Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/OrO6Uvo5pJ5jafCdfFmNkgcCGVg.roa
File: OrO6Uvo5pJ5jafCdfFmNkgcCGVg.roa (raw, json)
Hash identifier: gedubp+iXytL7YlGhqwzN+3KKq3ngPpqujyvSbXnUV8=
Subject key identifier: 3A:B3:BA:52:FA:39:A4:9E:63:69:F0:9D:7C:59:8D:92:07:02:19:58
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0197CA11EFBF931D3F64B23F46EC8079EA78
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/OrO6Uvo5pJ5jafCdfFmNkgcCGVg.roa
Signing time: Wed 02 Jul 2025 07:37:42 +0000
ROA not before: Wed 02 Jul 2025 07:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 46.183.210.0/23 maxlen: 24
46.183.212.0/22 maxlen: 24
82.97.196.0/23 maxlen: 24
82.97.199.0/24 maxlen: 24
85.204.241.0/24 maxlen: 24
89.38.106.0/23 maxlen: 24
89.39.214.0/24 maxlen: 24
91.238.148.0/23 maxlen: 24
103.218.252.0/24 maxlen: 24
136.242.96.0/19 maxlen: 24
176.223.168.0/22 maxlen: 24
185.77.250.0/23 maxlen: 24
188.211.250.0/24 maxlen: 24
188.211.251.0/24 maxlen: 24
188.212.131.0/24 maxlen: 24
188.214.89.0/24 maxlen: 24
188.215.233.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
188.241.127.0/24 maxlen: 24
188.241.128.0/22 maxlen: 24
188.241.132.0/23 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.24.234.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.135.26.0/24 maxlen: 24
194.135.27.0/24 maxlen: 24
194.135.132.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
203.168.136.0/21 maxlen: 24
203.168.144.0/20 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
222.167.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:11:ef:bf:93:1d:3f:64:b2:3f:46:ec:80:79:ea:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jul 2 07:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab3ba52fa39a49e6369f09d7c598d9207021958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:09:b7:ed:c0:e8:03:c4:00:b1:18:b2:81:
25:ff:43:2d:bf:64:76:30:22:50:16:bd:2c:1a:d9:
d2:a0:ad:ad:4c:19:2e:9a:e0:1e:4b:b3:49:b4:73:
b5:27:e0:75:77:bf:eb:e6:24:14:6a:28:46:19:03:
cb:af:34:f6:c0:81:28:bd:78:db:8f:fe:7d:e0:7f:
c0:ae:8f:96:cd:7d:54:dd:1e:35:14:f5:c3:54:dd:
2d:16:21:2c:df:73:8c:90:ac:55:ae:66:d5:99:6f:
cd:9d:71:45:49:d7:3f:45:c5:d7:93:06:76:5b:c0:
ac:9c:4c:45:1a:f1:c0:aa:f9:2e:7a:03:32:3b:29:
13:b7:05:a0:2c:6e:5b:1a:34:8e:42:69:cf:00:c7:
22:82:f2:1d:13:b5:01:0f:32:86:59:8e:2a:7c:0a:
3f:a2:97:46:a9:c1:18:0d:ee:68:3d:9b:14:ff:41:
9d:ba:bc:b8:c1:3a:0d:ed:e4:1a:9c:15:aa:07:6f:
27:63:d3:0c:f1:8e:b9:3a:72:ca:63:03:2f:9b:a5:
b6:19:66:f8:3b:2d:a0:6e:84:fb:9e:a9:a8:84:8e:
72:22:cb:8a:7b:aa:88:a1:78:4e:76:a0:4b:f7:ed:
2c:e7:56:a6:63:79:8d:db:0c:cc:d0:41:00:da:32:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:BA:52:FA:39:A4:9E:63:69:F0:9D:7C:59:8D:92:07:02:19:58
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/OrO6Uvo5pJ5jafCdfFmNkgcCGVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.210.0-46.183.215.255
82.97.196.0/23
82.97.199.0/24
85.204.241.0/24
89.38.106.0/23
89.39.214.0/24
91.238.148.0/23
103.218.252.0/24
136.242.96.0/19
176.223.168.0/22
185.77.250.0/23
188.211.250.0/23
188.212.131.0/24
188.214.89.0/24
188.215.233.0/24
188.241.59.0/24
188.241.127.0-188.241.133.255
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.26.0/23
194.135.132.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
203.168.136.0-203.168.159.255
213.159.10.0-213.159.13.255
222.167.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:72:ca:ca:3f:a9:06:f7:80:7a:86:d4:f4:c5:59:cd:a2:1d:
24:8c:4d:0d:c8:73:c5:65:20:dc:28:43:8e:ac:96:4f:92:83:
90:c0:c5:5a:bc:fe:7b:41:2b:59:1d:30:a3:c7:b2:e8:db:ae:
0a:43:99:73:4e:3c:cf:15:af:b5:1f:d5:a7:06:ba:65:1b:b4:
59:24:cc:a0:59:16:28:6b:8f:e2:4a:ae:1d:9c:b0:38:53:f1:
97:46:a8:d4:da:77:84:fc:99:f2:e9:71:23:10:1b:e5:40:87:
f3:04:fb:23:0b:7a:8f:f5:12:09:2d:4a:ab:12:42:c0:23:22:
3b:10:5f:87:a7:0a:61:5f:f4:ec:78:48:8a:49:76:32:ef:9e:
4d:74:4d:65:5f:02:a8:1e:8c:ed:e5:f8:52:e3:16:d1:2f:2b:
cd:7a:ce:3c:26:37:ef:9e:40:7f:e6:e7:78:7c:a7:83:b3:47:
76:4c:35:1d:70:2b:f0:7b:77:fe:5d:a1:ce:6e:63:fd:e0:20:
f2:d0:96:99:46:ca:cc:6f:6d:ce:e0:ce:38:63:c6:09:0e:0d:
1e:71:ce:57:e8:ed:38:b8:88:d1:13:30:e7:ee:4f:13:93:bd:
4e:a2:86:1a:a7:d4:16:d6:bf:20:10:50:0d:d2:f7:02:13:7e:
8d:32:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:52:04 2025 by rpki-client