Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa
File: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (raw, json)
Hash identifier: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=
Subject key identifier: BA:AD:62:DD:04:DC:39:FA:FD:6A:85:12:DE:E8:93:8F:EE:FF:3F:14
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 01976AB7C512468E25434D4D401D58462A81
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa
Signing time: Fri 13 Jun 2025 19:15:17 +0000
ROA not before: Fri 13 Jun 2025 19:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202048
IP address blocks: 46.28.232.0/24 maxlen: 24
46.28.238.0/24 maxlen: 24
46.28.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:b7:c5:12:46:8e:25:43:4d:4d:40:1d:58:46:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Jun 13 19:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baad62dd04dc39fafd6a8512dee8938feeff3f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e7:83:db:08:19:19:4f:fb:9c:5c:47:40:12:
5b:cf:e4:fd:8e:45:08:f6:97:64:d4:e6:5e:c1:02:
4e:e4:a8:2a:b1:fd:15:ab:aa:fc:6c:fb:4f:60:f0:
dc:b7:f3:18:17:3d:24:ef:3b:e9:53:71:bf:e6:e3:
bd:b3:e9:a4:e7:e0:89:78:83:48:68:9a:ec:bb:94:
fb:90:00:47:d6:a1:21:80:6e:a4:e2:13:79:3e:c4:
17:09:be:90:1f:26:2f:5a:fc:a4:47:e6:ca:4f:ad:
3f:37:1c:f5:73:e8:3e:38:17:80:ec:f9:f6:07:c1:
b1:2b:74:fb:b8:d0:c0:a1:bf:66:73:7a:26:b0:c5:
7b:60:f9:87:9b:5b:c5:14:75:4e:58:bd:3d:dd:62:
fa:1f:83:1f:4e:74:06:24:89:f9:fd:fb:30:0b:17:
b1:88:20:f8:fd:5c:f3:37:4e:89:e3:bc:5b:a4:eb:
84:14:93:13:ff:19:02:17:a3:87:9f:f5:40:35:d7:
42:c3:eb:80:ab:19:12:36:a0:20:f2:bd:ef:79:f0:
c5:23:58:e5:19:37:f0:46:d0:89:3f:76:1a:64:d1:
62:4b:e4:77:11:74:f5:90:61:7a:d0:06:9b:de:ba:
dd:33:fb:c7:16:77:f3:33:e4:8d:a9:21:f5:e4:e7:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:62:DD:04:DC:39:FA:FD:6A:85:12:DE:E8:93:8F:EE:FF:3F:14
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.232.0/24
46.28.238.0/23
Signature Algorithm: sha256WithRSAEncryption
72:4e:20:ef:b7:9c:c4:04:82:70:73:91:59:f9:b0:87:67:f6:
6c:9c:47:61:67:2f:7d:59:9c:2f:2f:25:30:17:c5:ae:bb:68:
e2:d2:bc:5d:4c:b9:e3:ca:7e:78:c1:23:32:19:b7:e7:22:7d:
ba:c8:ae:2b:e5:73:20:64:bb:9e:b2:08:f1:fb:2c:00:bf:4e:
13:30:7c:00:10:9d:00:7e:aa:2e:1a:db:8b:4e:9b:23:32:8d:
a9:a6:37:77:ff:c7:46:f6:54:c8:4b:8c:d5:75:7c:c1:16:e5:
b7:35:d5:6b:eb:6a:58:06:41:4e:6a:d2:5a:5b:5d:e8:45:dd:
43:13:dc:fb:3f:22:d0:f0:b4:2b:60:64:fe:8b:d8:43:6a:cd:
00:d8:0f:d3:62:6f:d9:89:59:66:68:00:9b:47:77:64:5a:68:
72:f9:7c:2f:82:36:a8:db:87:89:a2:51:2d:a5:34:6c:d2:31:
c7:29:8e:4e:b1:70:b2:87:b0:10:ee:f6:e5:66:2c:f1:11:36:
2b:f1:4f:8b:f1:59:61:4a:ab:9e:63:4e:b3:0f:75:f8:65:48:
22:32:e1:8d:34:b6:2e:09:45:78:b9:c8:62:b4:76:3d:9c:71:
a3:d3:31:5c:4b:8a:61:1b:1f:60:0e:6b:7f:7a:60:62:ad:66:
d0:d0:8c:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdqt8USRo4lQ01NQB1YRiqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh
MDBiNjcwHhcNMjUwNjEzMTkxNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFkNjJkZDA0ZGMzOWZhZmQ2YTg1MTJkZWU4OTM4ZmVlZmYzZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eeD2wgZGU/7nFxHQBJbz+T9jkUI
9pdk1OZewQJO5Kgqsf0Vq6r8bPtPYPDct/MYFz0k7zvpU3G/5uO9s+mk5+CJeINI
aJrsu5T7kABH1qEhgG6k4hN5PsQXCb6QHyYvWvykR+bKT60/Nxz1c+g+OBeA7Pn2
B8GxK3T7uNDAob9mc3omsMV7YPmHm1vFFHVOWL093WL6H4MfTnQGJIn5/fswCxex
iCD4/VzzN06J47xbpOuEFJMT/xkCF6OHn/VANddCw+uAqxkSNqAg8r3vefDFI1jl
GTfwRtCJP3YaZNFiS+R3EXT1kGF60Aab3rrdM/vHFnfzM+SNqSH15OeXpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLqtYt0E3Dn6/WqFEt7ok4/u/z8UMB8GA1UdIwQY
MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt
YjllYjg3MWY2ZDk2LzEvdXExaTNRVGNPZnI5YW9VUzN1aVRqLTdfUHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2
LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhzoAwQB
LhzuMA0GCSqGSIb3DQEBCwUAA4IBAQByTiDvt5zEBIJwc5FZ+bCHZ/ZsnEdhZy99
WZwvLyUwF8Wuu2ji0rxdTLnjyn54wSMyGbfnIn26yK4r5XMgZLuesgjx+ywAv04T
MHwAEJ0AfqouGtuLTpsjMo2ppjd3/8dG9lTIS4zVdXzBFuW3NdVr62pYBkFOatJa
W13oRd1DE9z7PyLQ8LQrYGT+i9hDas0A2A/TYm/ZiVlmaACbR3dkWmhy+Xwvgjao
24eJolEtpTRs0jHHKY5OsXCyh7AQ7vblZizxETYr8U+L8VlhSqueY06zD3X4ZUgi
MuGNNLYuCUV4uchitHY9nHGj0zFcS4phGx9gDmt/emBirWbQ0IxK
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:20:42 2025 by rpki-client