Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/KbwrF2N2HegsPWg9WDng2Z7Go6I.roa
File: KbwrF2N2HegsPWg9WDng2Z7Go6I.roa (raw, json)
Hash identifier: 2WKB7wHybXD5UlfkvFjrakdpkviTOVPRBjvigfrT7og=
Subject key identifier: 29:BC:2B:17:63:76:1D:E8:2C:3D:68:3D:58:39:E0:D9:9E:C6:A3:A2
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01972C1889D2BEA83E043B061662D3732260
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/KbwrF2N2HegsPWg9WDng2Z7Go6I.roa
Signing time: Sun 01 Jun 2025 15:24:55 +0000
ROA not before: Sun 01 Jun 2025 15:24:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.48.0/21 maxlen: 24
46.3.56.0/21 maxlen: 24
46.3.80.0/21 maxlen: 22
46.3.96.0/20 maxlen: 24
46.3.160.0/22 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.216.0/22 maxlen: 24
46.3.222.0/24 maxlen: 24
46.3.224.0/21 maxlen: 22
46.232.20.0/22 maxlen: 24
46.232.64.0/22 maxlen: 24
80.243.128.0/21 maxlen: 24
80.243.128.0/23 maxlen: 24
80.243.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:18:89:d2:be:a8:3e:04:3b:06:16:62:d3:73:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 1 15:24:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29bc2b1763761de82c3d683d5839e0d99ec6a3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:ad:29:e2:ac:4d:07:29:ec:21:2a:38:da:
a5:76:45:ea:75:b5:8e:08:45:84:60:92:0b:15:bc:
36:94:66:d7:d5:82:ec:e8:cd:6c:b1:8d:06:ce:1d:
9b:7d:19:07:4b:c4:34:e3:fc:78:85:34:55:ac:14:
8a:be:40:f4:6d:e1:f0:30:93:3f:70:05:21:99:70:
2d:87:d2:cc:4e:24:b6:e3:fb:65:cb:b7:03:ed:e7:
70:85:c6:b6:4f:14:f8:82:d7:44:70:97:45:96:ec:
85:e2:f7:c2:fa:53:e6:ef:99:60:d4:e5:4d:91:10:
1c:e6:0e:2d:f6:53:d4:f6:e9:a2:cf:fa:bb:16:04:
ef:ae:54:f5:08:28:f3:b8:14:f1:25:bb:dc:3b:d9:
6c:41:22:57:f0:31:8d:2a:da:bb:9b:6b:22:80:50:
00:3b:5c:ea:e6:f5:47:b0:4c:0f:b9:21:31:21:04:
51:f0:36:7f:fa:b3:e6:51:99:d1:99:f1:bc:34:0f:
ff:86:13:e2:3e:56:0f:5b:f6:1c:75:5d:9c:8a:8d:
95:0a:0e:36:69:4b:a4:af:cf:a3:21:35:c8:3d:1f:
de:63:3c:c1:23:ca:83:33:b8:b2:83:fe:ae:1f:c1:
15:02:42:df:41:e8:2d:0e:14:a7:a4:c8:32:02:69:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:2B:17:63:76:1D:E8:2C:3D:68:3D:58:39:E0:D9:9E:C6:A3:A2
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/KbwrF2N2HegsPWg9WDng2Z7Go6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.48.0/20
46.3.80.0/21
46.3.96.0/20
46.3.160.0/21
46.3.208.0-46.3.231.255
46.232.20.0/22
46.232.64.0/22
80.243.128.0/21
Signature Algorithm: sha256WithRSAEncryption
41:65:58:3f:96:ce:76:7d:a1:fe:03:4c:d0:e8:65:8b:6b:e7:
8e:18:34:c3:70:f5:51:db:d8:75:37:e0:ad:59:c2:e6:cd:94:
ec:bc:87:90:43:88:ab:8e:69:50:28:a1:23:99:7d:d1:58:8a:
09:9a:fc:81:45:d2:c9:cb:81:a6:7f:b5:49:45:c9:7e:cd:e1:
0a:61:4c:a2:a8:9e:76:e9:b0:da:ca:28:f1:a4:97:21:e3:99:
c5:54:22:19:f5:fc:b4:18:86:12:49:08:32:de:91:b9:2b:d3:
10:4f:cc:20:c4:61:a2:22:2e:d0:1a:b3:db:7f:cf:94:89:c2:
c4:9c:2a:df:3d:2e:9a:c2:34:89:6a:ce:84:f6:1f:3d:af:4e:
83:83:41:59:56:9d:d3:cd:29:08:c2:a2:2e:d7:73:3b:11:bf:
4a:63:d1:55:52:25:a5:35:3f:24:16:47:07:50:b4:2c:d9:94:
42:09:09:1c:8e:e1:80:30:b6:e1:98:c3:42:fb:87:d5:75:df:
60:d7:c0:ff:07:8e:01:64:e0:47:ca:88:91:8f:d8:1e:06:0d:
db:6b:cb:06:37:fe:cf:25:23:fa:e0:b5:7c:01:03:19:01:43:
17:2f:7f:44:03:9d:62:e8:7c:eb:2c:8c:87:e5:1a:a5:86:c3:
22:c9:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 09:03:47 2025 by rpki-client