Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0gDl3JBSDCbDHckcliPIR9UTScc.roa
File: 0gDl3JBSDCbDHckcliPIR9UTScc.roa (raw, json)
Hash identifier: +acGSax9bhVkHl0xJHcTnTKJB5ENSYkzUUBiRdsadlE=
Subject key identifier: D2:00:E5:DC:90:52:0C:26:C3:1D:C9:1C:96:23:C8:47:D5:13:49:C7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01986129DA1493ECA2084C16EF6788111EEF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0gDl3JBSDCbDHckcliPIR9UTScc.roa
Signing time: Thu 31 Jul 2025 15:46:29 +0000
ROA not before: Thu 31 Jul 2025 15:46:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.48.0/21 maxlen: 24
46.3.56.0/21 maxlen: 24
46.3.80.0/21 maxlen: 22
46.3.96.0/20 maxlen: 24
46.3.160.0/22 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.216.0/22 maxlen: 24
46.3.222.0/24 maxlen: 24
46.232.64.0/22 maxlen: 24
80.243.128.0/21 maxlen: 24
80.243.128.0/23 maxlen: 24
80.243.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:29:da:14:93:ec:a2:08:4c:16:ef:67:88:11:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:46:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d200e5dc90520c26c31dc91c9623c847d51349c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:0b:c9:7f:32:75:7b:b8:9f:b3:fd:50:89:
23:7d:8a:60:dc:86:55:d2:4b:62:fa:c4:9f:88:dd:
33:d7:0f:36:40:c1:56:85:12:ea:c3:19:55:8e:41:
7e:49:b9:3f:52:df:8d:e8:f4:17:ad:9c:f4:7f:81:
25:8c:9f:be:fd:11:b1:0c:95:2b:e7:2d:77:06:89:
1a:0f:00:2c:1f:01:ec:9e:42:9c:bb:c9:9e:a8:a5:
43:60:c0:f2:d5:29:c7:a5:15:6c:83:8b:b9:a0:50:
e3:a3:49:22:b6:1d:cc:1c:42:c3:1c:12:bb:ec:b0:
a9:7b:4b:02:11:54:a1:d8:6e:5e:47:44:89:f0:a4:
88:92:cf:47:41:aa:fc:7a:00:71:f8:73:40:76:27:
94:e5:97:01:37:56:ef:ad:32:9a:0b:30:47:29:3f:
61:91:a4:5d:92:b6:c1:6b:2b:c0:a7:56:76:5c:f8:
8c:36:f8:dc:9e:28:51:1f:16:9b:0a:d0:ae:fb:72:
70:2e:a4:0d:97:bd:e4:70:b7:fa:3d:da:c8:be:90:
0a:10:b3:71:69:78:ec:60:f6:8b:5b:18:d4:91:84:
88:bb:22:04:64:b0:a5:04:88:71:47:1c:b3:f5:08:
35:9b:a7:3f:75:28:36:98:cc:8a:2d:06:6a:26:9e:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:E5:DC:90:52:0C:26:C3:1D:C9:1C:96:23:C8:47:D5:13:49:C7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0gDl3JBSDCbDHckcliPIR9UTScc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.48.0/20
46.3.80.0/21
46.3.96.0/20
46.3.160.0/21
46.3.208.0/20
46.232.64.0/22
80.243.128.0/21
Signature Algorithm: sha256WithRSAEncryption
06:b5:b3:02:6b:d8:f7:89:2d:0c:6c:85:64:76:a2:1b:7c:c1:
bf:b6:27:49:8a:96:89:f3:6a:13:57:89:83:17:2a:e9:55:f3:
23:bc:32:9e:83:4a:fc:51:2f:e9:28:7e:9a:bc:57:06:45:21:
a0:96:e7:fd:ee:83:14:d3:91:f7:66:a3:cc:f9:e5:8e:ba:95:
21:d5:71:ed:e6:a0:6b:5c:27:40:31:37:66:00:eb:93:76:db:
8d:50:da:ce:ca:b0:21:99:5d:f5:88:e4:c3:bc:b5:d0:98:3b:
54:9c:a0:f8:29:e5:89:13:cf:22:f4:21:d9:92:fc:e4:ee:a2:
b8:f4:06:b7:e5:6a:71:0d:b9:df:d5:1c:e9:ba:90:bc:2b:eb:
92:76:bd:b8:b4:25:ad:70:54:ff:c1:4a:e1:e9:e9:69:41:01:
04:1d:e2:ef:ac:0d:43:8f:d6:72:59:c0:3d:a1:03:e3:9c:9e:
bb:04:52:f8:8b:95:38:cf:32:dd:66:70:77:9f:28:62:9e:a4:
28:a1:55:4e:4d:14:88:95:3c:b1:0a:6b:db:84:1d:88:e8:60:
71:24:a9:aa:95:ac:35:25:e4:e2:17:03:bc:5a:4b:0b:37:4f:
5a:f1:af:a5:5e:73:c3:2c:e6:2d:9b:60:8f:60:f6:8d:01:96:
e4:ea:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:55 2025 by rpki-client