Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ex6208muV8_yg4bpkUPDrXd8Y5Y.roa
File: ex6208muV8_yg4bpkUPDrXd8Y5Y.roa (raw, json)
Hash identifier: FSO6ZapxzhxwVWzq7zMH1yvZveWLQvShu2DALRfTMMQ=
Subject key identifier: 7B:1E:B6:D3:C9:AE:57:CF:F2:83:86:E9:91:43:C3:AD:77:7C:63:96
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019861219CE3517FE64F52F900661F9E8BCF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ex6208muV8_yg4bpkUPDrXd8Y5Y.roa
Signing time: Thu 31 Jul 2025 15:37:29 +0000
ROA not before: Thu 31 Jul 2025 15:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 46.3.0.0/16 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.4.0/23 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:21:9c:e3:51:7f:e6:4f:52:f9:00:66:1f:9e:8b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b1eb6d3c9ae57cff28386e99143c3ad777c6396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:23:26:fd:93:99:c4:ff:c9:71:91:5f:d3:
95:14:67:60:14:28:df:14:92:37:33:b6:f7:b9:be:
86:bb:5b:e4:2c:64:1d:f1:53:a6:3f:fd:af:70:a8:
7e:06:77:74:84:5d:cd:7d:1d:0c:d8:4e:c3:e8:1e:
8f:2f:35:26:03:df:cd:58:fe:3e:b3:05:64:b6:aa:
85:00:9d:db:82:56:cd:3b:75:dd:a3:f3:53:ff:da:
6b:86:78:f4:d3:c6:cb:1d:48:55:78:a5:fe:a0:0e:
b2:68:3c:9f:be:d4:89:02:b7:37:76:e0:9c:15:a4:
04:58:2b:90:5a:3a:22:da:34:a5:7e:db:3b:95:62:
d2:d0:45:27:57:9a:bf:60:4a:e9:bc:15:5d:cb:b3:
82:06:5c:6f:79:c0:bf:69:2c:0c:7c:c0:8c:53:bf:
d9:dd:c8:1f:79:97:51:45:e6:9a:c9:4d:99:66:bf:
14:1b:0a:42:48:61:0f:8f:3e:87:a0:d8:7b:fe:e1:
33:3d:7b:27:74:4f:15:fd:98:72:f2:0f:60:80:c8:
59:76:c2:66:9d:cf:fb:a5:d9:29:75:07:55:39:84:
5c:29:fc:d4:b7:70:7e:ad:c6:44:23:c9:b4:3e:85:
42:a6:12:03:2c:51:d9:97:2b:95:00:e6:72:36:a8:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:B6:D3:C9:AE:57:CF:F2:83:86:E9:91:43:C3:AD:77:7C:63:96
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ex6208muV8_yg4bpkUPDrXd8Y5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:ca:38:9b:ee:cd:41:dc:2e:70:f5:03:74:69:f6:ca:5c:b6:
da:0f:6f:d7:19:d0:3f:b6:e5:6d:8a:36:77:65:b1:8a:cc:5d:
bd:7b:d4:b4:ef:0a:f0:fe:fa:ac:da:81:b5:e1:f4:99:28:02:
a9:8e:8c:a4:67:88:08:89:97:10:e6:2c:de:e5:e9:6d:38:62:
15:2d:db:8b:42:c0:b9:24:e3:4d:d8:45:6f:a0:4a:89:4c:af:
dc:cb:02:27:fc:8d:3e:dc:18:a9:57:e4:bb:72:55:ac:25:06:
37:4d:52:e3:12:ac:33:76:10:ff:30:0e:0e:e3:62:08:05:e1:
b0:a5:1d:0d:a1:3f:28:70:63:ca:b8:0d:a1:56:7b:02:82:2a:
df:10:07:84:9f:41:7b:12:65:a1:03:ab:c9:94:9e:af:74:6f:
a5:2e:1a:ce:ca:03:4b:5c:d0:fd:b2:87:a5:d2:a9:10:8a:54:
c9:c2:c6:61:dd:29:23:8e:a6:24:39:2d:e0:3e:5c:7d:11:1b:
bb:f5:6b:78:45:cd:4e:d3:1d:8f:98:7c:b9:bd:f0:a0:17:8f:
e2:20:2f:1b:d5:fa:2a:6e:a8:dd:93:38:20:58:8f:9a:3d:30:
54:ce:67:47:16:13:90:b6:ab:b8:2a:a0:64:cf:16:2f:40:ca:
92:b0:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:03 2025 by rpki-client