Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/K38hiAFbaYjOEYyRFTbUch8B7wY.roa
File: K38hiAFbaYjOEYyRFTbUch8B7wY.roa (raw, json)
Hash identifier: 31zMtO1y1o6k5IZqjvDfJAnA0Cm9rKJm+VuP2mPceec=
Subject key identifier: 2B:7F:21:88:01:5B:69:88:CE:11:8C:91:15:36:D4:72:1F:01:EF:06
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01975FF986D0295CF8B68AD3F8F8D3170AF4
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/K38hiAFbaYjOEYyRFTbUch8B7wY.roa
Signing time: Wed 11 Jun 2025 17:11:17 +0000
ROA not before: Wed 11 Jun 2025 17:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
2a11:840:73::/48 maxlen: 48
2a11:840:73:1b::/64 maxlen: 64
2a11:840:74::/48 maxlen: 48
2a11:840:75::/48 maxlen: 48
2a11:840:76::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:f9:86:d0:29:5c:f8:b6:8a:d3:f8:f8:d3:17:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jun 11 17:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7f2188015b6988ce118c911536d4721f01ef06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:92:22:53:79:a8:b5:aa:4c:0d:90:e7:9f:
8c:c4:5b:4f:1c:76:b3:04:49:b6:3e:98:72:5b:74:
3f:1b:61:2f:95:92:e3:50:15:b4:e6:ad:3e:07:b2:
57:cb:35:6c:3f:ee:49:38:4b:20:49:01:fc:8d:4a:
89:b7:b9:19:9e:ac:2c:a4:68:95:8a:28:5d:db:eb:
4c:3d:4a:b4:e9:cf:ef:a6:c4:1c:c9:c8:7b:ed:1a:
b9:7b:d7:70:53:d5:2e:ea:cc:d2:f7:b2:b8:09:d7:
b5:bd:cd:6d:ff:ae:7d:3d:4b:08:5e:f3:81:5b:d7:
00:90:4f:b3:ea:94:0b:0c:2b:58:b3:9c:3d:9f:4e:
eb:70:63:93:d8:14:95:0d:67:ed:55:b1:ed:65:51:
2d:5d:44:76:4c:ed:61:c4:7d:b4:fc:fd:cc:01:df:
7b:17:d8:fb:8b:8b:bb:97:99:c0:ad:40:89:85:a9:
ea:b1:b5:01:b4:c0:d1:e7:d2:4f:e3:5f:73:ef:22:
aa:03:90:be:dc:1d:6e:24:7f:4a:bb:59:01:ea:ca:
7d:45:bd:f2:8f:45:4d:24:93:a5:1c:d5:98:1c:ea:
04:2c:91:cb:b9:eb:93:65:64:68:d2:b5:74:04:01:
af:b4:4e:3f:e3:6e:c5:9e:a6:a9:02:ef:f2:4e:44:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:21:88:01:5B:69:88:CE:11:8C:91:15:36:D4:72:1F:01:EF:06
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/K38hiAFbaYjOEYyRFTbUch8B7wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::/48
2a11:840:5::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::-2a11:840:76:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:87:28:06:68:c9:13:76:a1:89:40:08:f1:a7:cf:7d:b9:d5:
b7:9c:1d:fa:be:b8:82:e9:33:b6:13:c5:55:27:d1:2d:6a:cf:
a9:62:ee:30:95:10:9f:cf:da:46:43:77:b9:ab:f0:9d:53:23:
76:05:5e:b3:b0:85:6d:72:91:fc:6c:f9:14:ff:12:42:f8:98:
10:b7:66:28:84:91:00:1e:a8:8d:04:0c:b9:91:ff:07:c2:26:
5c:34:4b:c3:43:b8:c9:a1:3a:88:ae:87:72:4e:81:2b:64:ff:
51:88:4d:80:2c:d9:fe:e0:4b:9d:b8:78:51:5e:22:57:ab:dd:
97:07:4f:88:6a:08:07:ca:56:41:3e:aa:be:b1:54:e5:b0:b9:
c2:a0:c7:ab:7b:17:1c:80:e1:8f:87:44:aa:52:5e:1b:5d:e5:
6c:74:b1:82:06:e2:74:54:cc:17:88:f3:46:b3:7b:9a:a5:68:
2a:82:34:49:61:5b:dd:cd:4d:9d:ee:ed:ce:ee:62:42:f0:57:
28:c8:f7:cf:fc:45:29:22:a4:94:0c:d6:8c:e4:4b:98:c4:3a:
9a:34:d6:6c:6c:e5:f9:60:d8:d6:1f:94:0e:36:c3:29:81:94:
81:d2:63:54:9a:b7:43:6d:5e:a2:9f:e1:68:d5:4b:56:18:6a:
2c:09:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:45 2025 by rpki-client