Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/D1xQpIVbaSFtIOiY5kk7nj7pYd0.roa
File: D1xQpIVbaSFtIOiY5kk7nj7pYd0.roa (raw, json)
Hash identifier: 0w19o0kOArooO/gFse0CyFst888k5mp9B4i5Eh+qgk0=
Subject key identifier: 0F:5C:50:A4:85:5B:69:21:6D:20:E8:98:E6:49:3B:9E:3E:E9:61:DD
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019861219B59EA6A20864733286FD57790FE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/D1xQpIVbaSFtIOiY5kk7nj7pYd0.roa
Signing time: Thu 31 Jul 2025 15:37:29 +0000
ROA not before: Thu 31 Jul 2025 15:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 46.3.86.0/23 maxlen: 23
46.232.72.0/21 maxlen: 21
149.126.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:21:9b:59:ea:6a:20:86:47:33:28:6f:d5:77:90:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f5c50a4855b69216d20e898e6493b9e3ee961dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:02:5d:bf:38:b7:2d:d4:ad:1e:c0:e9:ee:
31:01:e0:7d:14:b3:84:b6:a6:7f:bf:32:85:37:b8:
66:1b:67:ba:74:19:59:45:e2:bf:5c:11:7b:dc:32:
98:5d:65:a0:46:a7:a4:15:5d:be:3b:a0:bd:9f:b4:
3a:77:08:24:2a:71:73:14:1a:c7:70:f8:8c:ae:c7:
d8:34:4f:aa:cc:c6:78:f8:70:b0:34:63:0d:81:ce:
2e:00:2f:d4:c8:44:94:43:ab:e9:a9:f8:c7:b2:9d:
de:75:13:66:e9:b9:01:dd:65:82:af:06:17:56:dc:
0c:4d:c5:aa:fa:62:44:41:79:4e:83:cc:c9:96:bc:
c4:b0:41:cc:21:fd:3a:9d:a4:f3:d1:38:cc:17:79:
29:f5:6a:09:92:0e:c1:63:21:b0:91:ff:48:fe:76:
d8:f2:79:59:76:b6:67:90:6b:24:9a:6c:e4:7e:3a:
8b:cf:5b:50:40:d3:06:6c:a1:8c:98:d2:78:fe:a5:
38:ca:f8:19:56:13:04:e2:b2:79:9b:15:24:e4:b8:
31:a3:63:62:ed:53:eb:7d:69:85:17:02:6d:68:3f:
b6:dd:47:df:a4:b5:90:78:76:1b:98:f8:96:ef:6d:
b8:e1:78:57:22:b3:f9:c4:ba:6c:4b:93:3e:5c:fe:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:50:A4:85:5B:69:21:6D:20:E8:98:E6:49:3B:9E:3E:E9:61:DD
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/D1xQpIVbaSFtIOiY5kk7nj7pYd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.86.0/23
46.232.72.0/21
149.126.196.0/24
Signature Algorithm: sha256WithRSAEncryption
72:80:e9:71:7d:01:7f:71:34:30:72:9e:73:b3:90:d4:f1:cb:
76:6f:ff:ae:6b:51:94:e8:ea:38:49:70:43:3e:9c:f2:2c:ba:
8e:b5:3b:2c:62:fc:3f:b0:fa:be:e2:d3:64:8a:2d:c2:19:2e:
77:2b:7e:bd:f0:cf:8b:c7:42:5d:51:ac:d2:d5:a7:24:65:99:
01:c7:34:16:a8:6b:46:b5:de:1a:c6:d4:68:f3:69:a5:e8:57:
83:b6:b4:a7:1b:02:09:b5:f3:c1:90:f6:94:7f:ce:af:cc:68:
94:bb:e6:ed:37:65:c4:7b:41:12:87:96:8b:30:98:f8:d2:c6:
f9:a5:ec:71:fc:20:03:6c:4a:da:47:4f:fe:3f:9c:26:a9:ef:
06:a8:57:a3:62:55:fc:c6:1e:d0:d3:7e:5c:24:4b:4d:3d:3d:
f2:50:b9:5a:74:e5:83:b3:ec:21:58:49:ac:e8:17:e4:81:f1:
d9:38:dd:7b:65:40:d7:4a:91:15:70:3f:71:9e:21:f7:42:16:
31:3a:e0:7d:2a:c7:bb:65:80:d0:36:82:34:6d:24:d7:90:b9:
d8:1e:88:c8:f0:3c:7a:56:17:bb:06:61:c7:76:ad:51:87:60:
89:96:69:d4:3c:d3:11:35:33:c1:17:2a:89:7e:df:bb:8c:1a:
cc:ea:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:41 2025 by rpki-client