Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1CX9tv6xgM480aKBNMkdw8FUUZg.roa
File: 1CX9tv6xgM480aKBNMkdw8FUUZg.roa (raw, json)
Hash identifier: x7XD4MjdwQsB6LrM4PLxZYQvP+Ct3ZIhXqtfvuzb5tY=
Subject key identifier: D4:25:FD:B6:FE:B1:80:CE:3C:D1:A2:81:34:C9:1D:C3:C1:54:51:98
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01986129D8FFCEB8383129DB47445ACE2AFE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1CX9tv6xgM480aKBNMkdw8FUUZg.roa
Signing time: Thu 31 Jul 2025 15:46:29 +0000
ROA not before: Thu 31 Jul 2025 15:46:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.20.0/24 maxlen: 24
46.3.21.0/24 maxlen: 24
46.3.22.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
46.3.128.0/24 maxlen: 24
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.237.0/24 maxlen: 24
46.232.8.0/22 maxlen: 22
46.232.12.0/22 maxlen: 22
80.243.128.0/20 maxlen: 24
149.126.194.0/24 maxlen: 24
149.126.199.0/24 maxlen: 24
149.126.209.0/24 maxlen: 24
149.126.211.0/24 maxlen: 24
149.126.212.0/24 maxlen: 24
149.126.227.0/24 maxlen: 24
149.126.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:29:d8:ff:ce:b8:38:31:29:db:47:44:5a:ce:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:46:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d425fdb6feb180ce3cd1a28134c91dc3c1545198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:ee:90:c9:e0:a5:c6:8a:3c:72:26:2a:4c:
e2:a9:5a:24:86:0d:09:c4:c1:9b:1f:ae:54:c1:93:
7c:d7:f2:d4:c4:46:47:0d:00:dc:4a:6b:e5:2c:73:
3e:83:88:ed:62:f2:75:21:f3:1c:c9:33:d9:32:ca:
24:6f:d1:c8:a6:88:ca:7e:c1:70:ae:bb:ba:4d:50:
1b:7e:19:a3:fd:90:8c:0a:f4:cf:a3:06:58:cf:4c:
ca:86:47:b6:97:ec:d3:dc:95:b8:cb:4f:83:11:13:
70:58:08:05:36:2e:83:2b:6b:08:98:77:64:23:d1:
54:3c:04:00:91:26:5d:54:e0:c7:0c:fa:20:26:5d:
cb:cf:f9:ed:8a:58:11:d8:cd:48:a6:a8:b9:81:00:
3b:77:af:ea:f6:dc:31:6c:a5:a8:01:ef:90:46:ab:
84:dc:a5:51:9b:89:b2:5c:fc:e5:b0:71:84:23:e6:
f8:e9:62:2c:bd:32:fa:a2:ca:37:c2:91:29:34:61:
de:e3:fd:d0:37:6a:27:c9:d2:a1:ed:0e:59:67:f0:
90:07:fe:41:0d:50:66:46:28:c6:be:eb:3e:50:07:
07:af:86:42:74:52:ec:ed:e2:97:1d:81:90:d0:ac:
79:3c:ca:98:62:f8:0d:c8:d3:50:14:86:bc:9c:96:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:FD:B6:FE:B1:80:CE:3C:D1:A2:81:34:C9:1D:C3:C1:54:51:98
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1CX9tv6xgM480aKBNMkdw8FUUZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.20.0/22
46.3.85.0/24
46.3.128.0/23
46.3.131.0/24
46.3.237.0/24
46.232.8.0/21
80.243.128.0/20
149.126.194.0/24
149.126.199.0/24
149.126.209.0/24
149.126.211.0-149.126.212.255
149.126.227.0/24
149.126.241.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bd:fa:d3:db:fc:a5:cb:a4:05:21:6f:7b:ca:e2:a0:ad:f9:
81:d5:e6:74:67:ce:6e:7c:8c:90:9a:08:1d:cc:c1:6c:ab:6c:
f6:99:40:55:ba:74:0d:48:0e:2c:ad:e0:36:05:8b:e3:0c:6b:
b0:0d:ca:c4:41:10:ec:39:01:f1:1f:90:8d:eb:bf:44:c1:3c:
7c:a1:6c:b7:91:ad:b4:13:98:78:b4:32:6e:2c:a8:a6:3b:56:
a0:aa:be:91:69:4e:f6:58:b4:af:5f:d3:44:c7:64:2c:61:5f:
38:9e:19:3d:ce:4e:bc:22:3e:29:14:1e:4d:6b:2a:08:9e:10:
1d:02:94:b6:cb:b9:c5:10:d4:f8:c5:c8:e7:fe:1a:62:00:ac:
18:81:ea:cb:f1:08:4f:e9:83:b3:7e:4d:46:32:80:2a:bd:bf:
fb:fb:3f:57:e0:c6:26:76:53:be:8e:dc:53:ff:d2:a4:4f:31:
c5:f9:1c:26:99:49:39:0b:df:01:bd:7a:ea:d6:00:01:ac:94:
ee:3b:8f:29:8e:c2:13:a5:d0:b0:64:6b:a8:6c:a7:44:15:09:
8b:6b:50:ed:57:30:b1:fb:71:17:dd:e4:36:75:6a:b3:6a:8c:
a0:79:88:4f:72:c7:5c:62:01:14:b8:66:be:3a:dc:70:f5:0e:
11:01:bf:ca
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZhhKdj/zrg4MSnbR0Razir+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNzMxMTU0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDI1ZmRiNmZlYjE4MGNlM2NkMWEyODEzNGM5MWRjM2MxNTQ1MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsarukMngpcaKPHImKkziqVokhg0J
xMGbH65UwZN81/LUxEZHDQDcSmvlLHM+g4jtYvJ1IfMcyTPZMsokb9HIpojKfsFw
rru6TVAbfhmj/ZCMCvTPowZYz0zKhke2l+zT3JW4y0+DERNwWAgFNi6DK2sImHdk
I9FUPAQAkSZdVODHDPogJl3Lz/ntilgR2M1Ipqi5gQA7d6/q9twxbKWoAe+QRquE
3KVRm4myXPzlsHGEI+b46WIsvTL6oso3wpEpNGHe4/3QN2onydKh7Q5ZZ/CQB/5B
DVBmRijGvus+UAcHr4ZCdFLs7eKXHYGQ0Kx5PMqYYvgNyNNQFIa8nJa+FQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFNQl/bb+sYDOPNGigTTJHcPBVFGYMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvMUNYOXR2NnhnTTQ4MGFLQk5Na2R3OEZVVVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQCLgMUAwQA
LgNVAwQBLgOAAwQALgODAwQALgPtAwQDLugIAwQEUPOAAwQAlX7CAwQAlX7HAwQA
lX7RMAwDBACVftMDBACVftQDBACVfuMDBACVfvEwDQYJKoZIhvcNAQELBQADggEB
AIa9+tPb/KXLpAUhb3vK4qCt+YHV5nRnzm58jJCaCB3MwWyrbPaZQFW6dA1IDiyt
4DYFi+MMa7ANysRBEOw5AfEfkI3rv0TBPHyhbLeRrbQTmHi0Mm4sqKY7VqCqvpFp
TvZYtK9f00THZCxhXzieGT3OTrwiPikUHk1rKgieEB0ClLbLucUQ1PjFyOf+GmIA
rBiB6svxCE/pg7N+TUYygCq9v/v7P1fgxiZ2U76O3FP/0qRPMcX5HCaZSTkL3wG9
eurWAAGslO47jymOwhOl0LBka6hsp0QVCYtrUO1XMLH7cRfd5DZ1arNqjKB5iE9y
x1xiARS4Zr463HD1DhEBv8o=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:21 2025 by rpki-client