Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9x0qc3Hoarv34HhsXsQlLLCzbuY.roa
File: 9x0qc3Hoarv34HhsXsQlLLCzbuY.roa (raw, json)
Hash identifier: ITdgwMGb40604q60qft1XR/69xmN8hJpeol1Khokvm0=
Subject key identifier: F7:1D:2A:73:71:E8:6A:BB:F7:E0:78:6C:5E:C4:25:2C:B0:B3:6E:E6
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019758EEDA25B1B87659470270F2EFD69C6E
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9x0qc3Hoarv34HhsXsQlLLCzbuY.roa
Signing time: Tue 10 Jun 2025 08:22:17 +0000
ROA not before: Tue 10 Jun 2025 08:22:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 328126
IP address blocks: 80.15.228.0/24 maxlen: 32
80.15.229.0/24 maxlen: 32
80.15.230.0/24 maxlen: 32
80.15.231.0/24 maxlen: 32
80.15.232.0/24 maxlen: 32
80.15.233.0/24 maxlen: 32
80.15.234.0/24 maxlen: 32
80.15.235.0/24 maxlen: 32
80.15.242.0/24 maxlen: 32
80.15.243.0/24 maxlen: 32
80.15.244.0/24 maxlen: 32
80.15.245.0/24 maxlen: 32
80.15.246.0/24 maxlen: 32
80.15.247.0/24 maxlen: 32
80.15.248.0/24 maxlen: 32
80.15.249.0/24 maxlen: 32
80.15.250.0/24 maxlen: 32
80.15.251.0/24 maxlen: 32
80.15.252.0/24 maxlen: 32
80.15.253.0/24 maxlen: 32
80.15.254.0/24 maxlen: 32
80.15.255.0/24 maxlen: 32
90.84.143.0/24 maxlen: 32
90.84.148.0/24 maxlen: 32
90.84.153.0/24 maxlen: 32
193.249.225.0/24 maxlen: 32
2a01:c9c0:c000::/48 maxlen: 128
2a01:c9c0:c002::/48 maxlen: 128
2a01:c9c0:c004::/48 maxlen: 128
2a01:c9c0:c006::/48 maxlen: 128
2a01:c9c0:c008::/48 maxlen: 128
2a01:c9c0:c009::/48 maxlen: 48
2a01:c9c0:c00a::/48 maxlen: 128
2a01:c9c0:c00c::/48 maxlen: 128
2a01:c9c0:c00f::/48 maxlen: 128
2a01:c9c0:c010::/48 maxlen: 128
2a01:c9c0:c012::/48 maxlen: 128
2a01:c9c0:c014::/48 maxlen: 128
2a01:c9c0:c016::/48 maxlen: 128
2a01:c9c0:c018::/48 maxlen: 128
2a01:c9c0:c01a::/48 maxlen: 128
2a01:c9c0:c01c::/48 maxlen: 128
2a01:c9c0:c01e::/48 maxlen: 128
2a01:c9c0:c020::/48 maxlen: 128
2a01:c9c0:c022::/48 maxlen: 128
2a01:c9c0:c024::/48 maxlen: 128
2a01:c9c0:c026::/48 maxlen: 128
2a01:c9c0:c040::/48 maxlen: 128
2a01:c9c0:c060::/48 maxlen: 128
2a01:c9c0:c062::/48 maxlen: 128
2a01:c9c0:c080::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:ee:da:25:b1:b8:76:59:47:02:70:f2:ef:d6:9c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jun 10 08:22:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f71d2a7371e86abbf7e0786c5ec4252cb0b36ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:68:79:fc:74:3a:16:7f:7f:88:12:97:7f:
1c:e0:99:af:82:1a:6a:f0:dd:5e:cc:1f:f0:c9:ae:
4e:54:a7:de:30:5e:ef:a1:e3:cd:35:79:29:3d:28:
97:2b:0d:b5:02:ab:10:ad:6f:27:dd:3e:0f:98:3f:
76:fb:a8:2d:f8:9d:9d:4d:cd:aa:34:fe:2b:92:a0:
eb:48:78:b6:42:93:b4:16:46:ab:d1:df:26:80:09:
c4:c8:8e:15:2c:c9:b5:64:34:af:ac:17:f5:68:b1:
66:53:fe:02:29:dc:6b:bd:d4:bf:ca:0c:94:30:1e:
4a:8d:dd:04:ce:90:50:15:78:37:0d:cf:56:ee:1f:
ea:99:2d:00:68:a4:dc:8d:a6:1c:6d:b7:85:c8:ce:
bd:86:e7:ec:81:16:55:ac:05:a6:0a:ad:79:00:7e:
1f:21:3e:e5:e3:83:69:61:db:07:ae:1b:1a:2e:b8:
30:8f:11:48:b5:64:4e:f5:fb:bd:e5:e8:bd:4c:05:
e6:b5:7b:ef:20:93:e3:dd:28:41:1d:05:17:d6:d5:
ff:31:4e:ae:02:df:5c:19:ae:51:a9:4e:03:ac:26:
b8:32:0d:df:8f:45:8d:33:f0:a3:5b:56:c5:c9:e4:
64:4c:fb:f0:05:32:f3:3e:7b:00:3e:43:3d:30:8a:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:2A:73:71:E8:6A:BB:F7:E0:78:6C:5E:C4:25:2C:B0:B3:6E:E6
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9x0qc3Hoarv34HhsXsQlLLCzbuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.15.228.0-80.15.235.255
80.15.242.0-80.15.255.255
90.84.143.0/24
90.84.148.0/24
90.84.153.0/24
193.249.225.0/24
IPv6:
2a01:c9c0:c000::/48
2a01:c9c0:c002::/48
2a01:c9c0:c004::/48
2a01:c9c0:c006::/48
2a01:c9c0:c008::-2a01:c9c0:c00a:ffff:ffff:ffff:ffff:ffff
2a01:c9c0:c00c::/48
2a01:c9c0:c00f::-2a01:c9c0:c010:ffff:ffff:ffff:ffff:ffff
2a01:c9c0:c012::/48
2a01:c9c0:c014::/48
2a01:c9c0:c016::/48
2a01:c9c0:c018::/48
2a01:c9c0:c01a::/48
2a01:c9c0:c01c::/48
2a01:c9c0:c01e::/48
2a01:c9c0:c020::/48
2a01:c9c0:c022::/48
2a01:c9c0:c024::/48
2a01:c9c0:c026::/48
2a01:c9c0:c040::/48
2a01:c9c0:c060::/48
2a01:c9c0:c062::/48
2a01:c9c0:c080::/48
Signature Algorithm: sha256WithRSAEncryption
30:70:72:45:da:10:03:f9:a8:ff:c6:b5:5f:1a:1d:36:7c:2b:
99:c8:05:ab:54:02:24:3c:a0:c5:40:f3:47:dd:0e:62:0e:cb:
73:4d:09:b0:84:1e:77:78:0f:10:4c:f7:e8:df:af:78:18:53:
9e:02:d3:a6:82:e9:65:4b:98:91:d9:1e:11:a4:dd:0d:d8:1e:
23:70:27:08:fb:86:10:9d:da:a0:7a:7c:66:e5:92:7c:69:a8:
61:f0:ac:17:c7:e0:7f:db:9c:44:0c:36:41:6f:82:cc:28:7b:
69:9d:76:18:23:48:1d:3f:2f:96:7b:95:98:d6:35:a3:86:b6:
e7:35:40:c1:db:da:8c:9b:a0:3f:3b:8f:0f:03:d8:64:08:98:
81:d7:19:7a:5f:bb:96:0e:8f:c1:60:d9:9d:ae:68:f8:2f:11:
8e:9b:4e:ab:14:83:db:bb:1c:ca:42:d5:ee:ad:eb:09:b2:98:
20:a1:0e:46:81:19:ba:7d:47:03:ab:ee:00:cb:cd:55:21:bf:
79:75:4d:4b:74:92:29:68:91:4b:59:1c:53:51:e7:d0:9a:fc:
23:04:62:6b:ee:08:56:48:87:70:5c:89:84:a0:d0:0d:ab:2b:
dd:09:8e:19:1e:ab:bc:57:70:15:d9:ed:ee:80:2a:a0:ec:92:
4f:25:2c:ca
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgISAZdY7tolsbh2WUcCcPLv1pxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwNjEwMDgyMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFkMmE3MzcxZTg2YWJiZjdlMDc4NmM1ZWM0MjUyY2IwYjM2ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsNoefx0OhZ/f4gSl38c4Jmvghpq
8N1ezB/wya5OVKfeMF7voePNNXkpPSiXKw21AqsQrW8n3T4PmD92+6gt+J2dTc2q
NP4rkqDrSHi2QpO0Fkar0d8mgAnEyI4VLMm1ZDSvrBf1aLFmU/4CKdxrvdS/ygyU
MB5Kjd0EzpBQFXg3Dc9W7h/qmS0AaKTcjaYcbbeFyM69hufsgRZVrAWmCq15AH4f
IT7l44NpYdsHrhsaLrgwjxFItWRO9fu95ei9TAXmtXvvIJPj3ShBHQUX1tX/MU6u
At9cGa5RqU4DrCa4Mg3fj0WNM/CjW1bFyeRkTPvwBTLzPnsAPkM9MIpNpQIDAQAB
o4IDIjCCAx4wHQYDVR0OBBYEFPcdKnNx6Gq79+B4bF7EJSyws27mMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvOXgwcWMzSG9hcnYzNEhoc1hzUWxMTEN6YnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNgYIKwYBBQUHAQcBAf8EggElMIIBITA5BAIAATAzMAwD
BAJQD+QDBAJQD+gwCwMEAVAP8gMDBFAAAwQAWlSPAwQAWlSUAwQAWlSZAwQAwfnh
MIHjBAIAAjCB3AMHACoBycDAAAMHACoBycDAAgMHACoBycDABAMHACoBycDABjAS
AwcDKgHJwMAIAwcAKgHJwMAKAwcAKgHJwMAMMBIDBwAqAcnAwA8DBwAqAcnAwBAD
BwAqAcnAwBIDBwAqAcnAwBQDBwAqAcnAwBYDBwAqAcnAwBgDBwAqAcnAwBoDBwAq
AcnAwBwDBwAqAcnAwB4DBwAqAcnAwCADBwAqAcnAwCIDBwAqAcnAwCQDBwAqAcnA
wCYDBwAqAcnAwEADBwAqAcnAwGADBwAqAcnAwGIDBwAqAcnAwIAwDQYJKoZIhvcN
AQELBQADggEBADBwckXaEAP5qP/GtV8aHTZ8K5nIBatUAiQ8oMVA80fdDmIOy3NN
CbCEHnd4DxBM9+jfr3gYU54C06aC6WVLmJHZHhGk3Q3YHiNwJwj7hhCd2qB6fGbl
knxpqGHwrBfH4H/bnEQMNkFvgswoe2mddhgjSB0/L5Z7lZjWNaOGtuc1QMHb2oyb
oD87jw8D2GQImIHXGXpfu5YOj8Fg2Z2uaPgvEY6bTqsUg9u7HMpC1e6t6wmymCCh
DkaBGbp9RwOr7gDLzVUhv3l1TUt0kilokUtZHFNR59Ca/CMEYmvuCFZIh3BciYSg
0A2rK90Jjhkeq7xXcBXZ7e6AKqDskk8lLMo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:10:54 2025 by rpki-client