Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/voL46_JMwU4qTPsD8VeKh98SS14.roa
File: voL46_JMwU4qTPsD8VeKh98SS14.roa (raw, json)
Hash identifier: qZtqKCrc3zkDk9p5tCOUN22BVn6pEnapViAnA8r2BYY=
Subject key identifier: BE:82:F8:EB:F2:4C:C1:4E:2A:4C:FB:03:F1:57:8A:87:DF:12:4B:5E
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 019840D088BC80A7D4F3FC92CB92FF17DCFF
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/voL46_JMwU4qTPsD8VeKh98SS14.roa
Signing time: Fri 25 Jul 2025 09:01:04 +0000
ROA not before: Fri 25 Jul 2025 09:01:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 146.109.0.0/16 maxlen: 24
185.210.32.0/22 maxlen: 24
193.5.66.0/24 maxlen: 24
193.5.76.0/22 maxlen: 24
193.247.180.0/24 maxlen: 24
2a01:4640:100::/40 maxlen: 48
2a01:4640:200::/40 maxlen: 48
2a01:4640:c800::/40 maxlen: 48
2a01:4642:100::/40 maxlen: 48
2a01:4642:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:d0:88:bc:80:a7:d4:f3:fc:92:cb:92:ff:17:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Jul 25 09:01:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be82f8ebf24cc14e2a4cfb03f1578a87df124b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:84:bb:d2:8e:fa:42:20:2a:fb:9a:d1:40:
ae:b5:40:b9:eb:a1:e0:fc:6b:37:9e:3f:88:9d:18:
5f:c2:cb:2c:d7:de:8e:4f:a6:bb:ce:45:95:49:af:
8b:39:e5:39:9e:3a:84:7b:f1:ee:41:40:c3:23:c3:
fd:17:34:63:55:2f:5a:2d:8c:b5:4a:4f:2a:5b:23:
7b:53:2c:6b:7c:3e:b6:e7:9e:3b:6f:10:87:e5:4b:
2a:46:72:24:67:ff:e0:50:87:94:d9:a7:5e:37:41:
a3:f3:2d:94:0c:c0:ee:c3:6a:6f:43:6e:c7:bd:4b:
b2:81:f3:af:e5:b5:db:14:86:27:98:93:27:6c:a0:
ee:54:0f:12:43:21:3d:6d:bc:78:1b:3e:d4:0a:6c:
42:78:a5:6e:26:c5:21:f7:f8:e5:a7:44:a2:0b:b4:
2d:06:44:a6:0b:0d:7e:54:c0:5c:5d:10:50:7d:84:
80:1e:f8:57:57:2a:92:8f:e4:80:35:bd:4a:5b:e9:
4e:44:9f:58:dd:cd:ca:4d:bf:ac:e2:42:d3:87:95:
a3:95:f9:1c:2d:27:22:08:af:ef:da:3e:b4:0c:70:
08:be:6c:96:bc:7a:c9:53:f8:b8:85:e1:4a:bf:39:
8b:75:9e:dc:86:dc:71:f0:b0:f3:f9:51:08:01:4f:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:F8:EB:F2:4C:C1:4E:2A:4C:FB:03:F1:57:8A:87:DF:12:4B:5E
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/voL46_JMwU4qTPsD8VeKh98SS14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.109.0.0/16
185.210.32.0/22
193.5.66.0/24
193.5.76.0/22
193.247.180.0/24
IPv6:
2a01:4640:100::-2a01:4640:2ff:ffff:ffff:ffff:ffff:ffff
2a01:4640:c800::/40
2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
51:f3:6e:46:5a:80:9e:de:ff:cb:d3:60:39:36:0a:ac:3e:f3:
ae:f4:b6:20:c5:eb:c1:e2:cc:d7:ed:46:b2:22:f0:d8:d1:a8:
64:d5:a2:f6:94:d6:4d:0a:20:6f:25:22:27:2e:f6:c6:08:a8:
db:51:7f:6f:ef:04:c7:e0:23:f0:b7:17:32:3e:48:b8:1e:a8:
87:98:d5:ed:54:9d:b0:e8:0c:e9:46:30:35:77:a0:f4:a6:cd:
23:f1:7e:27:06:94:31:6c:a2:d2:db:9b:3b:94:16:20:44:d0:
31:42:55:17:53:68:cd:e6:09:9c:e3:03:64:03:9f:af:28:dc:
5d:98:da:81:36:0e:ae:d6:73:6d:52:4b:7b:45:bf:e1:0c:53:
fc:a1:40:1a:9b:50:66:d8:28:99:02:9d:8c:e3:25:e3:a8:bf:
1d:8e:6a:ab:15:c6:ce:d0:1e:b4:8a:09:f5:19:c7:f9:ea:2c:
a3:5a:fe:15:74:43:1b:19:fb:75:3a:f8:42:ea:fa:95:cf:be:
5e:02:7b:29:81:52:cc:16:fc:21:c3:36:60:7e:7b:c5:11:f8:
2f:fe:c6:b9:44:b8:81:6d:75:75:86:a3:90:26:ea:10:e8:ac:
ec:f0:2e:04:55:36:a9:db:19:db:f7:29:26:64:cf:ae:ef:60:
1b:f0:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:26 2025 by rpki-client