Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/j5H31_RCUXQ9BHoOfl-P79QLa6s.roa
File: j5H31_RCUXQ9BHoOfl-P79QLa6s.roa (raw, json)
Hash identifier: VuVrvXJ/y/gns772bu739J0mrCMiU84duUTa3CncJ6o=
Subject key identifier: 8F:91:F7:D7:F4:42:51:74:3D:04:7A:0E:7E:5F:8F:EF:D4:0B:6B:AB
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019861245B0959124AD5CB1EFB794AFA457F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/j5H31_RCUXQ9BHoOfl-P79QLa6s.roa
Signing time: Thu 31 Jul 2025 15:40:29 +0000
ROA not before: Thu 31 Jul 2025 15:40:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.8.0/22 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:24:5b:09:59:12:4a:d5:cb:1e:fb:79:4a:fa:45:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:40:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f91f7d7f44251743d047a0e7e5f8fefd40b6bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:8e:0d:ca:43:74:76:25:e0:0a:ea:65:da:
6e:31:56:51:71:f3:d7:d5:ef:43:eb:96:26:31:ae:
6b:65:9e:38:06:7f:11:ce:ae:57:27:b8:ad:82:1d:
76:be:df:6d:54:7f:9a:ed:7f:0f:fb:a7:dc:90:51:
c2:e8:5d:3c:79:8f:c6:8c:eb:e9:ae:96:43:9e:2d:
af:9d:09:9b:a1:e5:8e:6c:7a:64:17:c5:05:0d:a9:
e3:06:79:44:b7:43:52:95:48:70:67:19:7a:2e:a7:
12:fc:fb:22:23:97:19:2b:3b:6b:00:db:e6:d2:17:
79:5d:5a:ba:80:b6:1d:b0:e0:48:aa:9f:1b:ee:68:
2a:64:a0:cb:b5:bd:07:b4:6b:5b:0b:5b:93:5e:ca:
73:a5:40:60:88:15:0a:52:0b:32:57:42:b6:97:92:
e0:1f:01:da:4d:cf:ea:c9:a7:a6:71:ae:6d:9e:4f:
7f:28:a8:c5:6a:1a:4c:49:41:bc:b2:c4:76:d5:de:
14:7e:f8:9b:96:ef:4c:92:e6:3d:b4:2e:4b:a1:b1:
fa:03:56:f2:ea:bf:5f:e4:80:93:7a:a7:53:5c:e6:
cd:8d:2d:41:22:e2:67:2f:81:0e:fe:96:27:19:68:
c6:d2:b7:9e:ad:47:b9:cd:4f:fc:dd:e6:d3:e9:54:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:91:F7:D7:F4:42:51:74:3D:04:7A:0E:7E:5F:8F:EF:D4:0B:6B:AB
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/j5H31_RCUXQ9BHoOfl-P79QLa6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.208.0/21
149.126.203.0/24
149.126.251.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1c:4c:1a:3b:6b:23:9a:d4:66:85:e5:ae:f9:9f:e6:88:82:
1d:4b:c1:a4:ef:7f:0a:fa:7d:85:7e:13:cc:1b:fe:1a:4b:95:
4b:67:b5:a7:49:fa:c1:b6:aa:d6:db:e8:26:da:8c:cd:35:50:
4d:25:a3:fc:2f:4d:3d:e7:53:f5:c5:07:b6:49:58:33:20:b8:
74:cf:76:67:a0:e3:6c:a4:41:3b:fb:0a:f2:de:8c:37:d6:d3:
37:d4:06:d3:64:2f:14:b8:c1:1f:28:13:f5:91:1e:fd:d3:68:
37:42:a3:e9:c7:05:57:5e:b4:65:93:ff:24:20:98:84:e9:f5:
19:47:7b:19:27:04:39:24:21:4a:47:ea:39:df:7d:5d:a1:e4:
07:23:17:b9:fa:94:2e:f4:09:5b:df:54:e4:b0:30:14:c8:2f:
6c:f5:b9:03:aa:ba:b3:55:28:56:4f:b8:4c:b3:3e:39:d2:55:
44:b3:63:44:22:5c:76:9f:f9:02:23:7c:4f:fa:97:ba:5c:6e:
4e:fa:0e:9c:bb:cd:9f:1e:a8:db:69:47:b7:20:85:65:91:65:
61:eb:a7:ec:78:77:b9:b3:be:82:15:37:59:32:c0:96:02:a4:
3c:97:a4:71:a9:58:69:cb:97:d2:42:0e:6b:ae:52:d9:b4:94:
4e:43:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:24 2025 by rpki-client