
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/a6rjHt4fK-E2iGBSfcg8Kx7GnxM.roa
File: a6rjHt4fK-E2iGBSfcg8Kx7GnxM.roa (raw, json)
Hash identifier: ti4+wug7xVisXzF33JBcZepJMCA38Lm5pRKa65iVPyU=
Subject key identifier: 6B:AA:E3:1E:DE:1F:2B:E1:36:88:60:52:7D:C8:3C:2B:1E:C6:9F:13
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01985F1D3FC0A0A5B9C0193564FFC877D71A
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/a6rjHt4fK-E2iGBSfcg8Kx7GnxM.roa
Signing time: Thu 31 Jul 2025 06:13:28 +0000
ROA not before: Thu 31 Jul 2025 06:13:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 36.255.188.0/24 maxlen: 24
36.255.189.0/24 maxlen: 24
36.255.190.0/24 maxlen: 24
36.255.191.0/24 maxlen: 24
45.94.232.0/24 maxlen: 24
45.94.233.0/24 maxlen: 24
45.94.234.0/24 maxlen: 24
45.94.235.0/24 maxlen: 24
45.143.68.0/24 maxlen: 24
45.143.69.0/24 maxlen: 24
45.143.70.0/24 maxlen: 24
45.143.71.0/24 maxlen: 24
45.157.124.0/22 maxlen: 24
45.157.124.0/24 maxlen: 24
45.157.125.0/24 maxlen: 24
45.157.126.0/24 maxlen: 24
45.157.127.0/24 maxlen: 24
83.150.240.0/24 maxlen: 24
83.150.241.0/24 maxlen: 24
83.150.242.0/24 maxlen: 24
83.150.243.0/24 maxlen: 24
87.239.254.0/24 maxlen: 24
95.181.216.0/24 maxlen: 24
95.181.217.0/24 maxlen: 24
95.181.218.0/24 maxlen: 24
95.181.219.0/24 maxlen: 24
103.225.200.0/24 maxlen: 24
103.225.201.0/24 maxlen: 24
103.225.202.0/24 maxlen: 24
103.225.203.0/24 maxlen: 24
171.22.252.0/24 maxlen: 24
185.46.116.0/24 maxlen: 24
185.46.117.0/24 maxlen: 24
185.46.240.0/24 maxlen: 24
185.46.241.0/24 maxlen: 24
185.46.242.0/24 maxlen: 24
185.46.243.0/24 maxlen: 24
185.75.208.0/24 maxlen: 24
185.75.209.0/24 maxlen: 24
185.75.210.0/24 maxlen: 24
185.75.211.0/24 maxlen: 24
185.201.190.0/24 maxlen: 24
185.253.68.0/24 maxlen: 24
185.253.69.0/24 maxlen: 24
185.253.70.0/24 maxlen: 24
185.253.71.0/24 maxlen: 24
193.108.242.0/24 maxlen: 24
193.108.243.0/24 maxlen: 24
193.201.248.0/24 maxlen: 24
193.201.249.0/24 maxlen: 24
193.201.250.0/24 maxlen: 24
193.201.251.0/24 maxlen: 24
194.36.96.0/24 maxlen: 24
194.36.97.0/24 maxlen: 24
194.36.98.0/24 maxlen: 24
194.36.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:1d:3f:c0:a0:a5:b9:c0:19:35:64:ff:c8:77:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 31 06:13:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6baae31ede1f2be1368860527dc83c2b1ec69f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:29:b3:84:73:05:62:7f:b4:84:0d:d0:fa:b4:
5a:59:5f:07:11:5e:9a:71:13:62:82:c5:f2:31:b2:
76:45:99:8a:05:51:ce:a2:4d:16:d8:f2:80:13:73:
7a:2a:25:54:75:70:a3:97:33:98:c0:2e:c9:9c:52:
cb:65:90:9d:b9:e6:e9:32:44:eb:27:93:dd:78:71:
a7:55:a9:ad:21:71:19:8d:a3:3e:c1:75:3c:62:a3:
96:03:a0:3c:c0:c2:a0:c4:09:a4:0b:85:ec:44:ba:
16:91:b1:47:f9:a2:ff:40:78:ef:03:00:34:ab:43:
64:76:ba:42:19:aa:6a:ab:0b:c8:1c:e1:89:48:79:
4a:da:f8:2a:7a:f0:c8:5b:62:fb:4c:d6:59:de:c2:
22:31:ff:91:88:0d:8f:98:f4:d5:49:8d:00:3f:c8:
a2:72:6c:90:07:6d:dc:c0:41:18:42:ad:d7:b9:81:
dc:8f:4a:4e:ce:0c:e7:10:b3:07:cb:db:10:f4:62:
49:ae:8c:5f:25:1c:ad:2a:20:b9:9b:54:11:a8:45:
e5:40:5d:10:dd:2e:d1:1b:6a:1f:f5:b2:bd:19:9a:
6b:93:d4:41:31:fe:c5:92:b3:ec:c3:e8:c1:5a:5e:
8f:87:7a:f9:cb:1e:4a:c1:45:3f:39:57:a9:68:c8:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:E3:1E:DE:1F:2B:E1:36:88:60:52:7D:C8:3C:2B:1E:C6:9F:13
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/a6rjHt4fK-E2iGBSfcg8Kx7GnxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.188.0/22
45.94.232.0/22
45.143.68.0/22
45.157.124.0/22
83.150.240.0/22
87.239.254.0/24
95.181.216.0/22
103.225.200.0/22
171.22.252.0/24
185.46.116.0/23
185.46.240.0/22
185.75.208.0/22
185.201.190.0/24
185.253.68.0/22
193.108.242.0/23
193.201.248.0/22
194.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
55:4c:ff:f4:4b:d3:0b:f4:96:56:8b:b7:95:8a:49:81:5e:af:
e0:95:d9:d5:aa:05:23:98:d0:91:d0:91:e9:89:59:aa:6d:fd:
23:9e:53:c5:a8:bd:9b:8b:7b:12:bb:d7:f2:85:15:82:69:16:
b1:66:3c:be:29:5b:f4:6a:08:f6:4a:15:6b:9f:08:bc:d8:d2:
c4:e0:69:25:19:19:0d:c4:c3:31:ec:2e:53:1d:c1:2a:16:b9:
54:d0:41:e3:29:5f:26:7d:94:91:dd:71:10:ca:2f:2f:cf:fa:
c3:04:65:46:cc:94:bc:97:4b:1c:d4:5a:7f:0f:ed:1d:ce:39:
88:26:9d:83:bb:9d:cc:c1:14:87:cc:42:39:7e:ea:d0:b7:ef:
a4:45:4c:48:29:12:cd:75:4d:6b:42:5c:3c:0c:53:bd:60:e8:
ce:6a:13:c3:8f:93:f3:2e:81:af:2e:2a:9d:c5:c4:0d:3c:55:
33:56:8f:b3:8a:2c:67:59:cd:60:e2:16:d5:14:5c:14:dc:d4:
a6:9c:45:59:d1:58:ad:09:3a:f4:18:3e:32:ad:71:ea:00:d3:
06:77:3b:b9:a6:a6:ea:f8:5c:0e:39:bc:50:e6:d4:db:26:f1:
b5:83:ee:f7:09:c8:0d:44:e0:7f:61:81:ef:8e:e1:bf:1f:6c:
fd:4a:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:08 2025 by rpki-client