Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa
File: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (raw, json)
Hash identifier: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=
Subject key identifier: E9:8F:86:C2:6D:69:61:06:77:CE:88:98:9F:9E:6C:45:9C:8E:A3:B1
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01975940559DA2CBE42A99D98547138A31BC
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa
Signing time: Tue 10 Jun 2025 09:51:17 +0000
ROA not before: Tue 10 Jun 2025 09:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29657
IP address blocks: 45.66.104.0/22 maxlen: 22
45.132.100.0/22 maxlen: 24
45.132.100.0/24 maxlen: 24
45.132.101.0/24 maxlen: 24
45.132.102.0/24 maxlen: 24
45.132.103.0/24 maxlen: 24
2a14:4d80::/32 maxlen: 32
2a14:4d87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:40:55:9d:a2:cb:e4:2a:99:d9:85:47:13:8a:31:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Jun 10 09:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e98f86c26d69610677ce88989f9e6c459c8ea3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:02:93:6c:ed:1b:56:9c:a9:dd:0e:69:25:
34:f0:a1:4a:65:85:ea:90:8d:c6:50:0c:98:88:13:
45:ef:1b:08:1d:64:5c:04:3a:44:d5:53:49:3e:52:
73:1f:1c:9a:a8:49:b3:0c:18:85:05:40:07:51:f5:
ee:cc:a3:f9:07:6d:a3:0b:7b:78:a3:11:5f:1b:ad:
b8:9c:6f:97:51:67:d6:14:a7:be:ec:2a:4c:5d:3f:
44:60:4a:ae:6d:d4:fd:96:de:6a:e3:ed:4a:24:a0:
7d:46:c5:7e:ac:18:83:5d:59:51:49:66:02:1f:05:
07:a1:c7:be:13:37:0c:cc:ff:c6:ff:32:fc:88:2e:
7d:6a:f3:fb:ff:c6:d2:9f:95:be:7a:43:73:11:ec:
66:fe:54:0d:00:d5:c5:d1:ef:ef:77:2e:03:50:f0:
d7:d8:7c:c2:35:53:19:cf:2e:47:64:16:33:87:8d:
bd:9c:42:b1:21:ff:19:10:68:e8:99:97:4d:01:18:
1c:40:9d:a2:a5:a7:ce:dc:20:22:3e:55:3e:e7:20:
c9:6b:a0:84:0d:3f:92:35:43:b7:b3:2a:be:19:c0:
46:87:fe:06:68:be:71:37:fa:ff:78:2b:2f:f5:6b:
b9:ae:8d:76:11:6b:e5:21:d0:67:d7:f8:b3:1d:97:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:86:C2:6D:69:61:06:77:CE:88:98:9F:9E:6C:45:9C:8E:A3:B1
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.104.0/22
45.132.100.0/22
IPv6:
2a14:4d80::/32
2a14:4d87::/32
Signature Algorithm: sha256WithRSAEncryption
31:92:db:0a:53:2b:6c:b7:1e:4c:79:5c:49:89:a4:80:bc:40:
8f:46:ba:0c:e3:29:40:dc:33:b9:0b:04:94:64:f4:91:37:d7:
85:88:83:12:ce:9c:de:53:a6:a1:36:12:6a:db:5a:f6:73:62:
9d:3c:4c:dc:e9:98:f7:dd:14:80:74:88:5a:60:44:42:b0:6d:
93:5a:58:52:7a:3e:9b:69:b0:cf:3f:80:ea:30:45:09:0e:53:
05:70:b4:5c:ce:71:c2:90:43:bd:b1:ff:78:ee:13:9c:d1:07:
db:49:12:d4:1e:14:39:17:b8:79:fe:06:48:e1:25:08:93:d9:
35:30:c5:2f:1e:4a:f3:ad:18:45:e0:1d:83:8c:81:16:d2:bf:
40:7b:eb:0f:15:5e:c1:31:d5:cc:b3:c3:7a:a2:b2:ef:f0:10:
45:a5:a6:f3:81:00:dc:df:a7:69:12:13:ce:45:e7:91:59:f9:
27:cc:07:49:a6:bd:82:aa:7e:97:47:45:b0:0d:62:29:1d:04:
44:cb:da:b0:af:5e:81:4f:fa:f9:42:bf:a7:2e:96:66:e6:bf:
4b:8a:8b:6c:a6:8e:49:94:b8:c2:07:f2:80:d6:e1:3d:eb:07:
c9:44:4d:58:dc:af:22:3f:1f:4a:41:cf:cb:9b:d2:cc:8d:08:
c8:1d:a1:fd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdZQFWdosvkKpnZhUcTijG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk
MmFhMzgwHhcNMjUwNjEwMDk1MTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOThmODZjMjZkNjk2MTA2NzdjZTg4OTg5ZjllNmM0NTljOGVhM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd0Ck2ztG1acqd0OaSU08KFKZYXq
kI3GUAyYiBNF7xsIHWRcBDpE1VNJPlJzHxyaqEmzDBiFBUAHUfXuzKP5B22jC3t4
oxFfG624nG+XUWfWFKe+7CpMXT9EYEqubdT9lt5q4+1KJKB9RsV+rBiDXVlRSWYC
HwUHoce+EzcMzP/G/zL8iC59avP7/8bSn5W+ekNzEexm/lQNANXF0e/vdy4DUPDX
2HzCNVMZzy5HZBYzh429nEKxIf8ZEGjomZdNARgcQJ2ipafO3CAiPlU+5yDJa6CE
DT+SNUO3syq+GcBGh/4GaL5xN/r/eCsv9Wu5ro12EWvlIdBn1/izHZfjAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOmPhsJtaWEGd86ImJ+ebEWcjqOxMB8GA1UdIwQY
MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt
Y2YzMDVjNTQzOTNlLzEvNlktR3dtMXBZUVozem9pWW41NXNSWnlPbzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl
LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLUJoAwQC
LYRkMBQEAgACMA4DBQAqFE2AAwUAKhRNhzANBgkqhkiG9w0BAQsFAAOCAQEAMZLb
ClMrbLceTHlcSYmkgLxAj0a6DOMpQNwzuQsElGT0kTfXhYiDEs6c3lOmoTYSatta
9nNinTxM3OmY990UgHSIWmBEQrBtk1pYUno+m2mwzz+A6jBFCQ5TBXC0XM5xwpBD
vbH/eO4TnNEH20kS1B4UORe4ef4GSOElCJPZNTDFLx5K860YReAdg4yBFtK/QHvr
DxVewTHVzLPDeqKy7/AQRaWm84EA3N+naRITzkXnkVn5J8wHSaa9gqp+l0dFsA1i
KR0ERMvasK9egU/6+UK/py6WZua/S4qLbKaOSZS4wgfygNbhPesHyURNWNyvIj8f
SkHPy5vSzI0IyB2h/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:17 2025 by rpki-client