Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/n6GY6nhHcoa0i71n9z3Kf0E5GzM.roa
File: n6GY6nhHcoa0i71n9z3Kf0E5GzM.roa (raw, json)
Hash identifier: Me/0EA7Rht6WqGCPixbImbKQNas49LNlvd3ekV4eUbM=
Subject key identifier: 9F:A1:98:EA:78:47:72:86:B4:8B:BD:67:F7:3D:CA:7F:41:39:1B:33
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 01986F98E9F88806A8842964E1E5AFD19E7F
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/n6GY6nhHcoa0i71n9z3Kf0E5GzM.roa
Signing time: Sun 03 Aug 2025 11:02:29 +0000
ROA not before: Sun 03 Aug 2025 11:02:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 5.10.192.0/24 maxlen: 24
31.41.255.0/24 maxlen: 24
31.134.200.0/21 maxlen: 21
46.244.0.0/19 maxlen: 19
46.244.0.0/21 maxlen: 24
46.244.8.0/22 maxlen: 24
46.244.12.0/23 maxlen: 24
46.244.14.0/23 maxlen: 24
46.244.16.0/23 maxlen: 24
46.244.20.0/24 maxlen: 24
46.244.21.0/24 maxlen: 24
46.244.22.0/24 maxlen: 24
46.244.23.0/24 maxlen: 24
46.244.24.0/22 maxlen: 24
46.244.28.0/24 maxlen: 24
46.244.29.0/24 maxlen: 24
46.244.30.0/24 maxlen: 24
46.244.31.0/24 maxlen: 24
46.244.96.0/19 maxlen: 19
46.244.100.0/22 maxlen: 24
46.244.104.0/22 maxlen: 24
46.244.112.0/23 maxlen: 24
46.244.120.0/23 maxlen: 24
46.244.122.0/23 maxlen: 24
46.244.124.0/23 maxlen: 24
46.244.126.0/24 maxlen: 24
46.244.127.0/24 maxlen: 24
62.3.55.0/24 maxlen: 24
146.19.97.0/24 maxlen: 24
178.249.152.0/21 maxlen: 21
185.51.52.0/23 maxlen: 23
185.205.52.0/22 maxlen: 22
212.24.126.0/24 maxlen: 24
2a02:1668::/32 maxlen: 32
2a02:166a::/32 maxlen: 32
2a02:166b::/32 maxlen: 32
2a05:2900::/29 maxlen: 29
2a06:2600::/29 maxlen: 32
2a06:2600::/32 maxlen: 32
2a06:2602::/32 maxlen: 32
2a0a:e80::/29 maxlen: 29
2a0b:1c0::/29 maxlen: 29
2a0f:ba00::/29 maxlen: 29
2a13:800::/29 maxlen: 29
2a13:2c00::/29 maxlen: 29
2a13:3400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6f:98:e9:f8:88:06:a8:84:29:64:e1:e5:af:d1:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Aug 3 11:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fa198ea78477286b48bbd67f73dca7f41391b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:fb:f7:3c:98:83:15:ce:bc:c8:a8:bf:31:
c3:1c:97:09:4d:87:29:f4:16:cb:8c:e4:54:d2:94:
74:28:cf:8d:b8:14:f5:6d:77:91:4b:01:f6:82:b0:
2e:fd:f1:43:1f:ee:c4:ce:ec:e1:63:f4:8f:35:87:
54:02:6f:79:2e:06:74:af:78:18:2d:46:9a:e5:4f:
f7:0f:c3:e8:bb:9b:70:75:4b:dd:85:a5:94:89:db:
1a:82:51:24:dc:44:88:2c:03:65:6e:ea:78:66:83:
c1:e3:e2:b5:7e:78:89:be:b7:f7:f6:2e:00:02:6a:
da:14:03:ed:e4:53:2a:4e:34:c6:96:8d:b6:18:c1:
b1:ea:b8:33:62:57:2a:89:95:26:82:fb:e2:18:24:
9b:29:f3:a6:c0:78:46:ab:5a:39:13:19:81:2d:5b:
5d:df:c7:b8:e3:40:5a:2c:dc:9a:4a:92:ae:ed:4a:
33:3a:bd:7b:25:d0:54:e0:5a:2c:13:69:1c:6e:df:
28:14:a6:0d:eb:d1:38:24:20:5c:2f:d7:80:d7:90:
bc:fa:70:a8:35:8a:6e:6f:9a:54:c9:4b:9c:c8:d2:
2e:ba:38:25:a3:50:3b:02:31:83:d8:c3:58:4d:c6:
2f:64:95:6e:5a:e9:58:b6:27:64:4d:eb:9b:03:80:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:98:EA:78:47:72:86:B4:8B:BD:67:F7:3D:CA:7F:41:39:1B:33
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/n6GY6nhHcoa0i71n9z3Kf0E5GzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.192.0/24
31.41.255.0/24
31.134.200.0/21
46.244.0.0/19
46.244.96.0/19
62.3.55.0/24
146.19.97.0/24
178.249.152.0/21
185.51.52.0/23
185.205.52.0/22
212.24.126.0/24
IPv6:
2a02:1668::/32
2a02:166a::/31
2a05:2900::/29
2a06:2600::/29
2a0a:e80::/29
2a0b:1c0::/29
2a0f:ba00::/29
2a13:800::/29
2a13:2c00::/29
2a13:3400::/29
Signature Algorithm: sha256WithRSAEncryption
34:28:89:54:c2:75:48:9e:dc:71:39:99:77:26:35:29:46:9f:
46:80:66:71:45:5c:c4:fe:f3:ca:fc:a5:69:3f:10:a5:bb:1a:
58:2c:98:82:52:4d:77:e5:e3:9d:1d:97:08:9e:f5:b4:00:2f:
09:05:8e:d1:9f:f4:7a:06:7c:6e:38:89:0e:23:f2:4e:0c:74:
99:1c:f6:1f:36:7b:4a:9c:1b:e8:c3:9f:ee:ff:f5:f2:da:a7:
cc:7c:55:d2:36:4c:bf:d4:74:67:b0:66:df:50:ca:c8:c7:a8:
70:29:e1:e6:e6:07:d9:e1:5d:5f:22:3d:c7:ac:0c:76:d7:76:
15:26:96:3b:3e:15:cc:59:dd:09:4d:15:c0:04:f3:98:15:93:
0e:ea:5e:4c:62:fa:03:1f:dd:4b:2c:19:27:d5:cf:e6:36:96:
95:03:2f:98:91:53:46:cb:11:9e:b3:ac:ce:22:bb:77:f4:32:
e7:19:ac:ba:4d:a8:b2:9e:e9:e6:9f:b3:6f:1d:83:86:7f:98:
ad:cb:f5:56:07:d7:f4:27:6c:f8:58:72:2f:60:38:37:d5:7a:
bb:34:24:7d:1b:d3:98:c1:52:b7:b1:99:31:74:7a:8c:99:e5:
89:5a:59:d4:f6:dc:0d:58:25:9d:e4:07:7b:c5:ba:15:f4:6a:
6b:52:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:08:32 2025 by rpki-client