Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/HTyoOey4HT5zP_JyxfBfKahHFmY.roa
File: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (raw, json)
Hash identifier: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=
Subject key identifier: 1D:3C:A8:39:EC:B8:1D:3E:73:3F:F2:72:C5:F0:5F:29:A8:47:16:66
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 01987DFC142A12334F43FADDC311BD46A4B3
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/HTyoOey4HT5zP_JyxfBfKahHFmY.roa
Signing time: Wed 06 Aug 2025 06:05:28 +0000
ROA not before: Wed 06 Aug 2025 06:05:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41833
IP address blocks: 46.227.248.0/21 maxlen: 21
46.227.248.0/24 maxlen: 24
46.227.249.0/24 maxlen: 24
46.227.250.0/24 maxlen: 24
46.227.251.0/24 maxlen: 24
46.227.252.0/24 maxlen: 24
46.227.253.0/24 maxlen: 24
46.227.254.0/24 maxlen: 24
46.227.255.0/24 maxlen: 24
89.249.208.0/20 maxlen: 20
89.249.208.0/24 maxlen: 24
89.249.208.136/29 maxlen: 29
89.249.209.0/24 maxlen: 24
89.249.210.0/24 maxlen: 24
89.249.211.0/24 maxlen: 24
89.249.212.0/24 maxlen: 24
89.249.212.0/28 maxlen: 28
89.249.213.0/24 maxlen: 24
89.249.214.0/24 maxlen: 24
89.249.215.0/24 maxlen: 24
89.249.216.0/24 maxlen: 24
89.249.217.0/24 maxlen: 24
89.249.218.0/24 maxlen: 24
89.249.219.0/24 maxlen: 24
89.249.220.0/24 maxlen: 24
89.249.220.64/28 maxlen: 28
89.249.221.0/24 maxlen: 24
89.249.221.80/29 maxlen: 29
89.249.222.0/24 maxlen: 24
89.249.223.0/24 maxlen: 24
93.185.224.0/20 maxlen: 20
93.185.224.0/24 maxlen: 24
93.185.225.0/24 maxlen: 24
93.185.226.0/24 maxlen: 24
93.185.227.0/24 maxlen: 24
93.185.228.0/24 maxlen: 24
93.185.229.0/24 maxlen: 24
93.185.229.0/30 maxlen: 30
93.185.230.0/24 maxlen: 24
93.185.230.160/29 maxlen: 29
93.185.231.0/24 maxlen: 24
93.185.231.0/29 maxlen: 29
93.185.232.0/24 maxlen: 24
93.185.233.0/24 maxlen: 24
93.185.234.0/24 maxlen: 24
93.185.235.0/24 maxlen: 24
93.185.236.0/24 maxlen: 24
93.185.236.136/29 maxlen: 29
93.185.237.0/24 maxlen: 24
93.185.238.0/24 maxlen: 24
93.185.239.0/24 maxlen: 24
95.141.48.0/20 maxlen: 20
95.141.48.0/24 maxlen: 24
95.141.49.0/24 maxlen: 24
95.141.50.0/24 maxlen: 24
95.141.51.0/24 maxlen: 24
95.141.52.0/24 maxlen: 24
95.141.53.0/24 maxlen: 24
95.141.54.0/24 maxlen: 24
95.141.55.0/24 maxlen: 24
95.141.56.0/24 maxlen: 24
95.141.57.0/24 maxlen: 24
95.141.58.0/24 maxlen: 24
95.141.59.0/24 maxlen: 24
95.141.60.0/24 maxlen: 24
95.141.61.0/24 maxlen: 24
95.141.62.0/24 maxlen: 24
95.141.63.0/24 maxlen: 24
141.138.176.0/20 maxlen: 20
141.138.176.0/24 maxlen: 24
141.138.177.0/24 maxlen: 24
141.138.178.0/24 maxlen: 24
141.138.179.0/24 maxlen: 24
141.138.180.0/24 maxlen: 24
141.138.181.0/24 maxlen: 24
141.138.182.0/24 maxlen: 24
141.138.183.0/24 maxlen: 24
141.138.184.0/24 maxlen: 24
141.138.185.0/24 maxlen: 24
141.138.186.0/24 maxlen: 24
141.138.186.96/29 maxlen: 29
141.138.186.144/29 maxlen: 29
141.138.187.0/24 maxlen: 24
141.138.188.0/24 maxlen: 24
141.138.189.0/24 maxlen: 24
141.138.190.0/24 maxlen: 24
141.138.191.0/24 maxlen: 24
141.138.191.208/29 maxlen: 29
185.58.200.0/22 maxlen: 22
185.58.200.0/24 maxlen: 24
185.58.201.0/24 maxlen: 24
185.58.202.0/24 maxlen: 24
185.58.203.0/24 maxlen: 24
2a02:f50::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:fc:14:2a:12:33:4f:43:fa:dd:c3:11:bd:46:a4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Aug 6 06:05:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d3ca839ecb81d3e733ff272c5f05f29a8471666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:e0:4c:7c:2b:63:b0:4a:ba:27:1e:4b:80:
3b:10:5d:bb:a6:f4:e6:0c:1b:cf:f4:24:53:ad:40:
3f:63:21:2a:5c:28:fa:17:c0:d8:b7:63:b0:46:72:
f9:34:6c:5b:5e:51:58:83:5f:03:50:d5:35:35:e1:
00:ac:25:e1:d5:e3:a0:f4:92:99:be:83:d4:7c:06:
1b:3d:f3:35:1d:80:a2:5a:48:25:10:7e:20:4b:c7:
b7:47:43:31:10:f7:b0:1e:df:83:cb:29:a4:cc:45:
11:ab:f5:65:e5:e4:ef:2d:04:6d:c9:f0:40:87:ca:
dc:99:d7:e5:93:a2:e6:e3:88:7d:eb:ee:38:bc:b9:
5d:25:c5:24:77:82:c0:0d:dc:38:a5:b7:5c:47:2e:
ee:c0:7d:ef:32:63:dd:94:35:21:c5:f1:58:a7:3d:
65:ed:73:fc:8d:4a:89:99:ea:bc:a6:6e:b6:1c:64:
5b:13:44:dd:06:e6:43:58:f1:c1:3a:33:ba:83:b2:
3c:a3:c7:f9:e4:53:38:bb:b8:bb:32:ba:d7:1e:5a:
27:40:0b:59:8e:e2:06:1b:a7:49:44:16:82:55:c7:
a4:01:63:75:cc:80:ea:94:a1:d8:6c:08:b6:27:43:
c8:6d:58:e4:c1:78:16:f9:c2:9b:c7:a5:1e:17:87:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:A8:39:EC:B8:1D:3E:73:3F:F2:72:C5:F0:5F:29:A8:47:16:66
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/HTyoOey4HT5zP_JyxfBfKahHFmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.248.0/21
89.249.208.0/20
93.185.224.0/20
95.141.48.0/20
141.138.176.0/20
185.58.200.0/22
IPv6:
2a02:f50::/32
Signature Algorithm: sha256WithRSAEncryption
bc:83:25:ee:62:4e:77:e3:93:9d:dd:df:4c:b0:ed:76:c4:da:
69:8c:d6:4b:12:d1:3f:4a:54:26:25:b9:3d:0e:2e:60:f4:1c:
8b:ba:ea:d2:7b:67:76:ba:c2:6d:6e:de:77:43:84:49:b5:47:
c1:e1:73:68:ec:a5:23:eb:e8:2d:86:54:3e:44:36:e4:d5:77:
2e:12:53:4d:df:d3:0b:64:f7:b2:9f:d7:0f:ea:ce:68:94:83:
e7:92:37:0f:5c:ab:c1:58:8f:b8:d1:b6:c0:56:ac:f1:13:54:
20:f3:f8:9a:96:61:78:e2:fe:f7:e6:9b:8d:34:1b:fc:69:5d:
8d:bb:43:0c:e5:e2:d7:cb:0f:bc:59:b9:2f:e9:ed:09:dd:ad:
41:77:d9:b7:7c:d3:c4:8b:bc:0c:89:bd:aa:4e:37:ba:f8:f9:
6d:1a:0e:06:90:e8:f1:72:ee:51:26:ef:c5:92:19:d9:a5:79:
f0:19:b5:ba:ec:57:56:c2:76:cc:22:71:9e:28:87:e9:ad:2b:
20:69:61:a7:b7:4f:32:61:0f:b5:ec:94:a0:ef:19:73:72:84:
d7:d1:74:f1:2e:e5:9f:fc:b0:3a:77:07:8c:26:b5:75:2e:f9:
ad:68:fe:12:91:b9:f3:98:07:bc:89:7b:e4:ae:9f:ad:fe:00:
96:ab:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:47 2025 by rpki-client