Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qhD0rzBhlAqq5c2mAPkLx6M_5vE.roa
File: qhD0rzBhlAqq5c2mAPkLx6M_5vE.roa (raw, json)
Hash identifier: VxaIZWc0YJPz67ExoEleaugdWqUCQfgszAsytk6+0uA=
Subject key identifier: AA:10:F4:AF:30:61:94:0A:AA:E5:CD:A6:00:F9:0B:C7:A3:3F:E6:F1
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01986129DA7DD6EFC172C6C860A8E025FE4A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qhD0rzBhlAqq5c2mAPkLx6M_5vE.roa
Signing time: Thu 31 Jul 2025 15:46:29 +0000
ROA not before: Thu 31 Jul 2025 15:46:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.80.0/21 maxlen: 21
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:29:da:7d:d6:ef:c1:72:c6:c8:60:a8:e0:25:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:46:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa10f4af3061940aaae5cda600f90bc7a33fe6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:03:56:0a:15:fb:41:4d:dd:4d:b2:f4:d2:
3b:a5:ea:1c:16:26:0f:7b:34:80:4c:c7:24:95:77:
31:11:88:46:29:17:ff:6f:ea:cd:65:09:77:7a:a9:
27:e2:87:c3:37:78:af:95:cd:91:f6:73:b5:d6:f3:
f2:03:bf:37:4b:ac:f4:ac:f4:28:11:34:ec:d7:b2:
e3:a8:03:c9:1d:97:06:3a:23:a7:51:76:2e:f2:ec:
ed:99:33:50:23:92:4f:7a:48:d6:38:6b:8a:b9:26:
af:3f:d8:34:b1:7d:f7:74:9c:70:7c:65:61:1e:f9:
b9:b2:51:3d:8f:30:2e:1f:2a:75:f5:cb:ea:81:ba:
88:c2:d8:06:d6:47:be:b7:ce:ec:c2:d7:3b:ca:fd:
25:6a:4e:73:93:b5:2b:1d:26:f3:af:00:21:fd:65:
d5:66:7e:33:b5:6e:e6:d1:2b:6c:22:4a:24:e3:fd:
c6:9e:2e:e0:c9:fb:f1:62:cb:b6:6f:b4:83:33:89:
34:6a:69:80:89:01:eb:4f:2c:39:f5:82:58:d9:86:
c6:d5:1a:b0:f5:7c:f1:6d:e2:c8:56:98:39:09:73:
bb:bd:56:96:cb:79:69:c7:76:3e:cf:74:74:a0:23:
be:12:87:ae:2f:a3:ac:98:81:d1:4e:9c:7b:9b:fd:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:F4:AF:30:61:94:0A:AA:E5:CD:A6:00:F9:0B:C7:A3:3F:E6:F1
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qhD0rzBhlAqq5c2mAPkLx6M_5vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.48.0/20
46.3.77.0/24
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0-46.3.131.255
46.3.134.0/23
46.3.156.0/23
46.3.160.0/21
46.3.184.0/21
46.3.205.0-46.3.223.255
46.3.228.0/23
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.0.0/22
46.232.18.0/23
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9e:23:b5:34:21:90:68:20:d4:7a:32:f7:bd:61:db:91:31:
3b:1c:4c:15:55:18:e2:e0:73:c5:a1:e4:30:a6:e1:18:ce:ef:
d3:55:ab:27:39:41:47:53:25:72:05:3e:f3:dd:e9:45:92:63:
5d:b9:e8:e0:57:21:5b:7b:f9:9d:b5:b5:e1:5d:a3:b5:bc:fc:
81:ed:dd:cd:b2:ac:de:ff:59:0c:3f:5f:65:a2:83:e4:8d:c1:
6e:cb:b1:0b:bf:f4:c5:35:31:b8:25:18:2e:80:94:26:0c:4f:
7d:df:f8:02:da:f2:2d:a9:03:73:f8:e8:50:c2:7e:d1:2f:7d:
4e:1f:57:1b:47:e0:17:1b:d1:52:ae:88:cc:62:cf:76:fb:e4:
21:7e:d4:7c:0c:3c:a6:a1:57:2c:3e:d9:9f:42:19:6c:d1:07:
6b:0f:d9:16:a1:8d:09:8b:d4:b3:0a:d9:54:c7:aa:2b:ed:f6:
73:df:55:5b:76:d6:af:f9:b2:51:45:81:86:6d:31:f3:6d:11:
32:df:f5:fa:d3:a8:ac:2d:b7:18:93:10:5b:89:9b:0b:e4:7e:
ef:db:7d:2b:2d:88:ac:03:59:33:10:b7:90:2a:a0:a7:4d:6e:
a4:fc:02:29:7e:22:15:c7:d9:b4:05:f8:3f:1b:1f:61:d1:af:
2e:ca:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:08 2025 by rpki-client