Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/GiEc-ANqrb63QcspGJXLFg9KsNI.roa
File: GiEc-ANqrb63QcspGJXLFg9KsNI.roa (raw, json)
Hash identifier: Sdx7QGn6KBOh9cOI8uzLQw1JR4w8NsvJTOnn28cZmjk=
Subject key identifier: 1A:21:1C:F8:03:6A:AD:BE:B7:41:CB:29:18:95:CB:16:0F:4A:B0:D2
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019A347EE6492D35B7CD88EE03DB62E89746
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/GiEc-ANqrb63QcspGJXLFg9KsNI.roa
Signing time: Thu 30 Oct 2025 09:42:03 +0000
ROA not before: Thu 30 Oct 2025 09:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3209
IP address blocks: 47.64.0.0/13 maxlen: 13
82.82.0.0/15 maxlen: 24
82.82.0.0/20 maxlen: 20
84.56.0.0/13 maxlen: 24
85.238.224.0/19 maxlen: 19
88.64.0.0/12 maxlen: 24
92.72.0.0/13 maxlen: 24
92.208.0.0/14 maxlen: 24
92.212.0.0/15 maxlen: 24
92.214.0.0/15 maxlen: 24
92.216.0.0/14 maxlen: 24
94.216.0.0/13 maxlen: 24
145.253.0.0/16 maxlen: 16
145.253.0.0/20 maxlen: 20
145.254.0.0/16 maxlen: 24
146.60.0.0/16 maxlen: 24
176.94.0.0/17 maxlen: 24
176.94.128.0/17 maxlen: 24
176.95.0.0/16 maxlen: 24
178.0.0.0/12 maxlen: 24
185.2.132.0/22 maxlen: 24
188.96.0.0/12 maxlen: 24
193.25.240.0/22 maxlen: 22
193.25.244.0/23 maxlen: 23
193.25.247.0/24 maxlen: 24
195.50.128.0/18 maxlen: 18
195.158.128.0/19 maxlen: 19
212.144.0.0/16 maxlen: 24
213.23.0.0/16 maxlen: 24
213.128.96.0/19 maxlen: 19
2a00::/22 maxlen: 22
2a00:20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:7e:e6:49:2d:35:b7:cd:88:ee:03:db:62:e8:97:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Oct 30 09:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a211cf8036aadbeb741cb291895cb160f4ab0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:38:53:90:2d:78:cc:0b:e7:69:d8:c8:89:
b6:de:5a:ee:ef:d7:ad:ac:a4:de:94:e4:1d:bd:4d:
f5:fe:3f:ad:33:3b:4a:68:d9:30:1d:46:a9:45:b2:
43:f1:da:b2:f9:29:4f:c2:1d:d3:e4:3e:1c:8c:f6:
f1:64:43:5c:b6:ba:f1:aa:30:c6:ab:44:fd:5c:18:
7b:a9:94:fa:15:be:d2:0d:88:5f:66:c8:7d:7c:68:
39:e2:2a:e0:7f:b9:9f:13:fe:97:37:5d:cf:74:ab:
4f:df:32:8f:3a:3e:55:8d:5b:4e:00:0e:c7:db:44:
ac:48:5e:07:fa:87:c9:83:18:42:e7:19:56:ef:19:
0c:06:95:cb:4e:c6:a3:e0:f2:19:cf:1f:71:54:b6:
1d:02:1a:1c:17:da:ab:fa:f2:d8:d7:69:c9:ba:2e:
7b:f9:5e:f0:8f:5c:0f:2c:0d:32:be:5c:7b:bf:fe:
4b:ff:17:c7:30:7b:44:cf:93:81:93:ff:ea:72:bc:
70:eb:c4:5e:f0:68:f4:bd:47:f0:b1:6e:8b:d4:da:
cf:4c:a5:87:b4:85:dd:6f:6f:52:b2:07:0c:a7:6d:
b2:c1:38:4c:47:1e:79:6f:92:1c:c5:02:0d:b9:6b:
c2:6a:48:b1:03:69:0e:24:cd:79:74:42:50:8b:be:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:1C:F8:03:6A:AD:BE:B7:41:CB:29:18:95:CB:16:0F:4A:B0:D2
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/GiEc-ANqrb63QcspGJXLFg9KsNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.64.0.0/13
82.82.0.0/15
84.56.0.0/13
85.238.224.0/19
88.64.0.0/12
92.72.0.0/13
92.208.0.0-92.219.255.255
94.216.0.0/13
145.253.0.0-145.254.255.255
146.60.0.0/16
176.94.0.0/15
178.0.0.0/12
185.2.132.0/22
188.96.0.0/12
193.25.240.0-193.25.245.255
193.25.247.0/24
195.50.128.0/18
195.158.128.0/19
212.144.0.0/16
213.23.0.0/16
213.128.96.0/19
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
3c:78:cc:90:fb:26:59:53:9d:fe:ab:1e:2e:4b:96:4f:5f:e7:
ae:9f:29:b3:8f:20:f0:5f:aa:03:62:e9:b0:d2:76:c4:f3:82:
a3:50:c3:a3:2d:a0:0f:40:fb:98:00:85:85:e5:58:7b:72:53:
2d:68:55:44:b7:98:dd:2f:c8:00:fe:7d:dc:6d:44:a7:44:63:
01:96:9f:93:14:b0:92:09:e1:77:d2:b4:80:97:74:43:bc:c5:
47:2b:bf:80:17:c0:1f:f9:f2:42:51:93:b0:6f:0f:44:a0:58:
23:79:e4:c0:ae:0f:be:db:69:ed:54:37:bc:06:fa:4b:aa:33:
5b:3b:84:a8:d8:2c:74:f0:48:7e:da:af:b7:b6:b0:dc:c3:15:
76:54:23:db:7d:18:43:6e:87:d5:1b:25:c1:a5:b1:27:75:09:
e9:ad:34:11:ff:65:e4:7b:bc:ed:84:dc:77:13:98:57:d2:c6:
1f:d3:fd:d0:90:d4:cc:0d:b8:59:78:6a:30:ce:b6:10:47:21:
f6:d7:a4:40:01:d3:68:85:b3:8f:6c:28:b6:26:5a:3e:b6:bd:
b5:08:30:00:30:7a:21:08:88:4a:1c:4c:56:4a:55:17:67:0d:
87:d8:72:d4:5a:10:b0:8f:a8:79:36:b1:b2:28:3a:37:1f:a1:
17:6a:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:01:04 2025 by rpki-client