Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/UZ5is-hvgVXL0oa0sfjDNXLO--o.roa
File: UZ5is-hvgVXL0oa0sfjDNXLO--o.roa (raw, json)
Hash identifier: sZA6Iy5VfJcFRnuVSK/7FFysmcXSvtf2EuBs+3mderI=
Subject key identifier: 51:9E:62:B3:E8:6F:81:55:CB:D2:86:B4:B1:F8:C3:35:72:CE:FB:EA
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0195CD3927A05378AC031B5E80A90167249F
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/UZ5is-hvgVXL0oa0sfjDNXLO--o.roa
Signing time: Tue 25 Mar 2025 12:13:49 +0000
ROA not before: Tue 25 Mar 2025 12:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51684
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
5.181.198.0/24 maxlen: 24
5.181.199.0/24 maxlen: 24
46.161.200.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.216.0/24 maxlen: 24
82.199.217.0/24 maxlen: 24
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
82.199.220.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.200.0/24 maxlen: 24
89.46.201.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.203.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
185.16.26.0/24 maxlen: 24
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.247.36.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.38.0/24 maxlen: 24
185.247.39.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.200.0/24 maxlen: 24
185.254.201.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.133.0/24 maxlen: 24
212.95.134.0/24 maxlen: 24
212.95.135.0/24 maxlen: 24
212.95.136.0/24 maxlen: 24
212.95.137.0/24 maxlen: 24
212.95.138.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
212.95.140.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
212.95.143.0/24 maxlen: 24
212.95.144.0/24 maxlen: 24
212.95.145.0/24 maxlen: 24
212.95.146.0/24 maxlen: 24
212.95.147.0/24 maxlen: 24
212.95.151.0/24 maxlen: 24
212.95.152.0/24 maxlen: 24
212.95.153.0/24 maxlen: 24
212.95.154.0/24 maxlen: 24
212.95.155.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
2a12:f680:80::/48 maxlen: 48
2a12:f680:81::/48 maxlen: 48
2a12:f680:82::/48 maxlen: 48
2a12:f680:84::/48 maxlen: 48
2a12:f680:85::/48 maxlen: 48
2a12:f680:86::/48 maxlen: 48
2a12:f680:281::/48 maxlen: 48
2a12:f680:282::/48 maxlen: 48
2a12:f680:283::/48 maxlen: 48
2a12:f680:284::/48 maxlen: 48
2a12:f680:285::/48 maxlen: 48
2a12:f680:380::/48 maxlen: 48
2a12:f680:381::/48 maxlen: 48
2a12:f680:382::/48 maxlen: 48
2a12:f680:384::/48 maxlen: 48
2a12:f680:385::/48 maxlen: 48
2a12:f680:400::/48 maxlen: 48
2a12:f680:401::/48 maxlen: 48
2a12:f680:402::/48 maxlen: 48
2a12:f680:404::/48 maxlen: 48
2a12:f680:405::/48 maxlen: 48
2a12:f680:480::/48 maxlen: 48
2a12:f680:481::/48 maxlen: 48
2a12:f680:482::/48 maxlen: 48
2a12:f680:484::/48 maxlen: 48
2a12:f680:485::/48 maxlen: 48
2a12:f680:486::/48 maxlen: 48
2a12:f680:487::/48 maxlen: 48
2a12:f680:488::/48 maxlen: 48
2a12:f680:489::/48 maxlen: 48
2a12:f680:500::/48 maxlen: 48
2a12:f680:501::/48 maxlen: 48
2a12:f680:502::/48 maxlen: 48
2a12:f680:504::/48 maxlen: 48
2a12:f680:580::/48 maxlen: 48
2a12:f680:581::/48 maxlen: 48
2a12:f680:582::/48 maxlen: 48
2a12:f680:584::/48 maxlen: 48
2a12:f680:585::/48 maxlen: 48
2a12:f680:680::/48 maxlen: 48
2a12:f680:681::/48 maxlen: 48
2a12:f680:682::/48 maxlen: 48
2a12:f680:684::/48 maxlen: 48
2a12:f680:700::/48 maxlen: 48
2a12:f680:701::/48 maxlen: 48
2a12:f680:702::/48 maxlen: 48
2a12:f680:704::/48 maxlen: 48
2a12:f680:780::/48 maxlen: 48
2a12:f680:781::/48 maxlen: 48
2a12:f680:782::/48 maxlen: 48
2a12:f680:784::/48 maxlen: 48
2a12:f680:785::/48 maxlen: 48
2a12:f680:880::/48 maxlen: 48
2a12:f680:881::/48 maxlen: 48
2a12:f680:882::/48 maxlen: 48
2a12:f680:884::/48 maxlen: 48
2a12:f680:900::/48 maxlen: 48
2a12:f680:901::/48 maxlen: 48
2a12:f680:902::/48 maxlen: 48
2a12:f680:904::/48 maxlen: 48
2a12:f680:980::/48 maxlen: 48
2a12:f680:981::/48 maxlen: 48
2a12:f680:982::/48 maxlen: 48
2a12:f680:984::/48 maxlen: 48
2a12:f680:a00::/48 maxlen: 48
2a12:f680:a01::/48 maxlen: 48
2a12:f680:a02::/48 maxlen: 48
2a12:f680:a04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:39:27:a0:53:78:ac:03:1b:5e:80:a9:01:67:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Mar 25 12:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=519e62b3e86f8155cbd286b4b1f8c33572cefbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:50:a4:50:c0:89:56:1d:70:f7:1f:e4:3a:
0f:35:80:51:45:7a:e1:52:f1:5b:39:01:c7:a4:80:
ea:a3:d8:35:51:48:fd:be:ce:2b:9f:17:5f:dd:bb:
77:23:23:49:54:60:e7:2d:72:8d:11:49:00:54:16:
2a:87:1d:37:14:06:98:f7:8e:bf:b7:dc:a1:97:44:
04:25:d6:fc:68:5b:06:5b:5a:bd:dc:cb:1a:f4:49:
5c:2a:c8:3f:8c:93:44:b3:b1:37:70:6c:73:31:63:
a1:42:88:cb:9e:85:f9:b8:8a:f6:c8:1a:39:87:25:
f1:75:00:2d:23:9a:c3:9e:96:2a:23:f6:ad:8e:88:
ce:24:51:47:57:ff:b7:b5:e4:1b:95:56:73:08:f2:
58:98:a8:74:ea:53:de:7c:27:7b:78:de:f7:5d:6a:
98:8f:52:d4:12:42:3f:86:6a:fa:6a:1a:f1:65:f3:
f4:eb:e0:67:62:91:1e:0e:b4:02:16:1f:33:d7:25:
f0:19:6f:cd:97:6f:40:83:a2:c5:68:a5:c5:f7:d7:
e5:84:65:6a:3b:98:3d:ec:59:06:a2:cb:79:2d:1e:
8e:49:de:7f:7f:90:06:51:99:73:eb:6c:5f:5e:7d:
d4:22:33:97:e6:3b:b2:01:2e:4a:23:61:53:45:5a:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:62:B3:E8:6F:81:55:CB:D2:86:B4:B1:F8:C3:35:72:CE:FB:EA
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/UZ5is-hvgVXL0oa0sfjDNXLO--o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/22
46.161.200.0/24
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.141.255
212.95.143.0-212.95.147.255
212.95.151.0-212.95.155.255
223.25.120.0-223.25.126.255
IPv6:
2a12:f680:80::-2a12:f680:82:ffff:ffff:ffff:ffff:ffff
2a12:f680:84::-2a12:f680:86:ffff:ffff:ffff:ffff:ffff
2a12:f680:281::-2a12:f680:285:ffff:ffff:ffff:ffff:ffff
2a12:f680:380::-2a12:f680:382:ffff:ffff:ffff:ffff:ffff
2a12:f680:384::/47
2a12:f680:400::-2a12:f680:402:ffff:ffff:ffff:ffff:ffff
2a12:f680:404::/47
2a12:f680:480::-2a12:f680:482:ffff:ffff:ffff:ffff:ffff
2a12:f680:484::-2a12:f680:489:ffff:ffff:ffff:ffff:ffff
2a12:f680:500::-2a12:f680:502:ffff:ffff:ffff:ffff:ffff
2a12:f680:504::/48
2a12:f680:580::-2a12:f680:582:ffff:ffff:ffff:ffff:ffff
2a12:f680:584::/47
2a12:f680:680::-2a12:f680:682:ffff:ffff:ffff:ffff:ffff
2a12:f680:684::/48
2a12:f680:700::-2a12:f680:702:ffff:ffff:ffff:ffff:ffff
2a12:f680:704::/48
2a12:f680:780::-2a12:f680:782:ffff:ffff:ffff:ffff:ffff
2a12:f680:784::/47
2a12:f680:880::-2a12:f680:882:ffff:ffff:ffff:ffff:ffff
2a12:f680:884::/48
2a12:f680:900::-2a12:f680:902:ffff:ffff:ffff:ffff:ffff
2a12:f680:904::/48
2a12:f680:980::-2a12:f680:982:ffff:ffff:ffff:ffff:ffff
2a12:f680:984::/48
2a12:f680:a00::-2a12:f680:a02:ffff:ffff:ffff:ffff:ffff
2a12:f680:a04::/48
Signature Algorithm: sha256WithRSAEncryption
76:d4:5f:e4:a0:dc:5f:d1:67:ac:a4:a0:15:2c:63:5c:1f:30:
08:8c:82:aa:96:8c:f2:dd:fa:d1:8e:2e:35:a5:a1:61:90:dc:
f3:2f:0f:0a:71:7c:4f:db:24:94:68:80:e4:7b:83:71:8a:be:
d7:90:15:32:17:1a:6f:29:52:0a:ab:91:cc:87:31:0d:15:94:
14:c8:6d:d2:a1:1e:cb:7d:63:a8:c4:af:81:f9:31:cf:fc:d6:
23:d9:be:78:cf:e7:65:5c:f0:a3:7a:ab:f1:cb:33:2c:03:d7:
92:3b:20:12:03:1c:2a:96:07:81:65:72:31:af:c7:23:92:6b:
95:7f:5c:39:58:33:27:96:c2:0b:ae:77:36:2a:13:5e:94:b6:
4f:8e:72:28:40:19:72:cf:07:58:f7:fc:ca:06:f7:ba:82:22:
cf:40:7b:9b:0d:3c:d8:2f:6b:b1:bb:a5:42:30:bf:49:ca:1d:
c0:bb:75:ec:94:26:8d:07:4e:a9:56:00:12:85:14:32:d1:84:
b6:55:a3:36:fa:99:d9:e8:38:83:67:16:5f:aa:9a:7e:99:96:
a8:03:9f:51:82:1e:14:65:3d:3f:d2:82:95:b9:d9:c0:f7:0e:
cc:e5:49:03:eb:12:09:04:88:45:00:5c:88:18:da:98:31:1f:
a7:e5:fa:1d
-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgISAZXNOSegU3isAxtegKkBZySfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz
MzhmZmUwHhcNMjUwMzI1MTIxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTllNjJiM2U4NmY4MTU1Y2JkMjg2YjRiMWY4YzMzNTcyY2VmYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7JQpFDAiVYdcPcf5DoPNYBRRXrh
UvFbOQHHpIDqo9g1UUj9vs4rnxdf3bt3IyNJVGDnLXKNEUkAVBYqhx03FAaY946/
t9yhl0QEJdb8aFsGW1q93Msa9ElcKsg/jJNEs7E3cGxzMWOhQojLnoX5uIr2yBo5
hyXxdQAtI5rDnpYqI/atjojOJFFHV/+3teQblVZzCPJYmKh06lPefCd7eN73XWqY
j1LUEkI/hmr6ahrxZfP06+BnYpEeDrQCFh8z1yXwGW/Nl29Ag6LFaKXF99flhGVq
O5g97FkGost5LR6OSd5/f5AGUZlz62xfXn3UIjOX5juyAS5KI2FTRVprqwIDAQAB
o4IELjCCBCowHQYDVR0OBBYEFFGeYrPob4FVy9KGtLH4wzVyzvvqMB8GA1UdIwQY
MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt
Y2VlYzQ5MTI0YzBmLzEvVVo1aXMtaHZnVlhMMG9hMHNmakROWExPLS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm
LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICQgYIKwYBBQUHAQcBAf8EggIxMIICLTCBgAQCAAEwegME
AgW1xAMEAC6hyAMEBFLH0AMEA1kuyAMEAFvVvwMEAFvZuQMEAbkQGgMEArlfzAME
Arn3JAMEAbn+yAMEALn+yzAMAwQH1F+AAwQB1F+MMAwDBADUX48DBALUX5AwDAME
ANRflwMEAtRfmDAMAwQD3xl4AwQA3xl+MIIBpgQCAAIwggGeMBIDBwcqEvaAAIAD
BwAqEvaAAIIwEgMHAioS9oAAhAMHACoS9oAAhjASAwcAKhL2gAKBAwcBKhL2gAKE
MBIDBwcqEvaAA4ADBwAqEvaAA4IDBwEqEvaAA4QwEQMGAioS9oAEAwcAKhL2gAQC
AwcBKhL2gAQEMBIDBwcqEvaABIADBwAqEvaABIIwEgMHAioS9oAEhAMHASoS9oAE
iDARAwYAKhL2gAUDBwAqEvaABQIDBwAqEvaABQQwEgMHByoS9oAFgAMHACoS9oAF
ggMHASoS9oAFhDASAwcHKhL2gAaAAwcAKhL2gAaCAwcAKhL2gAaEMBEDBgAqEvaA
BwMHACoS9oAHAgMHACoS9oAHBDASAwcHKhL2gAeAAwcAKhL2gAeCAwcBKhL2gAeE
MBIDBwcqEvaACIADBwAqEvaACIIDBwAqEvaACIQwEQMGACoS9oAJAwcAKhL2gAkC
AwcAKhL2gAkEMBIDBwcqEvaACYADBwAqEvaACYIDBwAqEvaACYQwEQMGASoS9oAK
AwcAKhL2gAoCAwcAKhL2gAoEMA0GCSqGSIb3DQEBCwUAA4IBAQB21F/koNxf0Wes
pKAVLGNcHzAIjIKqlozy3frRji41paFhkNzzLw8KcXxP2ySUaIDke4Nxir7XkBUy
FxpvKVIKq5HMhzENFZQUyG3SoR7LfWOoxK+B+THP/NYj2b54z+dlXPCjeqvxyzMs
A9eSOyASAxwqlgeBZXIxr8cjkmuVf1w5WDMnlsILrnc2KhNelLZPjnIoQBlyzwdY
9/zKBve6giLPQHubDTzYL2uxu6VCML9Jyh3Au3XslCaNB06pVgAShRQy0YS2VaM2
+pnZ6DiDZxZfqpp+mZaoA59Rgh4UZT0/0oKVudnA9w7M5UkD6xIJBIhFAFyIGNqY
MR+n5fod
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net