Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/I6I4t2Fx9_LhItPMPfe0gZVqU9k.roa
File: I6I4t2Fx9_LhItPMPfe0gZVqU9k.roa (raw, json)
Hash identifier: KB3ZOA0hvdhs9tj0uTvpdbjx0Su8Obdov0IGyunBEu0=
Subject key identifier: 23:A2:38:B7:61:71:F7:F2:E1:22:D3:CC:3D:F7:B4:81:95:6A:53:D9
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0198520B8C6476E9D215EF80BE67E176574A
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/I6I4t2Fx9_LhItPMPfe0gZVqU9k.roa
Signing time: Mon 28 Jul 2025 17:19:05 +0000
ROA not before: Mon 28 Jul 2025 17:19:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208317
IP address blocks: 176.46.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:0b:8c:64:76:e9:d2:15:ef:80:be:67:e1:76:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 28 17:19:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23a238b76171f7f2e122d3cc3df7b481956a53d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:4d:80:dd:11:3b:b1:4b:a3:c0:2d:8e:5b:
71:ed:a2:b6:80:3c:aa:f9:42:cd:15:10:d2:ed:e0:
ed:0c:69:a7:fa:ca:e8:e5:c5:8a:26:91:e6:12:76:
4e:93:fd:e7:9b:12:03:57:aa:ef:ae:82:06:bf:3f:
0a:4e:71:f4:a3:95:53:ee:d8:17:8c:9a:f7:56:d1:
71:e6:49:86:b0:44:60:d4:0a:b4:70:72:db:6d:a8:
cf:15:47:e3:e4:2e:4a:98:43:b7:53:e6:9c:e8:8f:
29:be:52:b4:bf:07:90:9a:7e:61:26:12:38:79:46:
35:c3:de:17:36:ea:1f:ac:84:e6:a7:a4:9c:9f:e7:
93:e6:a8:5c:6b:97:c7:2c:d5:14:91:ba:c4:27:b0:
77:f4:cd:f8:ba:ef:ff:8e:08:7f:2a:fe:e8:e8:f8:
9e:26:47:bf:7d:c5:1f:d1:3b:b7:f9:13:4c:fe:c4:
95:0d:7b:94:dc:0c:b7:02:77:8d:dc:37:6b:bc:f2:
7b:07:95:2a:9a:08:3d:da:ea:86:22:0d:b1:1b:fa:
38:63:e4:b5:5a:bd:6c:ce:e4:ed:a8:93:df:51:d0:
2f:c4:8f:83:2d:35:f8:15:df:60:d6:e1:0b:49:f9:
a0:8a:0a:fa:42:ad:22:5a:a2:2a:bc:9d:64:8b:d9:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:38:B7:61:71:F7:F2:E1:22:D3:CC:3D:F7:B4:81:95:6A:53:D9
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/I6I4t2Fx9_LhItPMPfe0gZVqU9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.158.0/24
Signature Algorithm: sha256WithRSAEncryption
74:05:fb:24:88:89:71:c9:6d:36:6a:b4:21:fc:f2:d2:88:75:
97:93:b5:72:68:0b:e9:c8:da:cf:23:2f:f4:b8:a0:21:41:f0:
9e:50:21:ff:b7:90:53:26:7d:27:a3:07:b8:69:3a:48:1d:e2:
b3:54:05:0e:70:11:f6:47:04:18:d1:28:c7:ca:e8:78:a6:64:
df:d9:b7:75:7d:ee:e2:29:e0:26:3a:0e:bc:39:87:a3:14:ea:
49:38:06:39:a2:c4:52:f7:71:db:90:f3:00:be:30:8f:d9:27:
72:ca:04:45:9a:30:87:a0:5e:95:6d:42:34:d7:2b:ce:82:57:
93:73:52:9a:19:e6:4a:15:bf:7f:6e:53:f1:47:1a:5c:98:bf:
4e:86:3c:e2:43:09:22:82:5e:79:5f:1d:47:8f:b9:70:0e:52:
4c:fb:dd:d9:1b:27:8b:99:8c:14:82:f9:4c:c2:fb:85:01:59:
7d:57:f1:c0:27:1a:c3:c0:15:7b:33:8b:21:42:a9:e5:51:a2:
b5:44:c7:83:36:77:cc:fc:a9:2f:40:ad:8b:ad:2f:9b:9e:13:
5e:4a:d9:cd:af:60:f0:3c:e4:8f:69:e2:78:7f:d7:fe:40:eb:
a9:48:6e:19:24:c2:9e:1e:7d:09:2a:a8:22:7e:d6:6d:0d:d7:
db:21:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:49 2025 by rpki-client