Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/N6iMIOuvBc3H2FaZfku7O0C9Q-0.roa
File: N6iMIOuvBc3H2FaZfku7O0C9Q-0.roa (raw, json)
Hash identifier: KqycS1R71aBxsRmTd27V9H2BdrB4fo+/j2T1BVhMCIg=
Subject key identifier: 37:A8:8C:20:EB:AF:05:CD:C7:D8:56:99:7E:4B:BB:3B:40:BD:43:ED
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0198612719B5B051884C061F8034D5F2EDDE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/N6iMIOuvBc3H2FaZfku7O0C9Q-0.roa
Signing time: Thu 31 Jul 2025 15:43:29 +0000
ROA not before: Thu 31 Jul 2025 15:43:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.80.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.3.128.0/23 maxlen: 23
46.3.176.0/20 maxlen: 20
46.3.216.0/21 maxlen: 21
46.232.0.0/24 maxlen: 24
46.232.16.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.232.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:27:19:b5:b0:51:88:4c:06:1f:80:34:d5:f2:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:43:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37a88c20ebaf05cdc7d856997e4bbb3b40bd43ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:c1:72:f6:94:ba:42:82:02:a0:27:ad:18:
63:63:82:b7:7b:02:2f:6d:ce:87:12:8b:0e:42:ee:
fb:fd:b6:c3:54:d6:de:a5:03:15:c3:be:8a:2a:e5:
26:0d:af:cb:f8:37:d9:c4:61:43:f6:cf:ec:a3:74:
6e:12:87:c1:dc:0d:39:d2:92:db:98:14:9a:7b:3f:
c2:8c:b0:62:6a:c4:b8:ae:2b:5b:94:c8:bc:18:34:
a9:88:c9:24:e2:2f:e7:8b:23:62:2e:53:84:04:f6:
27:4d:d0:3a:10:9d:5b:1d:8f:99:77:a7:ee:70:8b:
d3:7c:02:fd:83:0e:19:c1:c6:9d:c6:23:bf:20:08:
68:a2:34:f1:02:ac:1c:6f:96:44:18:f7:8c:c6:f7:
0e:5f:0e:f6:b9:2f:35:16:e9:b8:a3:d7:11:29:bc:
09:c2:c2:ca:b9:07:a4:17:58:be:c6:1f:cf:11:c7:
80:d8:34:19:12:78:1e:a6:aa:9d:b6:0f:ad:38:ed:
1d:72:3f:1c:95:7d:01:6f:cf:97:59:ec:0f:3e:ec:
e1:38:fb:1e:a1:5b:db:24:ec:c9:15:4e:3f:41:b9:
6a:62:b1:7d:d8:c2:c3:f5:d3:9f:8e:cc:fd:b1:e2:
8f:c6:b9:7d:6d:04:df:8e:2f:c9:2d:73:0c:a3:00:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:8C:20:EB:AF:05:CD:C7:D8:56:99:7E:4B:BB:3B:40:BD:43:ED
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/N6iMIOuvBc3H2FaZfku7O0C9Q-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/20
46.3.128.0/23
46.3.176.0/20
46.3.216.0/21
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
42:b6:e4:38:86:e4:e8:f5:89:17:4b:32:ea:c0:f1:ab:da:77:
4c:b4:1d:e5:00:91:31:e7:27:cc:9e:89:9e:72:58:79:a4:1b:
14:13:fb:54:c5:bc:a0:09:6e:4a:ab:bb:c3:47:b2:9f:cf:29:
e0:ba:62:ca:24:72:f5:19:45:74:8d:7d:60:58:86:c9:84:9d:
95:f6:35:b8:8e:11:0c:70:1f:e6:84:82:87:c0:1c:ed:2a:4e:
f0:34:da:b9:7f:f9:29:a0:44:b1:35:cd:e1:01:b8:97:f5:5c:
0e:da:9b:89:af:cf:e1:89:9f:5a:60:61:50:03:9b:7d:b1:1e:
a1:c6:4f:25:f8:69:25:b8:ee:83:50:13:20:c9:04:f2:ad:ea:
f8:f0:e6:47:8c:3b:1d:37:11:75:ec:0d:2a:35:03:78:4a:64:
ee:31:bc:29:66:04:7f:ce:01:be:88:73:f2:9c:99:66:74:bf:
75:e9:89:d0:63:ed:77:75:b7:8f:7b:31:a7:66:ea:56:89:7e:
37:01:1d:9b:73:12:13:e8:a1:14:82:88:f6:ae:51:83:b4:72:
b6:8a:32:59:fa:3a:ed:1f:65:72:be:49:5b:73:c3:9f:69:a9:
8d:d8:d1:b7:d7:8e:fa:c1:5b:ba:51:24:03:6d:1b:6c:25:d5:
89:f4:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:50 2025 by rpki-client