Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/7Ghy2KOMD1-pxs6lWGiA6q4-z1k.roa
File: 7Ghy2KOMD1-pxs6lWGiA6q4-z1k.roa (raw, json)
Hash identifier: J5S5OetOqGJ7Io3TU/mcCxQvdxv1Uc0njSvqSkgbTBE=
Subject key identifier: EC:68:72:D8:A3:8C:0F:5F:A9:C6:CE:A5:58:68:80:EA:AE:3E:CF:59
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0198896CE05B2942E211908EF68B0C6F9EDA
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/7Ghy2KOMD1-pxs6lWGiA6q4-z1k.roa
Signing time: Fri 08 Aug 2025 11:24:30 +0000
ROA not before: Fri 08 Aug 2025 11:24:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.66.0/24 maxlen: 24
217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:8::/48 maxlen: 48
2a03:32c0:9::/48 maxlen: 48
2a03:32c0:22::/48 maxlen: 48
2a03:32c0:23::/48 maxlen: 48
2a03:32c0:1000::/48 maxlen: 48
2a03:32c0:1001::/48 maxlen: 48
2a03:32c0:1002::/48 maxlen: 48
2a03:32c0:1003::/48 maxlen: 48
2a03:32c0:1004::/48 maxlen: 48
2a03:32c0:1005::/48 maxlen: 48
2a03:32c0:1006::/48 maxlen: 48
2a03:32c0:1007::/48 maxlen: 48
2a03:32c0:1008::/48 maxlen: 48
2a03:32c0:1009::/48 maxlen: 48
2a03:32c0:2000::/48 maxlen: 48
2a03:32c0:2001::/48 maxlen: 48
2a03:32c0:2002::/48 maxlen: 48
2a03:32c0:2003::/48 maxlen: 48
2a03:32c0:2004::/48 maxlen: 48
2a03:32c0:2005::/48 maxlen: 48
2a03:32c0:2006::/48 maxlen: 48
2a03:32c0:2007::/48 maxlen: 48
2a03:32c0:2008::/48 maxlen: 48
2a03:32c0:2009::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:3008::/48 maxlen: 48
2a03:32c0:3009::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:4003::/48 maxlen: 48
2a03:32c0:4004::/48 maxlen: 48
2a03:32c0:4005::/48 maxlen: 48
2a03:32c0:4006::/48 maxlen: 48
2a03:32c0:4007::/48 maxlen: 48
2a03:32c0:4008::/48 maxlen: 48
2a03:32c0:4009::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:5003::/48 maxlen: 48
2a03:32c0:5004::/48 maxlen: 48
2a03:32c0:5005::/48 maxlen: 48
2a03:32c0:5006::/48 maxlen: 48
2a03:32c0:5007::/48 maxlen: 48
2a03:32c0:5008::/48 maxlen: 48
2a03:32c0:5009::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:6002::/48 maxlen: 48
2a03:32c0:6003::/48 maxlen: 48
2a03:32c0:6004::/48 maxlen: 48
2a03:32c0:6005::/48 maxlen: 48
2a03:32c0:6006::/48 maxlen: 48
2a03:32c0:6007::/48 maxlen: 48
2a03:32c0:6008::/48 maxlen: 48
2a03:32c0:6009::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:7008::/48 maxlen: 48
2a03:32c0:7009::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:8008::/48 maxlen: 48
2a03:32c0:8009::/48 maxlen: 48
2a03:32c0:9000::/48 maxlen: 48
2a03:32c0:9001::/48 maxlen: 48
2a03:32c0:9002::/48 maxlen: 48
2a03:32c0:9003::/48 maxlen: 48
2a03:32c0:9004::/48 maxlen: 48
2a03:32c0:9005::/48 maxlen: 48
2a03:32c0:9006::/48 maxlen: 48
2a03:32c0:9007::/48 maxlen: 48
2a03:32c0:9008::/48 maxlen: 48
2a03:32c0:9009::/48 maxlen: 48
2a03:32c0:9010::/48 maxlen: 48
2a03:32c0:9011::/48 maxlen: 48
2a03:32c0:a000::/48 maxlen: 48
2a03:32c0:a001::/48 maxlen: 48
2a03:32c0:a002::/48 maxlen: 48
2a03:32c0:a003::/48 maxlen: 48
2a03:32c0:a004::/48 maxlen: 48
2a03:32c0:a005::/48 maxlen: 48
2a03:32c0:a006::/48 maxlen: 48
2a03:32c0:a007::/48 maxlen: 48
2a03:32c0:a008::/48 maxlen: 48
2a03:32c0:a009::/48 maxlen: 48
2a03:32c0:b000::/48 maxlen: 48
2a03:32c0:b001::/48 maxlen: 48
2a03:32c0:b002::/48 maxlen: 48
2a03:32c0:b003::/48 maxlen: 48
2a03:32c0:b004::/48 maxlen: 48
2a03:32c0:b005::/48 maxlen: 48
2a03:32c0:b006::/48 maxlen: 48
2a03:32c0:b007::/48 maxlen: 48
2a03:32c0:b008::/48 maxlen: 48
2a03:32c0:b009::/48 maxlen: 48
2a03:32c0:c000::/48 maxlen: 48
2a03:32c0:c001::/48 maxlen: 48
2a03:32c0:c008::/48 maxlen: 48
2a03:32c0:d000::/48 maxlen: 48
2a03:32c0:d001::/48 maxlen: 48
2a03:32c0:d002::/48 maxlen: 48
2a03:32c0:d008::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
2a03:32c0:f000::/48 maxlen: 48
2a03:32c0:f001::/48 maxlen: 48
2a03:32c0:f008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:6c:e0:5b:29:42:e2:11:90:8e:f6:8b:0c:6f:9e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Aug 8 11:24:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec6872d8a38c0f5fa9c6cea5586880eaae3ecf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:73:a2:1b:12:af:56:f5:72:b5:3b:fe:75:
58:b7:92:15:b9:2b:42:04:64:8f:f2:f2:4e:e5:82:
90:a2:6d:2d:77:a7:51:a4:04:e4:d8:e9:3f:75:f3:
4b:27:cb:18:82:0f:cc:65:8b:a7:9a:59:e1:85:e1:
4d:2d:ef:67:68:ff:15:6f:43:e9:05:52:22:2c:22:
fb:12:46:50:40:0f:aa:9c:5f:ea:8c:eb:e1:5b:33:
24:96:ae:7f:b8:57:6b:4f:00:ff:5d:5e:a2:16:6a:
f2:f8:21:91:15:2c:b8:68:16:5d:d6:50:c9:31:be:
1a:80:97:6b:1f:82:75:1e:98:d3:b7:db:b4:05:ff:
76:fd:d2:23:cc:80:45:99:21:4e:60:12:9f:00:46:
09:cb:af:d0:05:ac:58:5d:bf:be:62:33:76:78:ba:
07:d9:37:44:3b:e8:f2:97:4f:d0:f7:96:26:94:44:
1f:d8:1f:8f:48:7a:e3:20:f2:35:b6:c9:9e:b1:10:
00:22:3d:a9:4c:5f:d9:56:ce:35:6c:9a:41:7f:c4:
2d:9e:3b:84:4b:ef:48:4c:39:f3:ef:ac:38:bd:03:
50:70:cf:ea:dc:12:b8:a5:8c:af:8c:0c:48:c5:6e:
08:ce:f2:dd:dc:b4:36:ad:29:0c:3b:e4:0d:c0:cb:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:72:D8:A3:8C:0F:5F:A9:C6:CE:A5:58:68:80:EA:AE:3E:CF:59
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/7Ghy2KOMD1-pxs6lWGiA6q4-z1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.66.0/24
217.76.70.0/24
IPv6:
2a03:32c0::-2a03:32c0:9:ffff:ffff:ffff:ffff:ffff
2a03:32c0:22::/47
2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::-2a03:32c0:6009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:7000::/47
2a03:32c0:7008::/47
2a03:32c0:8000::-2a03:32c0:8009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:9000::-2a03:32c0:9009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:9010::/47
2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:c000::/47
2a03:32c0:c008::/48
2a03:32c0:d000::-2a03:32c0:d002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:d008::/48
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:f000::/47
2a03:32c0:f008::/48
Signature Algorithm: sha256WithRSAEncryption
71:0b:7f:aa:45:59:68:d0:dc:d1:94:8a:4a:93:79:61:59:de:
35:20:e4:03:30:f8:e7:4b:30:dc:1f:13:aa:5b:c2:ac:5f:ea:
b8:b0:10:5b:6c:8a:43:8e:89:4c:f4:50:19:42:e8:87:d3:c9:
e9:3a:fa:31:97:87:21:ce:31:5b:c2:10:e4:82:47:a0:d6:10:
a3:ea:bb:42:96:f5:c2:cc:14:c4:ad:17:e0:1b:83:a1:ae:29:
20:18:43:e0:34:03:d1:8e:26:84:12:e0:4f:38:54:67:91:15:
28:0c:fb:b6:c9:aa:91:79:40:6e:ec:6d:fc:54:a9:42:ca:d3:
fc:d8:9c:f2:28:f7:0a:37:27:dc:52:53:66:62:6c:29:17:51:
3e:26:80:a8:c1:63:61:cf:5a:32:68:f2:2f:da:d3:80:a2:65:
4c:c1:52:f1:3c:f8:dd:1e:23:85:42:05:c7:c9:21:9d:66:45:
a9:d9:6d:f6:cb:03:a0:3f:ff:5c:5a:c0:e8:80:f5:61:b5:47:
cb:6a:70:8e:3e:59:51:05:75:e6:8d:42:85:49:64:32:33:6a:
89:b4:e6:0b:fd:00:20:72:0f:db:cd:da:41:31:52:50:96:eb:
ac:c4:52:10:d6:57:0a:44:64:83:ff:72:eb:21:95:8f:96:c8:
18:05:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:17 2025 by rpki-client