Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/6XIUJLxMwG9jlaMLUiUjdNhCd1o.roa
File: 6XIUJLxMwG9jlaMLUiUjdNhCd1o.roa (raw, json)
Hash identifier: EOBqxmH/OfyTLlWlQTxtKiQX94pOzbQV1qOowmuSWjc=
Subject key identifier: E9:72:14:24:BC:4C:C0:6F:63:95:A3:0B:52:25:23:74:D8:42:77:5A
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A0C73BDD2EEFCDF9F5B40BA930A4393D2
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/6XIUJLxMwG9jlaMLUiUjdNhCd1o.roa
Signing time: Wed 22 Oct 2025 15:05:03 +0000
ROA not before: Wed 22 Oct 2025 15:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 43.251.0.0/22 maxlen: 22
45.6.44.0/22 maxlen: 22
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.0.0/16 maxlen: 24
80.174.0.0/17 maxlen: 24
83.143.168.0/21 maxlen: 21
93.95.16.0/21 maxlen: 21
103.85.32.0/22 maxlen: 22
103.228.128.0/22 maxlen: 22
128.0.40.0/24 maxlen: 24
202.58.108.0/22 maxlen: 22
212.86.96.0/24 maxlen: 24
212.86.98.0/24 maxlen: 24
212.86.106.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:73:bd:d2:ee:fc:df:9f:5b:40:ba:93:0a:43:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 22 15:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9721424bc4cc06f6395a30b52252374d842775a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:ed:52:52:fd:8e:fc:a6:a0:ec:a0:fb:7b:
c3:6d:8f:9a:94:63:cd:7e:4f:bb:7f:73:32:1b:5e:
ce:78:3f:24:45:57:1e:72:a3:9b:92:bd:15:ee:6d:
41:16:63:0d:61:0d:7c:7b:50:3b:b8:b7:ec:f2:d3:
b9:e7:fe:5e:d2:a6:77:5b:66:c5:73:07:24:2b:88:
95:25:a4:dd:69:f3:eb:50:09:fb:70:2b:b9:8c:31:
82:1d:b3:23:14:d9:8e:f8:3a:46:4f:20:0f:8d:8a:
9d:29:be:b3:17:76:f6:11:7b:94:bc:94:ce:6f:1e:
95:2e:1c:06:68:6f:29:a2:28:3f:fc:57:f5:95:11:
10:86:e1:3b:14:69:e2:81:ac:97:11:8d:34:c6:d5:
22:aa:3f:7c:ae:b3:01:16:77:4e:ed:f7:83:54:3e:
ba:14:e9:29:fa:73:e7:10:1b:54:d1:c3:ea:ee:8e:
6b:c2:ce:e8:44:45:f7:0f:82:dd:38:47:1c:54:91:
7b:4b:71:92:3f:e8:df:9f:11:1f:5e:35:6d:73:a2:
61:38:2b:13:3f:a3:be:16:ca:7f:b4:3f:eb:57:dc:
37:ce:0a:f1:f0:1c:ba:4f:80:41:b7:0a:2b:52:6f:
bc:17:14:1e:7b:26:60:53:5a:2f:04:75:ef:04:05:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:14:24:BC:4C:C0:6F:63:95:A3:0B:52:25:23:74:D8:42:77:5A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/6XIUJLxMwG9jlaMLUiUjdNhCd1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.251.0.0/22
45.6.44.0/22
45.120.220.0/22
62.106.67.0/24
80.174.0.0/16
83.143.168.0/21
93.95.16.0/21
103.85.32.0/22
103.228.128.0/22
128.0.40.0/24
202.58.108.0/22
212.86.96.0/24
212.86.98.0/24
212.86.106.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2d:71:a5:3c:71:c6:de:e6:c9:f2:a2:23:bd:af:75:83:5d:
87:92:4c:ec:21:93:31:17:f1:7a:98:27:7c:cd:ca:9b:58:4e:
26:13:1b:b9:e4:25:5c:d2:a6:ff:01:22:48:74:b0:7b:3d:43:
8c:69:5d:26:c2:13:7c:36:ba:87:3e:23:ec:d8:9f:6f:41:1c:
d1:64:be:67:82:a9:27:c1:a5:8c:16:cd:a1:3d:29:42:ed:92:
30:ff:5b:20:d1:78:0e:34:22:f3:79:27:64:7a:cb:52:d8:d6:
b4:8c:87:0c:58:24:f5:6d:3d:e2:00:09:d8:0f:a9:fc:02:50:
c1:50:2c:f2:bd:bb:6c:e6:a9:dd:f3:1d:05:20:e2:47:ab:5d:
da:ec:14:8c:58:4a:dc:e0:7c:2d:86:d7:2b:49:c0:fb:a7:23:
ac:80:7e:d3:7d:57:fa:fe:35:ea:63:8c:3c:d3:83:0b:48:ae:
96:96:53:c0:03:45:5d:c8:79:cb:17:fb:62:3d:b9:fc:0f:af:
9e:0f:3a:d9:4e:0e:d1:99:87:6f:cc:56:76:99:07:37:6d:eb:
9d:85:70:f5:ff:21:b5:7c:3c:a3:92:65:6d:c9:79:e2:57:31:
d7:29:01:a7:43:1a:3a:8b:ef:06:49:b6:f3:8c:4a:d1:61:f3:
6c:d9:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:44:34 2025 by rpki-client