Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hfV-b97Lp4KiI8h8_p9Bp97eNcc.roa
File: hfV-b97Lp4KiI8h8_p9Bp97eNcc.roa (raw, json)
Hash identifier: nwx4yUB+FBWzcEY7eHsS51cxrx2GvdTPD2SDZb71WFQ=
Subject key identifier: 85:F5:7E:6F:DE:CB:A7:82:A2:23:C8:7C:FE:9F:41:A7:DE:DE:35:C7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198749B92B065CEB188CB6EAADA56447015
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hfV-b97Lp4KiI8h8_p9Bp97eNcc.roa
Signing time: Mon 04 Aug 2025 10:23:29 +0000
ROA not before: Mon 04 Aug 2025 10:23:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1583::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
2a0f:e7c6:55::/48 maxlen: 48
2a10:3240::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:33::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:8c82:3::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e102:3::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:9b:92:b0:65:ce:b1:88:cb:6e:aa:da:56:44:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 4 10:23:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f57e6fdecba782a223c87cfe9f41a7dede35c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:00:20:a7:6d:eb:91:6e:57:9b:78:73:bd:
b5:0c:f0:e3:2c:0b:81:cb:92:14:26:a4:9e:f4:60:
e1:08:f2:34:78:54:b0:a0:a4:35:9d:ff:59:d9:4e:
eb:42:8b:06:cc:9d:8b:7d:69:1e:70:7d:4c:80:60:
24:de:94:b3:1b:38:ac:df:dc:cc:d2:06:f7:5d:5b:
16:8c:5d:47:6b:25:0a:8a:06:56:90:59:b8:ce:64:
6f:f8:92:91:fc:e4:72:06:fb:db:da:23:12:b0:2f:
74:ca:48:4e:2f:25:d1:74:82:bd:38:28:86:d0:0d:
da:23:3b:6d:48:03:bc:41:79:3c:a8:1c:3f:a6:33:
52:d3:9b:35:82:1c:0f:71:72:41:9b:94:7c:95:93:
f1:91:6d:9a:9d:30:17:32:cd:87:87:d1:9f:db:c0:
74:cf:fd:23:7e:3c:73:6f:1e:ec:04:4a:fd:ef:a8:
55:06:6d:3b:30:5a:52:cb:3e:0e:da:8c:56:a1:32:
55:91:9e:70:f6:84:df:a7:09:c8:df:48:0d:da:47:
4f:fc:b8:94:4c:43:1c:06:a2:29:7b:6a:d8:09:ef:
d8:c8:13:06:5b:29:50:e6:38:b2:c4:3e:9a:eb:63:
46:b0:37:4d:6d:22:49:71:cf:96:1b:ef:bb:d9:b2:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:7E:6F:DE:CB:A7:82:A2:23:C8:7C:FE:9F:41:A7:DE:DE:35:C7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hfV-b97Lp4KiI8h8_p9Bp97eNcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1184:33::/48
2a06:35c2::/32
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:c780::/31
2a0e:f201::/32
2a0f:1583::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e6c5::/32
2a0f:e7c6:55::/48
2a10:3240::/29
2a10:32c0::/29
2a10:35c0::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:6d40::/29
2a10:7900::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:33::/48
2a13:18c6:55::/48
2a13:8c82:3::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e102:3::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
65:2e:17:78:8b:c9:b1:35:42:9a:b8:41:2f:57:3a:61:ea:a6:
40:39:f1:bb:b1:b6:de:33:c2:8d:9c:44:a1:44:9f:91:73:7b:
57:70:1e:fe:ac:f2:68:e4:b7:59:89:24:06:3d:0d:13:03:2d:
a7:21:a4:d5:87:8e:71:6b:09:8d:d1:89:dc:9d:73:d7:60:27:
68:af:7f:53:07:f6:ce:ec:89:3c:d6:1c:5e:f3:36:68:bb:15:
4e:f8:b3:8a:1d:36:93:7f:7d:50:01:25:17:17:d4:b9:4d:ba:
9a:13:d0:ae:99:8d:1c:7f:8c:55:57:b0:0b:23:d3:f5:5c:b3:
3f:80:4b:ff:57:da:f8:df:61:9a:a5:a1:0f:5a:bb:49:bf:22:
ff:37:7d:c2:60:9c:ce:53:0b:48:6e:a1:9b:29:e0:e4:a0:00:
71:80:01:33:97:41:21:a9:14:26:fa:50:89:8e:27:b3:0f:a3:
98:85:88:ea:ef:c2:69:bf:5e:86:20:73:04:d7:d5:ef:5e:a6:
83:2d:1b:37:fe:08:67:c9:ba:f4:85:35:6a:e4:13:2b:23:c6:
28:9d:f0:63:11:b2:c6:4e:09:66:cb:03:d5:2b:17:2d:f4:1d:
19:a2:2d:c5:34:79:59:e7:a8:ea:5c:b2:59:0b:94:f3:2b:da:
db:4b:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:13 2025 by rpki-client