Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/G6K_DWhWU68de4ypb82fcRNbq1c.roa
File: G6K_DWhWU68de4ypb82fcRNbq1c.roa (raw, json)
Hash identifier: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=
Subject key identifier: 1B:A2:BF:0D:68:56:53:AF:1D:7B:8C:A9:6F:CD:9F:71:13:5B:AB:57
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01981C4254E621E5C6B2DC51A28FA5D1CF5A
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/G6K_DWhWU68de4ypb82fcRNbq1c.roa
Signing time: Fri 18 Jul 2025 06:39:25 +0000
ROA not before: Fri 18 Jul 2025 06:39:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42560
IP address blocks: 5.43.64.0/18 maxlen: 18
31.185.112.0/20 maxlen: 20
37.205.24.0/21 maxlen: 21
37.208.32.0/21 maxlen: 21
77.77.192.0/18 maxlen: 24
77.77.195.0/24 maxlen: 24
77.77.216.0/22 maxlen: 22
77.78.192.0/18 maxlen: 18
77.78.192.0/19 maxlen: 24
77.78.224.0/19 maxlen: 19
77.78.224.0/22 maxlen: 22
77.221.0.0/19 maxlen: 19
77.238.192.0/19 maxlen: 19
77.239.0.0/19 maxlen: 19
80.80.32.0/20 maxlen: 20
93.180.96.0/19 maxlen: 19
109.237.32.0/20 maxlen: 20
128.65.104.0/21 maxlen: 21
141.170.192.0/20 maxlen: 20
146.255.128.0/19 maxlen: 19
178.209.0.0/19 maxlen: 19
178.236.80.0/20 maxlen: 20
185.6.104.0/22 maxlen: 22
185.13.240.0/22 maxlen: 22
185.15.64.0/22 maxlen: 22
185.18.152.0/22 maxlen: 22
185.24.208.0/22 maxlen: 22
185.48.172.0/22 maxlen: 22
185.58.92.0/22 maxlen: 22
188.127.96.0/19 maxlen: 19
217.197.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:42:54:e6:21:e5:c6:b2:dc:51:a2:8f:a5:d1:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jul 18 06:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba2bf0d685653af1d7b8ca96fcd9f71135bab57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:d9:37:a0:f5:29:f0:c9:73:49:84:47:69:
82:af:e9:fc:89:63:4d:66:58:a9:a0:42:5e:4d:df:
b2:df:36:cd:71:9c:8f:f7:0e:3a:70:bf:2f:2a:a1:
06:3f:86:9a:f9:49:0a:d3:b7:4a:74:08:f5:31:b3:
c0:91:ac:3e:19:96:8e:b9:a9:b5:ac:dc:59:42:c9:
7b:11:f7:56:e5:0a:b4:75:0d:81:db:da:77:04:38:
3f:e6:76:72:83:58:c5:32:4a:95:a5:46:2e:04:f5:
04:a9:10:f5:5d:a2:5e:cc:09:7f:08:29:36:ca:5a:
e9:7f:0a:67:39:66:d1:8a:b9:84:08:38:63:0b:ba:
13:b9:b2:a9:00:38:dd:f1:90:bc:36:f6:f7:82:f1:
01:1d:a9:56:90:a2:c4:99:f5:2d:ae:b9:e4:84:9f:
f2:03:24:ac:a3:8e:e1:b4:9c:fd:58:9d:29:4e:f9:
df:16:00:15:e0:aa:84:5f:31:51:b1:9d:09:db:08:
9a:39:56:41:f8:16:94:de:ef:e8:89:b3:82:13:f5:
0f:d5:60:1c:4e:d3:83:80:dc:56:f3:7b:70:c7:c8:
f1:f0:25:c6:26:60:01:91:b1:a5:29:74:f5:4c:86:
3d:2d:9d:1e:08:ed:22:6f:dc:62:d7:24:a5:d1:29:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:BF:0D:68:56:53:AF:1D:7B:8C:A9:6F:CD:9F:71:13:5B:AB:57
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/G6K_DWhWU68de4ypb82fcRNbq1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.64.0/18
31.185.112.0/20
37.205.24.0/21
37.208.32.0/21
77.77.192.0/18
77.78.192.0/18
77.221.0.0/19
77.238.192.0/19
77.239.0.0/19
80.80.32.0/20
93.180.96.0/19
109.237.32.0/20
128.65.104.0/21
141.170.192.0/20
146.255.128.0/19
178.209.0.0/19
178.236.80.0/20
185.6.104.0/22
185.13.240.0/22
185.15.64.0/22
185.18.152.0/22
185.24.208.0/22
185.48.172.0/22
185.58.92.0/22
188.127.96.0/19
217.197.136.0/21
Signature Algorithm: sha256WithRSAEncryption
33:7a:89:3b:9b:7c:b9:ff:a1:e2:64:47:13:98:41:29:60:a8:
a3:e6:c1:a1:8c:64:32:e5:69:c6:ef:e8:e3:f0:d7:cf:96:2e:
20:70:74:23:11:e7:78:da:55:66:f6:7d:de:2f:f3:7f:25:c8:
ad:bb:7f:9c:17:af:d8:c5:37:39:3e:8f:bd:a2:45:e3:21:73:
0f:e0:cc:38:ec:30:18:45:d1:65:7a:cd:8c:2b:74:cb:c4:de:
84:11:d7:68:53:c4:79:d4:1b:6d:ae:f2:15:b4:ed:8f:dc:e1:
4e:e5:66:18:8f:66:0a:a8:22:b2:d9:0b:56:b9:07:b5:51:76:
42:14:83:b7:3a:ce:3e:77:f8:02:a2:2e:79:3f:46:87:49:24:
a4:2e:cb:23:ca:82:75:20:66:a2:a0:42:50:67:1d:a2:81:36:
03:9b:e1:2a:a6:ce:c5:2c:fd:c3:fc:30:f6:52:a0:ee:31:4b:
41:54:a2:25:b4:2b:3e:7a:20:33:f1:da:94:5d:ea:8d:0d:d1:
f6:08:32:31:3b:ef:da:e6:9b:16:a6:50:9a:cd:cd:f2:8b:84:
88:d0:a0:53:ac:07:fa:9b:d6:db:d4:0f:f3:34:5c:96:cc:35:
43:45:c0:59:1e:1d:aa:ad:34:18:57:24:fd:5b:0f:ed:dc:7c:
5a:e8:a9:8a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZgcQlTmIeXGstxRoo+l0c9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzFmOWFlNGQxODQ3ZDQ5ZDRkOGZkYWUzNDU3YjVhMTcy
NTY3MDcwHhcNMjUwNzE4MDYzOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmEyYmYwZDY4NTY1M2FmMWQ3YjhjYTk2ZmNkOWY3MTEzNWJhYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ7ZN6D1KfDJc0mER2mCr+n8iWNN
ZlipoEJeTd+y3zbNcZyP9w46cL8vKqEGP4aa+UkK07dKdAj1MbPAkaw+GZaOuam1
rNxZQsl7EfdW5Qq0dQ2B29p3BDg/5nZyg1jFMkqVpUYuBPUEqRD1XaJezAl/CCk2
ylrpfwpnOWbRirmECDhjC7oTubKpADjd8ZC8Nvb3gvEBHalWkKLEmfUtrrnkhJ/y
AySso47htJz9WJ0pTvnfFgAV4KqEXzFRsZ0J2wiaOVZB+BaU3u/oibOCE/UP1WAc
TtODgNxW83twx8jx8CXGJmABkbGlKXT1TIY9LZ0eCO0ib9xi1ySl0SnsVwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFBuivw1oVlOvHXuMqW/Nn3ETW6tXMB8GA1UdIwQY
MBaAFPHB+a5NGEfUnU2P2uNFe1oXJWcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUt
MjU4MWIzZGI3OGNiLzEvRzZLX0RXaFdVNjhkZTR5cGI4MmZjUk5icTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUtMjU4MWIzZGI3OGNi
LzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAYF
K0ADBAQfuXADBAMlzRgDBAMl0CADBAZNTcADBAZNTsADBAVN3QADBAVN7sADBAVN
7wADBARQUCADBAVdtGADBARt7SADBAOAQWgDBASNqsADBAWS/4ADBAWy0QADBASy
7FADBAK5BmgDBAK5DfADBAK5D0ADBAK5EpgDBAK5GNADBAK5MKwDBAK5OlwDBAW8
f2ADBAPZxYgwDQYJKoZIhvcNAQELBQADggEBADN6iTubfLn/oeJkRxOYQSlgqKPm
waGMZDLlacbv6OPw18+WLiBwdCMR53jaVWb2fd4v838lyK27f5wXr9jFNzk+j72i
ReMhcw/gzDjsMBhF0WV6zYwrdMvE3oQR12hTxHnUG22u8hW07Y/c4U7lZhiPZgqo
IrLZC1a5B7VRdkIUg7c6zj53+AKiLnk/RodJJKQuyyPKgnUgZqKgQlBnHaKBNgOb
4SqmzsUs/cP8MPZSoO4xS0FUoiW0Kz56IDPx2pRd6o0N0fYIMjE779rmmxamUJrN
zfKLhIjQoFOsB/qb1tvUD/M0XJbMNUNFwFkeHaqtNBhXJP1bD+3cfFroqYo=
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:44:07 2025 by rpki-client