Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6PNVf4kLBpJ9fiR4HNXQ-wwe7ZI.roa
File: 6PNVf4kLBpJ9fiR4HNXQ-wwe7ZI.roa (raw, json)
Hash identifier: fZA9LCf0/f/TxhBG1Q+JNNYw7u6hcNaPYtTmgH6Gf6U=
Subject key identifier: E8:F3:55:7F:89:0B:06:92:7D:7E:24:78:1C:D5:D0:FB:0C:1E:ED:92
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019A2992E1BDAEC418E820842AE3B88BFEB0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6PNVf4kLBpJ9fiR4HNXQ-wwe7ZI.roa
Signing time: Tue 28 Oct 2025 06:48:03 +0000
ROA not before: Tue 28 Oct 2025 06:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:92:e1:bd:ae:c4:18:e8:20:84:2a:e3:b8:8b:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 28 06:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8f3557f890b06927d7e24781cd5d0fb0c1eed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:11:25:70:a4:61:19:b7:b4:44:e6:17:a4:
e3:1a:37:db:38:f1:a1:cf:f1:7f:2f:82:90:ad:7a:
50:d8:0a:b3:06:ba:72:69:11:83:f8:74:cb:92:a1:
7b:a7:00:70:44:4d:16:f5:c9:ba:4a:73:e1:7b:35:
b3:10:c8:e5:dc:c8:66:bd:57:26:c6:0a:a9:c9:dd:
03:e9:c7:53:83:84:83:32:62:63:fb:c7:2e:a0:b0:
84:49:3e:58:17:da:70:2c:0a:6f:02:ba:29:ef:8e:
a7:3f:9a:e5:17:b7:d6:8a:3e:45:2a:02:88:28:32:
67:06:b4:64:38:84:f2:a5:4c:10:a0:5e:cc:14:df:
18:6c:ba:4c:4f:02:3a:b1:02:36:2a:47:f9:da:9f:
0c:7e:38:3e:b1:7e:f4:e1:58:19:61:cf:e6:e5:03:
8a:06:32:54:ee:b2:d9:61:2e:00:02:e6:52:66:83:
ff:43:be:3b:24:27:b2:9a:08:ec:42:e3:fd:a7:cd:
97:61:61:5a:c0:d7:e3:ea:47:d0:8f:f4:f5:13:92:
55:7c:f6:fd:42:36:e4:94:89:11:ec:96:72:a4:38:
dc:20:d9:71:1d:d6:4c:9c:49:ab:0e:7a:0a:7e:d4:
d8:37:f8:8d:c5:6e:30:f4:e2:2b:da:28:6a:1b:ab:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:55:7F:89:0B:06:92:7D:7E:24:78:1C:D5:D0:FB:0C:1E:ED:92
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6PNVf4kLBpJ9fiR4HNXQ-wwe7ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
79.110.227.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.40.70.0/24
94.177.13.0/24
94.177.145.0/24
103.56.84.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
167.17.191.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:4d:67:f0:e8:a7:0e:b6:9a:a2:25:8f:31:a5:33:f8:5f:
25:61:9c:22:3e:a4:10:96:94:ac:e6:33:c3:ce:c6:32:7c:61:
a5:20:d7:6e:22:26:86:c8:55:13:28:35:28:20:6b:d2:31:9f:
cf:25:2c:71:77:b4:a6:73:25:89:01:81:09:22:ab:67:91:b8:
70:93:1d:4f:51:4f:4d:3b:cd:af:23:d7:ab:6b:65:c6:85:1b:
0f:6a:05:ac:b3:f3:0e:ab:2e:56:a1:38:c8:d9:b9:3b:11:19:
75:50:29:33:68:29:fe:9a:ee:e6:11:0e:73:ad:96:d6:dc:8c:
56:5d:d7:07:ce:36:01:7e:d7:0b:78:b9:0e:73:2f:ac:cd:1b:
55:1c:c5:f7:ca:48:c9:e6:17:c1:19:93:60:70:21:4f:01:e9:
aa:b4:34:6e:ce:67:cc:95:ae:1b:96:d2:fe:8d:5b:6b:79:61:
bc:86:f5:7e:4e:a4:46:06:db:5e:cb:86:98:e8:dc:41:59:30:
87:3e:8c:30:9c:04:9e:83:7d:73:9e:c2:b8:5d:75:b2:07:1d:
2e:d9:df:34:3a:b6:27:4c:59:9e:f5:41:d9:17:2d:f9:5f:c4:
59:69:19:34:8d:fb:29:d2:0f:c4:ad:9d:00:6c:34:bd:64:94:
90:93:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:55 2025 by rpki-client