Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LMxexnO2mrF3rk6vyspIVUMIPjc.roa
File: LMxexnO2mrF3rk6vyspIVUMIPjc.roa (raw, json)
Hash identifier: u5sxPmI3ggwlj69HpQr3CTCgHYbvEEjs9C8IZxuyzWM=
Subject key identifier: 2C:CC:5E:C6:73:B6:9A:B1:77:AE:4E:AF:CA:CA:48:55:43:08:3E:37
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01972C18891E0E3C042BB15C46AB59326DBF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LMxexnO2mrF3rk6vyspIVUMIPjc.roa
Signing time: Sun 01 Jun 2025 15:24:54 +0000
ROA not before: Sun 01 Jun 2025 15:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.8.0/22 maxlen: 22
46.3.12.0/22 maxlen: 24
46.3.28.0/23 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.118.0/24 maxlen: 24
46.3.119.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/24 maxlen: 24
46.3.169.0/24 maxlen: 24
46.3.170.0/24 maxlen: 24
46.3.171.0/24 maxlen: 24
46.3.172.0/24 maxlen: 24
46.3.174.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.220.0/23 maxlen: 24
46.3.223.0/24 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.230.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/22 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.4.0/23 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.236.0/22 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:18:89:1e:0e:3c:04:2b:b1:5c:46:ab:59:32:6d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 1 15:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ccc5ec673b69ab177ae4eafcaca485543083e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:38:53:a8:51:44:4d:26:18:73:3b:1d:2d:
80:b3:cb:7f:c8:32:81:31:62:44:e3:68:7b:5e:07:
aa:15:48:99:62:53:bd:a4:ab:6a:af:56:da:a4:cf:
ee:52:fd:4d:2d:f4:71:ee:d5:e6:32:d9:76:ae:ce:
f1:11:f2:5d:ef:b2:b9:8d:44:26:99:66:99:13:0e:
7c:47:2f:c4:40:17:88:fe:18:83:af:6e:30:03:f5:
e8:46:2c:83:c8:92:fe:99:29:fe:5f:00:11:74:29:
f7:39:cd:53:41:50:a9:dc:14:37:f8:e4:dc:6d:c0:
0c:71:a0:18:54:9c:5e:f2:d9:79:ae:ea:8f:9b:06:
ca:b2:a6:54:07:e3:93:f6:80:cb:12:19:82:63:f1:
37:d8:d2:ef:db:91:ed:55:45:09:96:44:6d:43:8f:
d7:8b:e9:ef:59:53:4f:dd:e2:1f:7d:61:22:39:5f:
6e:c5:dc:67:7b:c1:b8:20:5a:90:48:92:54:a8:c8:
15:be:ba:9e:73:12:a1:ba:81:53:11:c2:4c:f8:cb:
0b:ab:05:47:f5:65:18:41:23:ab:a6:0a:fd:2f:8e:
67:21:2b:1e:f4:9c:e8:90:7f:d3:f2:55:50:10:41:
c7:a9:3b:35:47:cb:7c:fd:a8:7d:27:e0:51:91:b8:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:5E:C6:73:B6:9A:B1:77:AE:4E:AF:CA:CA:48:55:43:08:3E:37
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LMxexnO2mrF3rk6vyspIVUMIPjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/21
46.3.28.0/23
46.3.48.0/20
46.3.77.0/24
46.3.84.0/24
46.3.89.0-46.3.91.255
46.3.118.0-46.3.131.255
46.3.134.0/23
46.3.156.0/23
46.3.160.0-46.3.172.255
46.3.174.0/24
46.3.184.0-46.3.190.255
46.3.205.0-46.3.215.255
46.3.220.0/23
46.3.223.0/24
46.3.228.0/22
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.0.0-46.232.5.255
46.232.16.0/22
46.232.64.0-46.232.66.255
46.232.68.0/24
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.195.0-149.126.196.255
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0/23
149.126.208.0/24
149.126.210.0/24
149.126.214.0/24
149.126.224.0-149.126.226.255
149.126.228.0/24
149.126.231.0/24
149.126.236.0/22
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
02:94:a8:1b:9e:eb:dc:67:9b:e7:86:43:89:14:95:ed:60:2a:
ce:1e:29:1d:69:95:08:fb:7f:df:2b:3c:80:23:a2:45:a4:02:
8b:76:bb:ae:58:fd:55:aa:30:50:14:17:30:13:87:1b:49:ae:
a8:a3:ca:19:31:cc:c5:59:42:c3:bd:56:82:ab:6a:aa:d7:09:
22:de:17:42:00:5f:77:62:02:06:7e:64:32:5e:15:ea:37:9b:
97:95:f7:1a:e3:c1:57:c8:7d:cf:d2:bd:18:26:19:ae:96:53:
5a:17:2e:40:88:cb:b0:31:bc:36:fe:7c:9b:33:04:a4:15:a7:
14:e9:00:b3:a7:0f:f5:db:bc:db:77:8c:63:fc:c2:ec:3d:f5:
f1:82:81:c2:d7:d4:1d:6e:dc:b5:8f:2b:32:7c:bb:f1:fd:88:
b9:72:1e:7c:f6:63:6d:8e:2c:af:4f:07:fd:1b:70:cc:db:b5:
18:a2:cf:19:de:a8:c5:53:23:b4:f7:f0:a8:86:af:34:91:46:
83:55:7e:0a:f0:d6:14:c9:05:8a:3a:9a:1a:aa:69:1f:97:12:
b8:3f:ce:67:65:62:74:d5:eb:c1:08:fb:8b:5d:05:69:80:df:
35:bc:ca:e2:70:31:a7:dd:bf:e2:e9:ce:2b:0d:04:67:a4:23:
e4:69:5f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 09:20:12 2025 by rpki-client