Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/OOKUSdBo719Fy6eQLO8FhLRmb-A.roa
File: OOKUSdBo719Fy6eQLO8FhLRmb-A.roa (raw, json)
Hash identifier: 0lNFdByCLqg9LTuNeACyTh+4cjDobHcCQ2yCIpT7EoU=
Subject key identifier: 38:E2:94:49:D0:68:EF:5F:45:CB:A7:90:2C:EF:05:84:B4:66:6F:E0
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0196CEC61655B5D13F41F0FAB750C1A4717B
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/OOKUSdBo719Fy6eQLO8FhLRmb-A.roa
Signing time: Wed 14 May 2025 12:30:10 +0000
ROA not before: Wed 14 May 2025 12:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.109.0/24 maxlen: 24
95.215.110.0/23 maxlen: 23
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:c6:16:55:b5:d1:3f:41:f0:fa:b7:50:c1:a4:71:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: May 14 12:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e29449d068ef5f45cba7902cef0584b4666fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:f3:b8:e7:b7:dc:1b:21:5b:54:cd:e3:4d:
84:65:76:d0:86:38:c7:a4:b2:60:a1:77:51:7d:80:
8e:94:36:09:ce:e5:93:2c:7f:47:f1:8a:bd:86:d6:
55:9f:1e:d5:ee:29:0a:b6:16:79:99:8a:d3:d4:ca:
18:93:a5:5d:b9:9a:da:14:f2:7b:c2:d8:9c:63:79:
55:e3:4e:a6:a3:38:80:a8:37:a6:52:ee:a0:e9:29:
ff:f2:54:15:8b:7c:09:ce:17:5b:03:0a:0b:d7:87:
2e:b3:09:7a:96:6d:f8:06:8e:f1:49:3a:c0:a6:d0:
02:94:f9:12:07:ef:5a:76:0d:bd:b9:07:87:93:eb:
db:08:e2:5f:5d:f2:8b:9a:cf:df:01:d1:dc:93:fb:
3d:2d:b4:23:6e:5b:a6:c7:7b:9b:c8:16:2d:ea:5f:
df:0e:78:8d:e4:c2:35:45:9e:ff:09:01:94:b6:4a:
db:72:d4:ad:21:3e:3d:37:7a:79:10:0d:b3:6d:88:
8f:ef:62:d6:a0:41:6b:3f:e4:2a:a3:80:1c:18:00:
ea:5d:21:07:07:55:2f:14:2a:aa:bc:8b:8d:d5:3d:
ff:63:53:6a:b6:9b:7f:fd:2e:08:4c:8e:eb:a1:62:
6f:39:ad:e1:b0:3d:30:97:12:60:9f:82:bd:a8:3f:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:94:49:D0:68:EF:5F:45:CB:A7:90:2C:EF:05:84:B4:66:6F:E0
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/OOKUSdBo719Fy6eQLO8FhLRmb-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
a7:ae:78:c7:01:6a:6c:32:3a:3b:dd:f7:c1:53:dc:9b:8d:bf:
7d:58:93:e4:99:6e:ff:5a:f6:d3:50:dd:10:30:a1:70:02:78:
b3:16:68:ee:64:64:ca:e7:cd:4c:07:b8:80:69:e8:93:2f:59:
42:b3:6a:99:e9:82:74:18:90:53:56:54:d0:4c:d2:70:04:7f:
9c:63:47:96:e4:4f:69:f1:d7:6e:29:cd:1c:0b:dd:e9:bb:94:
67:7f:68:26:27:07:7f:dc:cc:c7:c3:25:25:da:7e:5b:f4:7a:
35:1f:9a:35:76:e5:86:89:17:b5:d0:19:c3:92:25:66:c2:de:
8d:22:2e:a3:45:a3:04:3a:16:76:49:8e:5e:5f:eb:35:a1:d8:
df:5e:a8:f6:ce:55:5d:8b:93:80:02:fa:28:1f:76:0f:be:7d:
24:e9:94:15:5b:61:f5:38:02:0b:45:49:de:79:a4:89:de:78:
54:fe:20:5a:81:9f:f5:68:ae:4e:66:a3:d2:49:6f:df:5b:ce:
ec:70:ff:8b:7d:e9:99:62:de:8d:e0:c0:c9:9d:43:0c:5b:21:
d5:08:63:73:61:66:1d:14:d2:2d:a9:5c:f7:e4:30:7e:b5:23:
91:a5:dc:ea:a3:29:60:8c:5b:77:14:4b:11:24:27:63:83:23:
9a:7d:b9:d3
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISAZbOxhZVtdE/QfD6t1DBpHF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjUwNTE0MTIzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGUyOTQ0OWQwNjhlZjVmNDVjYmE3OTAyY2VmMDU4NGI0NjY2ZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl7zuOe33BshW1TN402EZXbQhjjH
pLJgoXdRfYCOlDYJzuWTLH9H8Yq9htZVnx7V7ikKthZ5mYrT1MoYk6VduZraFPJ7
wticY3lV406moziAqDemUu6g6Sn/8lQVi3wJzhdbAwoL14cuswl6lm34Bo7xSTrA
ptAClPkSB+9adg29uQeHk+vbCOJfXfKLms/fAdHck/s9LbQjblumx3ubyBYt6l/f
DniN5MI1RZ7/CQGUtkrbctStIT49N3p5EA2zbYiP72LWoEFrP+Qqo4AcGADqXSEH
B1UvFCqqvIuN1T3/Y1Nqtpt//S4ITI7roWJvOa3hsD0wlxJgn4K9qD9bUwIDAQAB
o4IDZzCCA2MwHQYDVR0OBBYEFDjilEnQaO9fRcunkCzvBYS0Zm/gMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvT09LVVNkQm83MTlGeTZlUUxPOEZoTFJtYi1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBewYIKwYBBQUHAQcBAf8EggFqMIIBZjCBrwQCAAEwgagD
BAEtjtADBAAtjtMDBAItl4gDBABQTCgDBABRFsEDBABTq/ADBABUNiUDBABUNicD
BAJf12wDBAC5KhoDBAK5dkADBAK5nLADBAC5sXEDBAC5sXMDBAG5xUgDBAK53CAw
DAMEArnmjAMEALnmjgMEAbn2dAMEALn2dzAMAwQCuf68AwQAuf6+MAwDBAPBJugD
BADBJuoDBADCGtIDBADCcWgDBADCcWswgbEEAgACMIGqMA4DBQAqBftBAwUAKgX7
QgMFASoF+0QDBwEqBxTAAAADBgQqBxTAEDAQAwYEKgcUwDADBgQqBxTAYAMGBCoH
FMDQMA4DBQAqBxTBAwUAKgcUwgMFASoHFMYwDgMFByoKR4ADBQEqCkeEAwUAKgwh
AwMFACoMUkEDBQAqDFJFAwYEKgxSR3ADBgYqDFJHwAMFASoNYMADBQAqDWDDAwUA
Kg13QAMFACoNd0cwDQYJKoZIhvcNAQELBQADggEBAKeueMcBamwyOjvd98FT3JuN
v31Yk+SZbv9a9tNQ3RAwoXACeLMWaO5kZMrnzUwHuIBp6JMvWUKzapnpgnQYkFNW
VNBM0nAEf5xjR5bkT2nx124pzRwL3em7lGd/aCYnB3/czMfDJSXaflv0ejUfmjV2
5YaJF7XQGcOSJWbC3o0iLqNFowQ6FnZJjl5f6zWh2N9eqPbOVV2Lk4AC+igfdg++
fSTplBVbYfU4AgtFSd55pIneeFT+IFqBn/Vork5mo9JJb99bzuxw/4t96Zli3o3g
wMmdQwxbIdUIY3NhZh0U0i2pXPfkMH61I5Gl3OqjKWCMW3cUSxEkJ2ODI5p9udM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:21:25 2025 by rpki-client