1hzIuhIUJLkLhuxDRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.192.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.245.255
217.154.247.0-217.154.255.255
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
1d:75:80:15:66:17:be:99:f3:f4:3c:36:92:0a:4d:ab:d1:8e:
28:8b:ae:eb:a2:94:31:72:91:71:2b:13:2e:68:ee:72:fb:7b:
b3:d7:fb:04:eb:6c:4e:c7:14:29:f1:c9:6d:fe:fb:9b:50:98:
1c:32:a1:83:5e:e3:0c:00:fa:5d:41:97:dc:2b:49:5e:43:58:
dd:cd:e8:77:f8:f3:82:c9:55:78:d2:27:cf:39:bc:28:d5:6a:
80:42:de:0a:38:7c:5c:4d:9d:50:e0:28:7a:92:c0:e7:05:5a:
50:d6:72:e9:85:38:69:3a:25:0d:3e:73:ee:7b:30:fc:cc:3f:
5b:86:9d:f0:56:dc:a5:cf:7f:fd:59:2b:2e:1c:4a:11:4e:5b:
75:26:58:2e:eb:3e:19:ef:a2:5b:74:31:de:9d:78:4e:e5:57:
11:4b:fb:8c:87:a1:32:33:e7:35:63:75:11:b6:f3:08:87:2d:
72:84:28:72:d1:13:1f:9f:56:68:0c:55:26:81:41:a1:f2:a6:
3f:f4:a6:79:19:7e:80:8e:80:59:57:e1:10:18:5a:f8:ab:87:
d2:d7:f3:0f:bd:63:37:21:21:50:ab:7e:4c:db:c9:03:1e:40:
80:e1:e3:47:1c:27:71:9b:75:e9:d9:74:a6:74:b8:72:76:38:
96:00:f6:17
-----BEGIN CERTIFICATE-----
MIIGsjCCBZqgAwIBAgISAZiGlPCPvyEANVEClcsTwyykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjUwODA3MjIwOTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODhmNzBiZGU2ZWRmYjU4NzMyMmU4NDg1MDkyZTQyZTFiYjEwZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtpLzJVB8AnMtMsfwTi/i5DSZc3b
bL0/vyuKb3AtbkPTDEaFpr2FFecSSUh6mZ1lDS+v7o5vL9gQ9/Rk6DKpNCI3NbU7
bWVP6LyCE13u+tR9Vr5XQ1sfGgUex7nOYICSqkTjCj1Bpr0oERrT49xuRq+HD2bg
Ce2Ne8xzA2GKd3Doqwu8sYF/Q0uDirwY+/DMOyhoBvxlgIHTuQgET4q1Kc4rdkXE
iE4W1VaXTuiuBjKp2FTp+zOKZPy6ymyDoFQlNyA88piaLeyFwXRyCKT78zUZZrZ0
PXpNQd/5X9Sa+3/9CA7SbjsR0TXtPU2H9opizk5Vblto+St4PK5/fSQXqQIDAQAB
o4IDvjCCA7owHQYDVR0OBBYEFPiPcL3m7ftYcyLoSFCS5C4bsQ0SMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEvMS1JOXd2ZWJ0LTFoekl1aElVSkxrTGh1eERSSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjIvMGZiYzJlLWZkODgtNGRmMi1hYWUzLTllYjQwY2M1ZjY4
Yi8xL2twV3g4ZHpZLW1yQjczaUNlTVNKNFY2c3JuQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAdEGCCsGAQUFBwEHAQH/BIIBwDCCAbwwggGiBAIAATCC
AZoDBAQF+rADBAMuEEgDBANOiWADBAJRrXADAwBSpQMEAlW4+AMDAFdqAwQDnWFo
AwQCuTB0AwQAwn7OMAwDBALCpAQDBALCpAgDBATCpBADBATCpDADBAPCpFgDBAPC
pHgDBATCpKADBATCpMADBAXDFOADBAbUhEADAwDU4wMEBdWlQAMEANX0wAMEBNlI
wDALAwMB2ZoDBALZmggwDAMEANmaDQMEANmaGAMEAdmaGjAMAwQF2ZogAwQA2Zom
MAwDBAPZmigDBAHZmiwwDAMEANmaLwMEANmaMDAMAwQB2ZoyAwQD2ZpAMAwDBAHZ
mkoDBAHZmlgwDAMEANmaWwMEBdmaQDAMAwQA2ZphAwQA2ZpmMAwDBADZmmkDBADZ
mmwwDAMEBNmacAMEAdmaeDAMAwQC2Zp8AwQA2Zp+MAwDBAbZmsADBADZmtAwDAME
Adma0gMEANma2gMEANma3DAMAwQB2ZreAwQB2ZrkMAwDBADZmucDBALZmugwDAME
ANma7QMEAdma9DALAwQA2Zr3AwMA2ZoDAwDZoDAUBAIAAjAOAwUAIAEI2AMFAyoC
JHgwDQYJKoZIhvcNAQELBQADggEBAB11gBVmF76Z8/Q8NpIKTavRjiiLruuilDFy
kXErEy5o7nL7e7PX+wTrbE7HFCnxyW3++5tQmBwyoYNe4wwA+l1Bl9wrSV5DWN3N
6Hf484LJVXjSJ885vCjVaoBC3go4fFxNnVDgKHqSwOcFWlDWcumFOGk6JQ0+c+57
MPzMP1uGnfBW3KXPf/1ZKy4cShFOW3UmWC7rPhnvolt0Md6deE7lVxFL+4yHoTIz
5zVjdRG28wiHLXKEKHLREx+fVmgMVSaBQaHypj/0pnkZfoCOgFlX4RAYWvirh9LX
8w+9YzchIVCrfkzbyQMeQIDh40ccJ3GbdenZdKZ0uHJ2OJYA9hc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:00 2025 by rpki-client