Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/AfI7_Ngl828Ma-uzXTP8gExiXq8.roa
File: AfI7_Ngl828Ma-uzXTP8gExiXq8.roa (raw, json)
Hash identifier: 2GrTkt1tl/1H5BmPCuw0ZwhZ1/F3yEqgFPzDs8+22Qk=
Subject key identifier: 01:F2:3B:FC:D8:25:F3:6F:0C:6B:EB:B3:5D:33:FC:80:4C:62:5E:AF
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019A2BB8321BADA3AEF77AF18DB76D88F392
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/AfI7_Ngl828Ma-uzXTP8gExiXq8.roa
Signing time: Tue 28 Oct 2025 16:48:03 +0000
ROA not before: Tue 28 Oct 2025 16:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16024
IP address blocks: 46.28.32.0/21 maxlen: 24
149.232.184.0/22 maxlen: 24
149.232.190.0/23 maxlen: 24
149.232.244.0/22 maxlen: 24
149.232.248.0/22 maxlen: 24
156.67.56.0/23 maxlen: 23
156.67.56.0/24 maxlen: 24
156.67.57.0/24 maxlen: 24
185.47.232.0/22 maxlen: 24
185.159.32.0/22 maxlen: 24
217.70.160.0/20 maxlen: 24
217.70.161.0/24 maxlen: 26
217.70.161.128/26 maxlen: 26
217.70.161.192/26 maxlen: 26
217.70.162.0/24 maxlen: 24
217.70.167.0/24 maxlen: 24
217.70.172.0/24 maxlen: 24
2a02:1670::/29 maxlen: 32
2a02:1670::/32 maxlen: 32
2a02:1671::/32 maxlen: 32
2a02:1672::/32 maxlen: 32
2a02:1673::/32 maxlen: 32
2a02:1674::/32 maxlen: 32
2a02:1675::/32 maxlen: 32
2a02:1676::/32 maxlen: 32
2a02:1677::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:b8:32:1b:ad:a3:ae:f7:7a:f1:8d:b7:6d:88:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Oct 28 16:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01f23bfcd825f36f0c6bebb35d33fc804c625eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:7c:99:0e:6f:77:1a:2d:52:6b:d6:9e:f8:
54:8a:77:e1:e0:52:bb:4d:bc:ab:a7:f3:08:41:b8:
10:63:1d:88:0f:79:0d:ed:7a:8b:91:6d:b0:1f:43:
e3:53:d5:67:de:7e:cd:77:26:7a:a5:97:5c:7b:19:
7e:0c:dc:b7:43:9b:3a:88:72:80:ff:0c:6e:40:46:
1e:3b:b6:46:f2:b0:13:b9:8a:6a:14:30:b7:ea:2c:
a6:38:72:f7:f5:b5:76:92:bd:c0:bd:83:53:5b:53:
c6:fe:41:b0:be:e9:3c:35:59:49:4f:01:4a:d4:58:
ff:42:a5:19:8a:59:3e:3a:9a:28:7f:8f:30:f0:0c:
af:d0:4a:22:ab:8a:36:96:2f:0a:db:4b:5b:76:fe:
a6:33:73:5f:20:e0:85:b1:6f:fe:f7:8c:71:8b:a5:
e4:3f:32:96:11:88:9b:b9:89:59:a4:41:9c:d2:a7:
0e:b8:c7:ea:f4:42:bb:bf:6d:1c:47:41:99:36:52:
79:cc:83:bc:aa:ef:c2:63:00:1f:20:bb:db:8a:bf:
c7:34:83:a5:72:e9:95:08:95:05:fd:b1:46:c5:fd:
88:cc:a7:c7:69:1a:56:e1:c3:ea:49:57:f0:56:41:
26:20:13:d6:3c:e3:3a:b1:a8:40:5a:21:2e:cd:9f:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:3B:FC:D8:25:F3:6F:0C:6B:EB:B3:5D:33:FC:80:4C:62:5E:AF
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/AfI7_Ngl828Ma-uzXTP8gExiXq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.32.0/21
149.232.184.0/22
149.232.190.0/23
149.232.244.0-149.232.251.255
156.67.56.0/23
185.47.232.0/22
185.159.32.0/22
217.70.160.0/20
IPv6:
2a02:1670::/29
Signature Algorithm: sha256WithRSAEncryption
76:0f:0c:88:0a:1e:7b:7a:c0:8f:59:14:1f:09:db:31:a7:4c:
fc:a9:d5:b5:d5:c0:18:f7:3b:5f:d7:ab:d3:21:89:9c:f3:a0:
d9:8e:85:d2:ed:44:e7:1c:52:27:ca:46:68:6b:c6:81:bf:64:
52:ac:b2:e4:b3:84:cf:8b:9c:1f:06:f0:e9:0b:51:48:35:b5:
d7:3c:03:a5:cc:44:c6:03:28:8f:3b:07:90:b9:ce:c5:d2:a1:
ba:06:c8:88:df:5d:06:c6:52:d5:34:d2:27:e9:8f:fd:a4:f4:
f9:84:3c:86:53:77:b2:3f:f3:08:45:48:9a:1b:0d:e1:f6:c0:
6c:5f:f9:62:b2:90:0b:be:7a:74:44:7a:79:70:ce:79:89:d9:
c8:34:93:73:82:22:20:c9:ae:76:60:af:7f:a4:05:2b:08:24:
87:e4:b4:3a:55:5d:78:72:81:97:20:69:8b:1c:b0:cc:ae:80:
84:f4:18:a7:b3:95:c2:7f:e3:bd:63:63:2f:6d:6e:70:a7:93:
c1:31:28:24:61:2d:00:d1:a2:d0:ea:af:3b:5f:34:cd:52:e9:
62:35:08:7b:66:76:d0:16:1c:47:b2:0e:00:6b:25:a2:0f:2f:
94:6f:71:23:f3:52:a2:4b:20:40:01:9e:a3:82:05:81:19:56:
3e:d9:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:36:18 2025 by rpki-client