Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3dlvJCEw5AL9zp_XGfVm4BubT3A.roa
File: 3dlvJCEw5AL9zp_XGfVm4BubT3A.roa (raw, json)
Hash identifier: IGz9NNA33xjuY9ScTG13kSYByKF1PeacjxgTtBtX1Es=
Subject key identifier: DD:D9:6F:24:21:30:E4:02:FD:CE:9F:D7:19:F5:66:E0:1B:9B:4F:70
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01975357E26461B8208901BD61EC7BE017E6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3dlvJCEw5AL9zp_XGfVm4BubT3A.roa
Signing time: Mon 09 Jun 2025 06:19:17 +0000
ROA not before: Mon 09 Jun 2025 06:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.8.80.0/21 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.10.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.49.0/24 maxlen: 24
5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:57:e2:64:61:b8:20:89:01:bd:61:ec:7b:e0:17:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 9 06:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddd96f242130e402fdce9fd719f566e01b9b4f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:10:13:6b:7d:72:35:ea:17:f5:93:0d:11:
ca:72:30:65:0e:8c:66:39:46:8b:5e:4f:90:7b:19:
96:4f:db:4b:65:13:85:d7:eb:20:e5:32:8f:8c:70:
06:22:fe:00:f6:3c:78:39:6e:15:0a:a1:d3:93:81:
48:5c:f5:20:eb:26:92:c9:f2:0f:bd:ed:d6:4e:63:
ba:ae:1a:3a:fa:cd:51:0b:4b:58:3b:99:c0:2e:0a:
f3:f0:64:b8:56:e9:07:d1:22:79:bf:a9:0a:06:b3:
87:b2:7a:9e:4f:f6:12:d9:55:c9:63:d4:50:e2:a5:
b8:0e:15:7a:0a:84:f7:04:74:e3:0b:ab:2a:c0:5b:
76:d7:ad:01:3d:21:20:c9:85:c5:fe:e1:e3:61:b2:
a4:3d:5c:20:80:24:fd:91:6b:b0:ac:c5:09:f7:65:
ee:cb:e4:ea:93:36:4e:b2:3f:3a:e3:bb:ec:05:a5:
4f:df:9c:ad:cf:29:d7:ee:57:79:b8:63:60:db:31:
a6:5d:cc:36:c9:70:89:08:1d:0f:f3:99:0f:83:79:
ed:9a:d4:2d:0a:4c:f6:c1:6c:51:49:93:47:73:88:
cd:91:83:5f:c4:f2:89:9a:8d:87:f7:76:65:30:02:
1b:84:a2:3a:2a:5b:e0:78:54:93:e4:f7:20:b3:7a:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:6F:24:21:30:E4:02:FD:CE:9F:D7:19:F5:66:E0:1B:9B:4F:70
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3dlvJCEw5AL9zp_XGfVm4BubT3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0-5.8.67.255
5.8.80.0/21
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0-5.101.95.255
5.188.10.0/23
5.188.44.0/22
5.188.49.0/24
5.188.192.0/22
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
36:f2:f1:7b:37:fb:77:8d:a0:fb:88:a3:90:ec:b7:ad:a5:c0:
1e:80:ee:d3:47:e1:17:7b:b8:17:8f:08:d8:76:95:ea:e4:3c:
57:6c:6d:0a:29:ef:3d:ae:53:2c:a5:bb:04:88:25:7a:10:3c:
2d:50:50:ae:16:a2:3e:69:e1:a2:35:72:43:80:b4:56:b1:3d:
e6:4a:69:23:56:66:8a:ed:b0:ef:4f:f3:87:c5:33:47:f8:97:
d4:f8:20:3b:70:a7:a7:a7:dd:f1:63:7c:77:7e:d9:db:d1:64:
3a:58:40:21:a6:9b:0c:a0:e4:ff:15:29:0e:33:f3:08:62:81:
c7:1d:42:4e:9a:11:d0:ff:8b:b3:88:cf:9c:8a:3e:08:db:ec:
b0:c0:27:eb:ea:4f:0b:06:52:bc:3e:4f:b4:61:06:93:fc:97:
ce:87:76:9e:64:62:e1:fc:36:36:f9:e3:9b:0c:29:c4:9d:0d:
bd:99:a0:5a:ce:7a:cc:b6:dc:5e:45:5c:20:87:20:35:ed:d5:
38:52:40:c5:da:bf:a8:8c:7a:8a:bb:96:52:7a:e5:74:33:de:
6c:74:56:c3:9a:d4:9c:cb:e1:f7:62:ba:1b:82:00:99:7c:d0:
2e:35:74:9b:d1:0f:37:fb:7d:8a:df:1f:5b:15:1f:e8:ee:25:
83:a0:2b:17
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAZdTV+JkYbggiQG9Yex74BfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwNjA5MDYxOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGQ5NmYyNDIxMzBlNDAyZmRjZTlmZDcxOWY1NjZlMDFiOWI0ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzYQE2t9cjXqF/WTDRHKcjBlDoxm
OUaLXk+QexmWT9tLZROF1+sg5TKPjHAGIv4A9jx4OW4VCqHTk4FIXPUg6yaSyfIP
ve3WTmO6rho6+s1RC0tYO5nALgrz8GS4VukH0SJ5v6kKBrOHsnqeT/YS2VXJY9RQ
4qW4DhV6CoT3BHTjC6sqwFt2160BPSEgyYXF/uHjYbKkPVwggCT9kWuwrMUJ92Xu
y+TqkzZOsj8647vsBaVP35ytzynX7ld5uGNg2zGmXcw2yXCJCB0P85kPg3ntmtQt
Ckz2wWxRSZNHc4jNkYNfxPKJmo2H93ZlMAIbhKI6KlvgeFST5Pcgs3rvrwIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFN3ZbyQhMOQC/c6f1xn1ZuAbm09wMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvM2RsdkpDRXc1QUw5enBfWEdmVm00QnViVDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCASsEAgABMIIB
IzALAwMDBQgDBAAFCBADBAMFCDADBAEFCDwwDAMEAAUIQQMEAgUIQAMEAwUIUAME
AwVlAAMEAgVlIAMEAgVlQDAMAwQBBWVaAwQFBWVAAwQBBbwKAwQCBbwsAwQABbwx
AwQCBbzAAwQBBbzMAwQCBbzQAwQABbzfMAwDBAAFvOkDBAIFvOgDBAIFvfgDBAIf
LLwDBAMfuMADBAEfuO4DBAAfuPMDBAAlCTADBAAlizUDBAIlizgDBAEuoQIDBAAu
oQgDBAAuoQoDBAEuoQ4DBAIuoRQwDAMEAi6hHAMEAi6hIDAMAwQCLqEsAwQCLqEw
AwQCW/MgMAwDBARb8zADBAFb8zwDBAJf1wAwDAMEAJK53wMEA5K54AMEAryP6AME
AcMC8DARBAIAAjALAwkGKgAdeAEAAcAwDQYJKoZIhvcNAQELBQADggEBADby8Xs3
+3eNoPuIo5Dst62lwB6A7tNH4Rd7uBePCNh2lerkPFdsbQop7z2uUyyluwSIJXoQ
PC1QUK4Woj5p4aI1ckOAtFaxPeZKaSNWZortsO9P84fFM0f4l9T4IDtwp6en3fFj
fHd+2dvRZDpYQCGmmwyg5P8VKQ4z8whigccdQk6aEdD/i7OIz5yKPgjb7LDAJ+vq
TwsGUrw+T7RhBpP8l86Hdp5kYuH8Njb545sMKcSdDb2ZoFrOesy23F5FXCCHIDXt
1ThSQMXav6iMeoq7llJ65XQz3mx0VsOa1JzL4fdiuhuCAJl80C41dJvRDzf7fYrf
H1sVH+juJYOgKxc=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:25 2025 by rpki-client