Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q4e47aoF5XZUwhBP0RDgUcD7uqw.roa
File: Q4e47aoF5XZUwhBP0RDgUcD7uqw.roa (raw, json)
Hash identifier: oXI9FjFFzFL2UxQcpu4KEEMpY1SvzuogaqxutKf9ZKQ=
Subject key identifier: 43:87:B8:ED:AA:05:E5:76:54:C2:10:4F:D1:10:E0:51:C0:FB:BA:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197794D4B31BB5107A5819ECCE2A6AC58FE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q4e47aoF5XZUwhBP0RDgUcD7uqw.roa
Signing time: Mon 16 Jun 2025 15:13:17 +0000
ROA not before: Mon 16 Jun 2025 15:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.85.160.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
80.253.251.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1206:44::/48 maxlen: 48
2a0f:1583::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a10:3240::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc0:271::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:c9a1::/48 maxlen: 48
2a13:8c82:3::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:cf01::/32 maxlen: 32
2a13:cf03::/32 maxlen: 32
2a13:cf06::/32 maxlen: 32
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e102:3::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:4d:4b:31:bb:51:07:a5:81:9e:cc:e2:a6:ac:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 16 15:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4387b8edaa05e57654c2104fd110e051c0fbbaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:04:5f:82:ae:94:ba:49:f6:a5:bf:01:8d:
06:82:95:c9:15:63:26:80:07:8e:42:af:0b:ef:4e:
0d:9e:06:b3:da:6e:c7:9f:31:43:d7:c8:d7:5e:df:
4c:b6:b3:03:7c:ef:7d:65:21:d9:8a:92:01:1c:3b:
ae:11:4c:ef:3f:af:a3:53:55:bf:7e:ad:e1:77:a8:
5a:3c:17:52:a3:78:97:5b:97:bf:58:e0:d2:e5:16:
91:b1:0e:5a:b5:3d:21:76:46:08:04:0e:5b:ca:01:
9a:6e:15:11:b3:05:d0:07:43:aa:30:41:1c:8b:dc:
cd:0e:d0:62:18:f3:9a:3f:da:98:b7:45:ee:10:8f:
5d:96:10:b7:b5:7a:43:f0:02:ea:f5:3c:89:33:d1:
32:8e:f5:6e:6d:ce:71:de:0d:62:19:1c:29:a6:e4:
cd:8f:6a:02:ad:05:9a:9f:7d:54:88:64:c6:82:cf:
50:c3:7c:91:a5:fa:9c:73:a6:d1:5c:43:11:1c:0b:
6f:57:7c:b2:e7:97:c3:a2:8f:cf:0c:6d:3a:ec:c5:
99:4e:38:58:8d:48:01:cb:41:50:30:59:0a:5d:71:
e4:5e:9a:7f:84:8d:ee:42:45:e5:4c:2c:d9:9e:b8:
c4:74:78:87:6e:a6:99:74:ff:ee:ad:79:c1:c4:d2:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:B8:ED:AA:05:E5:76:54:C2:10:4F:D1:10:E0:51:C0:FB:BA:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q4e47aoF5XZUwhBP0RDgUcD7uqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.160.0/24
45.86.247.0/24
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/23
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
195.66.24.0/23
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1184:33::/48
2a06:35c2::/32
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:1a83:66::/48
2a0e:c780::/31
2a0e:f201::/32
2a0f:1206:44::/48
2a0f:1583::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e6c5::/32
2a0f:e7c6:55::/48
2a0f:e844:8642::/48
2a10:3240::/29
2a10:32c0::/29
2a10:35c0::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:6d40::/29
2a10:7500::/29
2a10:7900::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc0:271::/48
2a12:ecc0:3e2::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:55::/48
2a13:18c6:c9a1::/48
2a13:8c82:3::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:cf01::/32
2a13:cf03::/32
2a13:cf06::/32
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e102:3::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
92:d4:ba:4e:4f:63:91:38:bd:dd:f3:ee:1d:fc:8e:60:87:36:
4f:bf:57:17:ae:36:1b:02:08:c1:55:35:ba:82:35:d1:fa:b0:
91:6e:8b:88:24:cd:09:1c:23:ac:e8:fa:63:1e:82:ac:ee:54:
04:fa:f8:44:04:d8:31:a1:46:55:f5:28:eb:a4:4a:05:cf:03:
97:e7:7f:26:7e:e8:2a:15:65:7c:41:bd:53:5c:20:b7:8e:d6:
c0:f6:df:80:8c:7c:cd:e6:52:57:3d:fb:f4:41:d1:f2:fe:8d:
06:23:d6:7d:20:cb:01:cf:c8:7a:a9:cb:05:0e:05:b7:62:78:
0c:a3:eb:2f:52:07:7d:9a:49:17:5e:0a:e4:a7:49:b3:6b:99:
e3:40:2e:29:38:d6:54:f2:ee:6f:b6:6d:64:b0:9d:1a:1f:cc:
43:47:3f:0e:c0:3e:d7:ff:18:d7:fd:e3:fe:2a:6e:59:9c:7f:
8a:6c:d0:73:c0:f3:51:89:9e:24:3f:6c:f5:19:93:c8:fb:bd:
aa:5d:e2:7f:ed:1d:3e:1b:cc:54:4a:3f:77:02:a0:a4:8e:e9:
e0:48:61:78:52:d5:23:e3:4f:66:fb:d9:b8:ca:42:e5:2f:c3:
c6:ba:65:3e:c2:be:0c:3d:db:7a:1b:6e:6a:20:27:a0:2e:10:
58:b1:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:45:16 2025 by rpki-client