Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/RRGPiwSoL79NgJ47OH-P1uUc9yU.roa
File: RRGPiwSoL79NgJ47OH-P1uUc9yU.roa (raw, json)
Hash identifier: 2CE6bizCW0kyRSOjzW3ojuyJVjlN2pZSGDthjEoa8m4=
Subject key identifier: 45:11:8F:8B:04:A8:2F:BF:4D:80:9E:3B:38:7F:8F:D6:E5:1C:F7:25
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01986123706D2660924D0CA29A2BEE62F870
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/RRGPiwSoL79NgJ47OH-P1uUc9yU.roa
Signing time: Thu 31 Jul 2025 15:39:29 +0000
ROA not before: Thu 31 Jul 2025 15:39:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 46.3.160.0/22 maxlen: 22
46.3.205.0/24 maxlen: 24
46.3.216.0/22 maxlen: 22
46.3.222.0/24 maxlen: 24
149.126.229.0/24 maxlen: 24
149.126.230.0/24 maxlen: 24
149.126.243.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:23:70:6d:26:60:92:4d:0c:a2:9a:2b:ee:62:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:39:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45118f8b04a82fbf4d809e3b387f8fd6e51cf725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:ba:da:a9:42:0c:8a:80:d8:c8:ee:5b:40:
7e:ca:a2:d0:da:b0:97:a4:af:8b:a0:2c:00:d2:f9:
51:c9:aa:94:a2:ad:88:af:3b:6d:7a:85:1b:d8:5a:
48:8f:5c:f2:88:98:a1:9a:4c:fe:22:77:80:3f:8d:
c0:77:a8:90:85:65:b4:f4:65:c7:5e:0d:da:0d:a5:
65:ac:85:9e:95:1f:b4:92:9b:0b:ae:44:d6:36:4c:
f2:dc:57:cc:5b:fe:c3:5a:d7:22:3e:ae:f0:aa:b8:
0c:d4:8b:ec:fc:d6:82:bc:84:53:37:ea:70:21:22:
25:9f:c8:6d:4f:57:da:6c:91:d7:a6:02:a6:9d:c7:
86:96:ac:9d:b6:2c:6b:20:6d:23:2e:eb:0f:aa:99:
97:41:15:66:f2:a3:6d:9f:cc:49:39:57:a8:92:33:
66:9c:0b:8f:7e:b0:e0:72:9b:fb:6e:e5:f7:f7:fb:
20:ec:ef:c8:e3:b4:80:06:33:6a:89:63:4e:48:e5:
85:e6:16:ac:8f:49:06:d2:dc:54:ad:ac:b8:68:ce:
dc:bb:b4:4a:a2:35:6c:0e:ed:cf:fd:c3:03:43:4c:
e4:b2:1f:2f:0c:a6:2c:8e:a6:8a:72:4c:c6:b6:96:
50:34:51:de:93:df:40:e0:f6:0c:59:a4:2d:1c:d0:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:8F:8B:04:A8:2F:BF:4D:80:9E:3B:38:7F:8F:D6:E5:1C:F7:25
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/RRGPiwSoL79NgJ47OH-P1uUc9yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.160.0/22
46.3.205.0/24
46.3.216.0/22
46.3.222.0/24
149.126.229.0-149.126.230.255
149.126.243.0/24
149.126.247.0-149.126.250.255
Signature Algorithm: sha256WithRSAEncryption
75:e3:a9:0e:22:f1:80:f8:3c:61:7b:00:0a:3d:10:e1:08:4b:
79:0c:c1:38:00:96:0f:3d:16:cd:20:6d:e9:10:06:3f:8a:d5:
1c:57:fe:cf:bc:5a:9d:93:7b:d7:10:0a:0e:41:84:f2:68:d7:
7e:28:22:4e:01:96:54:a6:84:ea:46:2a:72:40:c8:a6:3e:7e:
2c:85:3a:2e:4f:e4:0d:e7:d0:8f:d2:7b:4f:02:09:a5:10:28:
ca:39:27:03:e5:9e:ce:c8:ce:fa:ca:2d:d9:3f:f0:88:f1:c1:
ab:3c:09:a9:92:01:b1:ba:98:a1:35:df:ec:fb:63:cb:7d:99:
ba:cc:0f:3e:f6:8d:46:da:21:ed:a4:ad:00:2c:eb:38:b2:db:
fd:a0:db:e2:17:22:48:b6:43:2f:03:38:fe:ab:12:ee:3c:c2:
87:8c:34:65:ea:0b:01:d3:56:98:02:45:47:ea:36:1d:7d:01:
8b:bd:5c:d1:79:90:8c:3b:4f:db:e1:e6:25:ee:87:96:ec:a8:
96:49:e5:1e:fa:62:ff:5d:74:8e:65:1e:ac:11:11:e2:e9:78:
da:37:a4:a8:b3:07:58:41:49:f9:23:26:94:da:73:6e:82:ef:
89:3b:03:3c:cc:f9:a9:b4:32:fd:9c:40:23:04:cc:7a:bf:55:
5a:81:1e:02
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZhhI3BtJmCSTQyimivuYvhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNzMxMTUzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTExOGY4YjA0YTgyZmJmNGQ4MDllM2IzODdmOGZkNmU1MWNmNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6C62qlCDIqA2MjuW0B+yqLQ2rCX
pK+LoCwA0vlRyaqUoq2IrztteoUb2FpIj1zyiJihmkz+IneAP43Ad6iQhWW09GXH
Xg3aDaVlrIWelR+0kpsLrkTWNkzy3FfMW/7DWtciPq7wqrgM1Ivs/NaCvIRTN+pw
ISIln8htT1fabJHXpgKmnceGlqydtixrIG0jLusPqpmXQRVm8qNtn8xJOVeokjNm
nAuPfrDgcpv7buX39/sg7O/I47SABjNqiWNOSOWF5hasj0kG0txUray4aM7cu7RK
ojVsDu3P/cMDQ0zksh8vDKYsjqaKckzGtpZQNFHek99A4PYMWaQtHNAvLwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFEURj4sEqC+/TYCeOzh/j9blHPclMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvUlJHUGl3U29MNzlOZ0o0N09ILVAxdVVjOXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQCLgOgAwQA
LgPNAwQCLgPYAwQALgPeMAwDBACVfuUDBACVfuYDBACVfvMwDAMEAJV+9wMEAJV+
+jANBgkqhkiG9w0BAQsFAAOCAQEAdeOpDiLxgPg8YXsACj0Q4QhLeQzBOACWDz0W
zSBt6RAGP4rVHFf+z7xanZN71xAKDkGE8mjXfigiTgGWVKaE6kYqckDIpj5+LIU6
Lk/kDefQj9J7TwIJpRAoyjknA+WezsjO+sot2T/wiPHBqzwJqZIBsbqYoTXf7Ptj
y32ZuswPPvaNRtoh7aStACzrOLLb/aDb4hciSLZDLwM4/qsS7jzCh4w0ZeoLAdNW
mAJFR+o2HX0Bi71c0XmQjDtP2+HmJe6HluyolknlHvpi/110jmUerBER4ul42jek
qLMHWEFJ+SMmlNpzboLviTsDPMz5qbQy/ZxAIwTMer9VWoEeAg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:21 2025 by rpki-client