Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/2tgBVmzXGxk2dORJHycmoqheNvg.roa
File: 2tgBVmzXGxk2dORJHycmoqheNvg.roa (raw, json)
Hash identifier: kLmIpYFnCrJEJseq7gvSUWiTbkY+zk+XKRVcxk6gNqA=
Subject key identifier: DA:D8:01:56:6C:D7:1B:19:36:74:E4:49:1F:27:26:A2:A8:5E:36:F8
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01985F6EBA967E922B5F01AFC40059FC6C54
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/2tgBVmzXGxk2dORJHycmoqheNvg.roa
Signing time: Thu 31 Jul 2025 07:42:28 +0000
ROA not before: Thu 31 Jul 2025 07:42:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39593
IP address blocks: 46.191.180.0/22 maxlen: 22
46.191.180.0/23 maxlen: 23
46.191.180.0/24 maxlen: 24
46.191.181.0/24 maxlen: 24
46.191.182.0/23 maxlen: 23
46.191.182.0/24 maxlen: 24
46.191.183.0/24 maxlen: 24
95.105.84.0/22 maxlen: 22
95.105.84.0/23 maxlen: 23
95.105.84.0/24 maxlen: 24
95.105.85.0/24 maxlen: 24
95.105.86.0/23 maxlen: 23
95.105.86.0/24 maxlen: 24
95.105.87.0/24 maxlen: 24
136.169.208.0/22 maxlen: 22
136.169.208.0/23 maxlen: 23
136.169.208.0/24 maxlen: 24
136.169.209.0/24 maxlen: 24
136.169.210.0/23 maxlen: 23
136.169.210.0/24 maxlen: 24
136.169.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:6e:ba:96:7e:92:2b:5f:01:af:c4:00:59:fc:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jul 31 07:42:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad801566cd71b193674e4491f2726a2a85e36f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:26:de:d2:83:d8:94:b9:f7:d5:92:22:74:
42:5b:84:50:7c:60:80:ec:00:d9:3b:9d:f2:3f:11:
0a:9c:ca:b8:e3:4d:4d:56:9b:e8:2f:90:45:55:43:
9e:d3:e0:be:b2:02:5e:e1:29:9d:98:1f:b0:4b:39:
8d:94:56:4e:f7:8b:60:7c:26:e2:75:af:2a:6b:14:
29:71:cf:38:e1:50:2c:0c:c4:ed:92:6b:35:fc:4f:
2e:f3:ca:ad:28:c8:71:76:97:0f:54:79:6f:39:e8:
3a:8a:5c:92:2a:f6:a1:10:77:5f:d1:2e:68:fd:fd:
2d:01:be:12:dc:99:91:5d:7c:4e:d5:23:04:07:c4:
64:aa:3c:27:04:17:fa:49:9f:67:88:44:35:5b:1f:
27:20:df:c7:de:f0:2a:d0:2e:6c:09:44:7c:39:29:
09:a5:af:5f:49:66:48:a5:59:60:2d:fa:dd:b0:04:
fb:dc:49:59:29:d5:d5:19:31:28:2c:e6:6d:b0:b0:
2c:64:49:3a:8c:be:1e:ea:c3:2e:c4:85:df:fb:2f:
dc:84:c6:44:bc:89:43:d3:37:c3:df:73:da:bf:22:
17:44:72:f1:be:44:f5:74:fa:9d:08:65:42:82:7a:
66:25:29:48:fd:41:42:fa:fe:37:ed:49:53:6d:5e:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:01:56:6C:D7:1B:19:36:74:E4:49:1F:27:26:A2:A8:5E:36:F8
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/2tgBVmzXGxk2dORJHycmoqheNvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.180.0/22
95.105.84.0/22
136.169.208.0/22
Signature Algorithm: sha256WithRSAEncryption
84:42:de:e5:ca:6a:49:96:d0:c6:09:23:4e:0a:4f:2b:c2:ae:
24:43:67:7e:06:f8:26:2c:7f:0d:85:e7:a4:ba:ca:36:27:4c:
90:fb:c2:7a:9d:16:06:ba:79:95:08:78:d9:b2:7c:77:bc:f3:
bf:7d:2f:58:b0:53:25:ae:5f:71:ee:80:9f:f8:a2:73:3a:65:
d9:db:2c:6b:d3:6d:fd:7e:80:13:49:99:94:0a:c3:5d:62:25:
ac:2b:05:9e:7c:72:f8:a6:0e:d9:49:7a:1d:d7:02:1d:d0:33:
29:f9:e0:42:bb:23:75:1a:ec:1d:c2:3a:cd:ac:a7:54:a0:13:
71:c5:97:39:9c:16:2d:b7:b3:79:49:fb:05:df:e9:e4:97:af:
43:6c:4f:e1:83:3a:f1:cb:79:c7:45:81:ed:17:2b:ce:d4:46:
17:23:76:55:2a:50:37:31:41:14:a0:89:75:ab:20:78:ed:5d:
db:a6:8e:68:0b:c7:7c:11:19:31:88:1d:f6:65:19:ac:c5:c5:
2a:78:6c:e7:58:07:90:ba:ac:2f:88:6e:02:c2:d2:03:79:c9:
60:c2:3e:ad:18:74:d8:2e:2f:51:a3:83:fa:54:48:70:ea:ea:
c3:3b:11:5a:10:3a:5a:99:18:2b:0a:4b:3d:6e:68:9a:6b:e7:
9c:17:a8:a8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZhfbrqWfpIrXwGvxABZ/GxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjUwNzMxMDc0MjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWQ4MDE1NjZjZDcxYjE5MzY3NGU0NDkxZjI3MjZhMmE4NWUzNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zcm3tKD2JS599WSInRCW4RQfGCA
7ADZO53yPxEKnMq4401NVpvoL5BFVUOe0+C+sgJe4SmdmB+wSzmNlFZO94tgfCbi
da8qaxQpcc844VAsDMTtkms1/E8u88qtKMhxdpcPVHlvOeg6ilySKvahEHdf0S5o
/f0tAb4S3JmRXXxO1SMEB8RkqjwnBBf6SZ9niEQ1Wx8nIN/H3vAq0C5sCUR8OSkJ
pa9fSWZIpVlgLfrdsAT73ElZKdXVGTEoLOZtsLAsZEk6jL4e6sMuxIXf+y/chMZE
vIlD0zfD33PavyIXRHLxvkT1dPqdCGVCgnpmJSlI/UFC+v437UlTbV7LUwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNrYAVZs1xsZNnTkSR8nJqKoXjb4MB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvMnRnQlZtelhHeGsyZE9SSkh5Y21vcWhlTnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLr+0AwQC
X2lUAwQCiKnQMA0GCSqGSIb3DQEBCwUAA4IBAQCEQt7lympJltDGCSNOCk8rwq4k
Q2d+BvgmLH8Nheekuso2J0yQ+8J6nRYGunmVCHjZsnx3vPO/fS9YsFMlrl9x7oCf
+KJzOmXZ2yxr0239foATSZmUCsNdYiWsKwWefHL4pg7ZSXod1wId0DMp+eBCuyN1
GuwdwjrNrKdUoBNxxZc5nBYtt7N5SfsF3+nkl69DbE/hgzrxy3nHRYHtFyvO1EYX
I3ZVKlA3MUEUoIl1qyB47V3bpo5oC8d8ERkxiB32ZRmsxcUqeGznWAeQuqwviG4C
wtIDeclgwj6tGHTYLi9Ro4P6VEhw6urDOxFaEDpamRgrCks9bmiaa+ecF6io
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:27:25 2025 by rpki-client