Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/asWAJngr3brPbYfCcZcegGabBbc.roa
File: asWAJngr3brPbYfCcZcegGabBbc.roa (raw, json)
Hash identifier: 02B7wmgPMC1ijSTyZfpTAEppxtedoAtKSxz97jPl5rE=
Subject key identifier: 6A:C5:80:26:78:2B:DD:BA:CF:6D:87:C2:71:97:1E:80:66:9B:05:B7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019740CF9FCF65E3F59A6DFE521562EACED0
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/asWAJngr3brPbYfCcZcegGabBbc.roa
Signing time: Thu 05 Jun 2025 15:57:17 +0000
ROA not before: Thu 05 Jun 2025 15:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.0.0/16 maxlen: 24
46.3.0.0/22 maxlen: 24
46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.176.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:cf:9f:cf:65:e3:f5:9a:6d:fe:52:15:62:ea:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 5 15:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac58026782bddbacf6d87c271971e80669b05b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:30:87:94:dd:ea:40:ee:5e:e1:06:36:42:
fd:25:b3:e7:53:c7:a0:7c:40:6b:b9:58:10:74:4c:
72:3f:24:0f:ea:75:7d:de:68:32:48:69:51:a8:51:
b4:f4:ab:02:12:95:db:df:7e:9a:c5:bb:26:c8:1a:
7e:89:36:7e:7d:72:7b:6d:4a:34:bf:16:2a:1f:c2:
56:d8:cc:e3:e3:a7:a5:19:2c:20:c5:7e:9f:76:86:
56:c6:46:60:65:6b:f0:ad:06:a1:5e:bd:98:86:3b:
13:f8:6e:18:98:6b:47:1e:5b:5c:83:df:b3:84:e7:
63:69:0e:91:9b:0b:f5:80:bc:e0:5e:a7:bd:d7:82:
b3:38:15:f9:46:7d:0e:cb:d2:0a:24:98:e3:5a:5a:
b5:50:93:ef:01:74:e0:40:b5:38:a3:54:65:ef:67:
46:16:a0:28:2d:5a:9d:09:1e:98:af:db:3a:f7:75:
53:42:60:83:3d:70:7e:ea:aa:59:97:74:f9:dc:95:
bc:5b:d5:41:08:74:fb:0b:bc:2c:4b:aa:75:ef:63:
d4:55:fa:40:34:a4:37:c5:d2:2d:6f:0d:ed:d2:b0:
c2:ed:2a:38:9c:85:1a:c4:b8:fa:3b:ac:57:6b:2d:
cf:5b:6f:e4:b5:12:24:e6:f0:43:f8:a8:a2:de:a7:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:80:26:78:2B:DD:BA:CF:6D:87:C2:71:97:1E:80:66:9B:05:B7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/asWAJngr3brPbYfCcZcegGabBbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:a4:78:71:eb:e2:c4:14:53:d7:ab:c4:da:28:61:bf:45:71:
b9:67:f6:00:44:b6:0e:11:75:b9:5f:b4:35:18:fd:82:7f:0c:
47:53:30:18:66:99:d0:ab:ed:d0:e8:ee:6e:5f:fa:47:eb:de:
c2:54:39:32:7c:28:8b:6e:bc:0a:46:b8:19:20:db:8e:35:10:
32:c5:9b:74:36:e8:76:ec:d4:84:67:c0:82:a5:6c:d3:ec:bf:
b6:bc:05:67:0c:17:ab:a2:b9:10:7c:da:84:3c:7c:bd:c8:61:
02:cf:be:44:4e:f2:c1:b1:1e:a7:cd:32:c3:01:83:b4:f7:6b:
97:50:6e:7e:54:b9:38:5a:7e:00:2f:3d:b4:07:23:cf:ed:d9:
b3:2d:44:49:55:ab:28:a7:79:34:64:12:c0:fa:6e:76:a5:35:
e4:c3:9e:fa:11:5c:49:5d:f8:29:70:ac:48:27:a0:a2:1b:18:
bd:b6:f4:c8:50:f6:4b:08:53:f0:4c:3e:76:46:b9:a0:f8:fa:
ef:88:44:00:b4:e7:48:f6:31:ee:79:44:e7:98:9d:76:4c:34:
10:f2:43:ee:82:31:d3:74:cb:42:6a:d5:69:40:c6:9d:a8:79:
90:8c:ff:38:af:dd:84:45:67:32:2e:70:5f:ec:fd:69:56:a9:
ff:e8:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:56 2025 by rpki-client