Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/JmE2DotJFzee6ZEkJABlOvGfUi0.roa
File: JmE2DotJFzee6ZEkJABlOvGfUi0.roa (raw, json)
Hash identifier: kTxgn5V7rU8GaSWrPY2IpRexVO3i36geJ6EK2nXDe04=
Subject key identifier: 26:61:36:0E:8B:49:17:37:9E:E9:91:24:24:00:65:3A:F1:9F:52:2D
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 019A0AE1D3ECD22E3F263AB9819255337F32
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/JmE2DotJFzee6ZEkJABlOvGfUi0.roa
Signing time: Wed 22 Oct 2025 07:46:03 +0000
ROA not before: Wed 22 Oct 2025 07:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 145.46.160.0/24 maxlen: 24
145.46.161.0/24 maxlen: 24
145.46.162.0/24 maxlen: 24
145.46.163.0/24 maxlen: 24
145.46.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:e1:d3:ec:d2:2e:3f:26:3a:b9:81:92:55:33:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Oct 22 07:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2661360e8b4917379ee991242400653af19f522d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:71:64:ec:1f:a5:90:50:b4:7f:48:10:e3:
0e:7a:2a:6a:dc:cb:15:04:da:c9:b5:c4:5e:a7:0d:
18:f1:4b:a8:8f:90:39:df:33:a0:6b:7f:ec:0f:03:
64:2f:ca:b5:4c:86:9b:2d:52:19:e2:73:0b:7b:bf:
5d:55:58:63:9f:ea:e0:2b:bb:ec:1d:c2:b7:81:03:
42:d8:1c:8b:08:57:f4:1b:50:a5:8e:c0:d1:ba:cb:
9c:0b:4e:f0:65:42:f4:19:e1:df:f8:2d:bb:fc:2e:
86:18:bf:1f:17:00:3d:a3:40:dd:c8:7d:b2:6f:26:
f1:06:58:30:ce:12:3d:92:b7:18:4d:c0:d5:0e:82:
df:28:1f:7e:37:b0:c9:ff:33:ee:3c:80:07:7b:9f:
12:22:ec:b2:ac:7d:bd:cf:f1:d3:f9:d0:79:03:a9:
76:c2:9e:27:4c:ec:68:aa:6a:87:30:6e:a5:79:04:
4f:4d:74:78:9b:e7:f1:00:87:24:22:41:49:d8:9c:
21:ca:46:4d:2d:a0:b3:8b:1b:67:95:a1:c3:f8:d8:
82:a6:3a:ee:59:7c:6b:c0:82:e4:3d:1f:c5:c0:9d:
0d:42:2f:ae:7f:7d:2b:10:e9:ac:ca:a9:63:38:d6:
23:1a:d9:7e:90:49:aa:c7:b2:85:4c:eb:3b:00:be:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:61:36:0E:8B:49:17:37:9E:E9:91:24:24:00:65:3A:F1:9F:52:2D
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/JmE2DotJFzee6ZEkJABlOvGfUi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.160.0-145.46.164.255
Signature Algorithm: sha256WithRSAEncryption
84:c3:fa:a8:46:5d:46:b7:a2:07:3b:41:71:f3:aa:eb:6f:1c:
55:3f:46:ee:a0:4c:3e:29:0d:86:a0:0a:49:6a:e8:d0:75:0a:
2a:2b:59:4a:7c:89:59:a0:90:82:9f:56:a3:a7:81:c0:dd:a8:
14:c1:b9:0c:e4:c1:95:cc:11:90:4f:d8:ff:01:a9:3b:78:cb:
f5:87:69:3e:bc:7c:a5:eb:ce:e9:33:af:46:f2:77:ad:65:07:
06:f6:fb:d3:44:f7:c6:dd:1f:bc:85:cb:7f:0b:ab:fc:1e:f7:
17:0e:a0:38:48:dd:21:8a:da:dc:5a:eb:39:5c:e2:52:ee:17:
3e:59:05:f3:de:e0:92:0a:73:ea:12:38:e9:0d:9f:7f:89:2f:
c3:33:c8:4e:67:db:d1:ba:a7:aa:c9:ad:32:3a:f7:62:1f:2e:
42:27:6b:5c:fc:40:88:18:de:ff:83:56:6d:07:1e:43:12:d3:
9b:93:29:7b:bc:e3:6c:44:60:65:98:64:0a:b3:09:36:81:2e:
e5:ea:96:f8:43:7a:2d:ea:a1:dc:b7:5d:d6:3e:bf:cc:92:8c:
af:96:0b:7e:50:32:b2:2c:34:46:2e:86:cb:74:3e:f2:a1:f9:
ea:92:d4:5a:e1:5b:4e:a0:0e:01:76:6c:71:a3:8d:bc:41:8a:
3e:74:cf:47
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZoK4dPs0i4/Jjq5gZJVM38yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh
ZWZjZDAwHhcNMjUxMDIyMDc0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjYxMzYwZThiNDkxNzM3OWVlOTkxMjQyNDAwNjUzYWYxOWY1MjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnhxZOwfpZBQtH9IEOMOeipq3MsV
BNrJtcRepw0Y8Uuoj5A53zOga3/sDwNkL8q1TIabLVIZ4nMLe79dVVhjn+rgK7vs
HcK3gQNC2ByLCFf0G1CljsDRusucC07wZUL0GeHf+C27/C6GGL8fFwA9o0DdyH2y
bybxBlgwzhI9krcYTcDVDoLfKB9+N7DJ/zPuPIAHe58SIuyyrH29z/HT+dB5A6l2
wp4nTOxoqmqHMG6leQRPTXR4m+fxAIckIkFJ2JwhykZNLaCzixtnlaHD+NiCpjru
WXxrwILkPR/FwJ0NQi+uf30rEOmsyqljONYjGtl+kEmqx7KFTOs7AL4FEQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCZhNg6LSRc3numRJCQAZTrxn1ItMB8GA1UdIwQY
MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt
NzcwZjhlYWIyYWU3LzEvSm1FMkRvdEpGemVlNlpFa0pBQmxPdkdmVWkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3
LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWRLqAD
BACRLqQwDQYJKoZIhvcNAQELBQADggEBAITD+qhGXUa3ogc7QXHzqutvHFU/Ru6g
TD4pDYagCklq6NB1CiorWUp8iVmgkIKfVqOngcDdqBTBuQzkwZXMEZBP2P8BqTt4
y/WHaT68fKXrzukzr0byd61lBwb2+9NE98bdH7yFy38Lq/we9xcOoDhI3SGK2txa
6zlc4lLuFz5ZBfPe4JIKc+oSOOkNn3+JL8MzyE5n29G6p6rJrTI692IfLkIna1z8
QIgY3v+DVm0HHkMS05uTKXu842xEYGWYZAqzCTaBLuXqlvhDei3qody3XdY+v8yS
jK+WC35QMrIsNEYuhst0PvKh+eqS1FrhW06gDgF2bHGjjbxBij50z0c=
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:33:53 2025 by rpki-client