Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/exkTmhIrPHXpMpwbJ39TJjbGGQU.roa
File: exkTmhIrPHXpMpwbJ39TJjbGGQU.roa (raw, json)
Hash identifier: O4LImE4gF0VDKL+p9YeHfP2uSXH0M3XtEyfG3rkFcvs=
Subject key identifier: 7B:19:13:9A:12:2B:3C:75:E9:32:9C:1B:27:7F:53:26:36:C6:19:05
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0197737812A760F06382F20C22A526896C7F
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/exkTmhIrPHXpMpwbJ39TJjbGGQU.roa
Signing time: Sun 15 Jun 2025 12:02:18 +0000
ROA not before: Sun 15 Jun 2025 12:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51684
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
5.181.198.0/24 maxlen: 24
5.181.199.0/24 maxlen: 24
46.161.200.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.216.0/24 maxlen: 24
82.199.217.0/24 maxlen: 24
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
82.199.220.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.200.0/24 maxlen: 24
89.46.201.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.203.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
185.16.26.0/24 maxlen: 24
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.247.36.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.38.0/24 maxlen: 24
185.247.39.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.200.0/24 maxlen: 24
185.254.201.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.133.0/24 maxlen: 24
212.95.134.0/24 maxlen: 24
212.95.135.0/24 maxlen: 24
212.95.136.0/24 maxlen: 24
212.95.137.0/24 maxlen: 24
212.95.138.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
212.95.140.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
212.95.143.0/24 maxlen: 24
212.95.144.0/24 maxlen: 24
212.95.145.0/24 maxlen: 24
212.95.146.0/24 maxlen: 24
212.95.147.0/24 maxlen: 24
212.95.151.0/24 maxlen: 24
212.95.152.0/24 maxlen: 24
212.95.153.0/24 maxlen: 24
212.95.154.0/24 maxlen: 24
212.95.155.0/24 maxlen: 24
212.95.157.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
2a12:f680:80::/48 maxlen: 48
2a12:f680:81::/48 maxlen: 48
2a12:f680:82::/48 maxlen: 48
2a12:f680:84::/48 maxlen: 48
2a12:f680:85::/48 maxlen: 48
2a12:f680:86::/48 maxlen: 48
2a12:f680:281::/48 maxlen: 48
2a12:f680:282::/48 maxlen: 48
2a12:f680:283::/48 maxlen: 48
2a12:f680:284::/48 maxlen: 48
2a12:f680:285::/48 maxlen: 48
2a12:f680:380::/48 maxlen: 48
2a12:f680:381::/48 maxlen: 48
2a12:f680:382::/48 maxlen: 48
2a12:f680:384::/48 maxlen: 48
2a12:f680:385::/48 maxlen: 48
2a12:f680:400::/48 maxlen: 48
2a12:f680:401::/48 maxlen: 48
2a12:f680:402::/48 maxlen: 48
2a12:f680:404::/48 maxlen: 48
2a12:f680:405::/48 maxlen: 48
2a12:f680:480::/48 maxlen: 48
2a12:f680:481::/48 maxlen: 48
2a12:f680:482::/48 maxlen: 48
2a12:f680:484::/48 maxlen: 48
2a12:f680:485::/48 maxlen: 48
2a12:f680:486::/48 maxlen: 48
2a12:f680:487::/48 maxlen: 48
2a12:f680:488::/48 maxlen: 48
2a12:f680:489::/48 maxlen: 48
2a12:f680:490::/48 maxlen: 48
2a12:f680:500::/48 maxlen: 48
2a12:f680:501::/48 maxlen: 48
2a12:f680:502::/48 maxlen: 48
2a12:f680:504::/48 maxlen: 48
2a12:f680:580::/48 maxlen: 48
2a12:f680:581::/48 maxlen: 48
2a12:f680:582::/48 maxlen: 48
2a12:f680:584::/48 maxlen: 48
2a12:f680:585::/48 maxlen: 48
2a12:f680:680::/48 maxlen: 48
2a12:f680:681::/48 maxlen: 48
2a12:f680:682::/48 maxlen: 48
2a12:f680:684::/48 maxlen: 48
2a12:f680:700::/48 maxlen: 48
2a12:f680:701::/48 maxlen: 48
2a12:f680:702::/48 maxlen: 48
2a12:f680:704::/48 maxlen: 48
2a12:f680:780::/48 maxlen: 48
2a12:f680:781::/48 maxlen: 48
2a12:f680:782::/48 maxlen: 48
2a12:f680:784::/48 maxlen: 48
2a12:f680:785::/48 maxlen: 48
2a12:f680:880::/48 maxlen: 48
2a12:f680:881::/48 maxlen: 48
2a12:f680:882::/48 maxlen: 48
2a12:f680:884::/48 maxlen: 48
2a12:f680:900::/48 maxlen: 48
2a12:f680:901::/48 maxlen: 48
2a12:f680:902::/48 maxlen: 48
2a12:f680:904::/48 maxlen: 48
2a12:f680:980::/48 maxlen: 48
2a12:f680:981::/48 maxlen: 48
2a12:f680:982::/48 maxlen: 48
2a12:f680:984::/48 maxlen: 48
2a12:f680:a00::/48 maxlen: 48
2a12:f680:a01::/48 maxlen: 48
2a12:f680:a02::/48 maxlen: 48
2a12:f680:a04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:78:12:a7:60:f0:63:82:f2:0c:22:a5:26:89:6c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jun 15 12:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b19139a122b3c75e9329c1b277f532636c61905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:1e:a7:f2:27:7e:df:6e:5c:42:1d:b1:50:
9d:20:8b:ac:10:2d:9e:73:31:9c:b8:af:fe:3f:a6:
81:6c:d4:da:33:35:e6:42:ce:33:e1:79:1f:fa:5f:
19:9c:bd:28:b3:7e:bf:3c:6e:25:87:d7:29:29:a6:
66:41:6e:ab:8a:77:a7:18:e9:82:3f:36:db:59:14:
46:57:b4:ef:d6:b5:f2:fe:5d:f3:28:d8:ae:f1:4d:
3d:ec:17:fd:76:de:99:c1:87:d8:56:8d:19:3d:dc:
07:4c:bb:f7:b4:8a:d1:1e:3f:ae:5b:21:26:a6:53:
a2:2b:43:31:a5:3d:1c:a2:a4:33:f1:48:3b:f6:53:
95:94:e8:e2:d2:d2:a9:9b:98:a1:75:4a:5b:56:47:
67:8c:63:20:0f:ef:d5:4b:32:43:3a:e9:58:36:95:
45:dd:a0:b8:f3:be:24:16:dd:b2:0e:5f:b0:d9:9f:
13:64:00:bd:db:53:78:46:b9:de:34:c2:93:e7:ce:
0f:c9:d0:7b:a7:b6:9e:91:0c:5f:80:4e:6c:12:c0:
8b:42:cd:a0:43:3e:a3:41:0f:ae:24:f0:8b:68:90:
e5:fd:f7:09:65:f6:e6:7e:41:9a:33:60:06:63:9a:
91:f7:a5:cb:52:7b:7f:c2:1a:2b:07:c3:3c:fd:4e:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:13:9A:12:2B:3C:75:E9:32:9C:1B:27:7F:53:26:36:C6:19:05
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/exkTmhIrPHXpMpwbJ39TJjbGGQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/22
46.161.200.0/24
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.141.255
212.95.143.0-212.95.147.255
212.95.151.0-212.95.155.255
212.95.157.0/24
223.25.120.0-223.25.126.255
IPv6:
2a12:f680:80::-2a12:f680:82:ffff:ffff:ffff:ffff:ffff
2a12:f680:84::-2a12:f680:86:ffff:ffff:ffff:ffff:ffff
2a12:f680:281::-2a12:f680:285:ffff:ffff:ffff:ffff:ffff
2a12:f680:380::-2a12:f680:382:ffff:ffff:ffff:ffff:ffff
2a12:f680:384::/47
2a12:f680:400::-2a12:f680:402:ffff:ffff:ffff:ffff:ffff
2a12:f680:404::/47
2a12:f680:480::-2a12:f680:482:ffff:ffff:ffff:ffff:ffff
2a12:f680:484::-2a12:f680:489:ffff:ffff:ffff:ffff:ffff
2a12:f680:490::/48
2a12:f680:500::-2a12:f680:502:ffff:ffff:ffff:ffff:ffff
2a12:f680:504::/48
2a12:f680:580::-2a12:f680:582:ffff:ffff:ffff:ffff:ffff
2a12:f680:584::/47
2a12:f680:680::-2a12:f680:682:ffff:ffff:ffff:ffff:ffff
2a12:f680:684::/48
2a12:f680:700::-2a12:f680:702:ffff:ffff:ffff:ffff:ffff
2a12:f680:704::/48
2a12:f680:780::-2a12:f680:782:ffff:ffff:ffff:ffff:ffff
2a12:f680:784::/47
2a12:f680:880::-2a12:f680:882:ffff:ffff:ffff:ffff:ffff
2a12:f680:884::/48
2a12:f680:900::-2a12:f680:902:ffff:ffff:ffff:ffff:ffff
2a12:f680:904::/48
2a12:f680:980::-2a12:f680:982:ffff:ffff:ffff:ffff:ffff
2a12:f680:984::/48
2a12:f680:a00::-2a12:f680:a02:ffff:ffff:ffff:ffff:ffff
2a12:f680:a04::/48
Signature Algorithm: sha256WithRSAEncryption
c1:d0:df:00:de:13:a0:f0:be:1d:d8:d3:69:20:38:3e:d8:d1:
0f:d9:24:4e:1c:f1:43:a7:c2:61:ea:65:93:4d:2d:a5:68:30:
ab:8e:2f:7a:d8:9e:33:f0:b3:1c:ad:15:ed:58:96:8c:1c:d6:
c5:20:c8:bf:a3:ac:30:5a:bd:9b:41:4a:cc:8f:12:99:53:39:
45:a8:bb:21:99:f4:99:71:3a:8b:10:b7:33:e5:ea:96:33:ee:
f8:d8:fd:5e:d5:53:87:6c:c0:5d:85:2e:45:83:ff:31:67:73:
bc:a8:91:fb:da:e6:2f:c4:2d:20:96:19:17:92:2c:3a:84:69:
c9:68:38:f2:8a:1a:5b:7e:a2:fe:3d:ae:3b:6a:78:7f:61:b9:
99:a8:32:25:dd:38:27:81:c3:7d:10:d4:1e:f2:36:9c:00:21:
a0:4c:f8:a1:b2:79:a5:82:b6:86:99:cc:47:b4:74:75:41:68:
df:ee:9a:cb:e4:6b:f0:78:d1:00:f3:c8:c1:72:c3:f8:57:25:
75:2f:d5:b2:9c:29:5c:23:66:28:e3:57:55:42:03:43:c3:4f:
fe:3e:d4:c3:d5:7e:bd:0f:9e:a1:c2:d9:3f:0b:23:7a:9f:82:
c3:85:f3:45:5c:1d:9e:b2:59:a3:f2:2e:fc:93:92:29:e9:ec:
23:7d:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:19:57 2025 by rpki-client