Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zPJgvBA45V7HRYz8egjxIT2RZG4.roa
File: zPJgvBA45V7HRYz8egjxIT2RZG4.roa (raw, json)
Hash identifier: bpr/SsRt3bhvIHn71joVfQ4YqwOrrOh1ILTwIzwHq+c=
Subject key identifier: CC:F2:60:BC:10:38:E5:5E:C7:45:8C:FC:7A:08:F1:21:3D:91:64:6E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01986128EE998BD5A00CE8653D92CB5DD87F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zPJgvBA45V7HRYz8egjxIT2RZG4.roa
Signing time: Thu 31 Jul 2025 15:45:29 +0000
ROA not before: Thu 31 Jul 2025 15:45:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.0.0/16 maxlen: 24
46.3.0.0/22 maxlen: 24
46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.176.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:28:ee:99:8b:d5:a0:0c:e8:65:3d:92:cb:5d:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:45:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf260bc1038e55ec7458cfc7a08f1213d91646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:fe:77:57:5f:6a:37:23:6f:2d:ab:35:36:
95:d9:ce:f7:cf:5d:93:55:05:a3:de:8d:b4:e6:fa:
31:e8:14:ee:8b:26:ea:30:ee:96:fe:ba:5c:48:5f:
32:92:e5:c1:8d:cf:f8:44:29:bc:9a:ed:93:ae:2a:
a0:05:73:e5:f6:46:c9:a5:3c:66:a7:41:25:85:04:
4e:01:b1:24:bd:46:d8:1e:cb:4f:3a:65:25:83:59:
98:d6:45:05:50:18:28:f5:a8:8b:1b:32:88:80:b4:
93:7a:fb:b3:a7:a6:03:88:9d:94:83:73:b8:11:08:
53:64:29:42:55:90:de:73:e1:de:9e:68:d0:65:48:
21:7c:dc:c5:a6:aa:06:f0:b6:8a:1e:c9:d0:c6:5b:
1b:a4:ab:5a:65:84:ee:d9:d4:43:56:92:58:72:df:
ee:ea:97:c8:e0:70:8d:ec:58:4d:d2:82:8d:90:55:
2a:52:60:69:45:82:1c:1c:a4:6f:0d:67:75:5e:b9:
26:2d:17:1b:a5:1a:51:dd:5e:c8:91:ff:1c:26:71:
87:93:61:4a:5b:72:8e:36:b4:a1:fc:01:9b:8c:90:
fc:0e:ca:cd:98:4c:32:47:4c:fd:be:3f:9f:76:1c:
ef:e7:34:b7:f4:61:b1:2d:bf:54:65:c8:b1:7f:49:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:60:BC:10:38:E5:5E:C7:45:8C:FC:7A:08:F1:21:3D:91:64:6E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zPJgvBA45V7HRYz8egjxIT2RZG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
55:55:39:ee:2a:e5:30:e6:27:db:bd:77:d8:3f:70:e8:cc:b1:
6d:8e:70:e6:a7:ba:8f:05:49:81:2d:16:4f:37:db:a8:32:e4:
43:f0:17:4e:3e:bd:58:b7:02:ee:42:ca:03:62:81:f7:8c:ff:
91:47:8b:a1:76:98:a4:84:65:57:09:8f:26:56:96:32:f3:ac:
1f:e0:43:a7:51:1a:42:40:fd:71:b9:7a:c6:52:b1:27:39:9b:
74:d4:33:62:26:cc:a5:16:00:72:7d:90:88:8e:09:e1:57:03:
ff:64:b9:3d:3d:5a:a9:7f:57:c5:15:d4:92:65:b4:3a:b2:94:
40:04:c0:54:0f:8e:f9:fd:ea:a4:a6:56:47:d7:c0:b1:e9:65:
78:db:3b:d8:8c:11:c1:b8:8c:fb:d9:ed:ca:bb:b2:dd:ef:da:
39:43:d0:88:38:95:e3:24:c8:4e:48:ab:96:eb:f3:ed:19:d0:
0b:4a:9d:01:23:e8:d1:e3:61:ab:c7:0e:ba:98:92:66:81:e6:
14:38:1f:95:b9:ec:eb:cc:a6:a4:34:29:34:8f:14:dc:df:60:
36:e9:7c:c4:b0:33:de:b8:36:76:16:cb:17:90:bc:a0:74:fd:
86:2e:f2:66:18:0b:1f:b5:40:34:85:7f:f6:98:2c:62:0b:50:
e5:c7:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:10 2025 by rpki-client