Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/XYXhwm5zrEH45rmFW9NeBdpLBdY.roa
File: XYXhwm5zrEH45rmFW9NeBdpLBdY.roa (raw, json)
Hash identifier: bQLqshA+DTy2hlHQrxwZt5i9j5XdNbOU29TgB/eCftc=
Subject key identifier: 5D:85:E1:C2:6E:73:AC:41:F8:E6:B9:85:5B:D3:5E:05:DA:4B:05:D6
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0199A539F45659D00E1FE95C32668DFA8D92
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/XYXhwm5zrEH45rmFW9NeBdpLBdY.roa
Signing time: Thu 02 Oct 2025 14:01:02 +0000
ROA not before: Thu 02 Oct 2025 14:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.106.0/24 maxlen: 24
146.247.112.0/23 maxlen: 23
146.247.114.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:39:f4:56:59:d0:0e:1f:e9:5c:32:66:8d:fa:8d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 2 14:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d85e1c26e73ac41f8e6b9855bd35e05da4b05d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:ec:e7:05:c6:ba:ab:33:06:06:55:ce:f4:
c8:66:3f:c8:12:21:b2:ab:61:f2:4d:4f:eb:3b:8d:
af:d6:f8:ad:35:2f:b0:ce:f0:0f:23:2b:7e:a8:36:
c1:92:92:67:13:1a:66:65:30:1e:bd:7d:ed:f1:13:
db:a1:9d:d1:5a:ee:c0:dc:be:6b:3c:38:89:77:ed:
81:1d:d8:c2:59:e1:f8:00:1f:c0:55:bf:bd:00:7b:
c6:3b:8d:02:06:f3:a8:45:0b:9e:f6:39:5c:73:05:
ab:dc:dd:10:30:a6:e8:3a:ce:23:15:59:b5:10:e2:
8a:27:7c:37:6c:ec:ab:9e:43:a7:25:1f:35:68:8d:
2e:28:ed:bb:78:ed:c6:9d:71:ee:65:b9:ca:e8:c4:
dd:f2:86:3e:bc:d5:04:e8:81:fa:ad:1b:55:f1:fd:
0d:ba:ea:91:7d:d4:4b:87:11:0f:7d:67:b5:46:c2:
c2:b8:c9:b4:50:56:b1:da:f1:20:40:c8:21:ed:f3:
8a:0a:33:53:86:49:0a:26:29:e6:b5:70:2d:bb:3f:
f0:31:57:4a:67:79:09:57:94:34:c7:2c:3d:af:52:
c4:df:f9:89:1d:ca:f4:d2:08:08:a7:e1:8d:bc:3e:
42:90:75:5d:46:6e:f4:73:02:c1:36:e4:81:fd:fe:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:E1:C2:6E:73:AC:41:F8:E6:B9:85:5B:D3:5E:05:DA:4B:05:D6
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/XYXhwm5zrEH45rmFW9NeBdpLBdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0/24
146.247.112.0-146.247.114.255
146.247.117.0/24
146.247.121.0/24
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6e:9f:07:0b:3f:4f:4c:90:56:11:eb:66:54:dc:54:cd:42:
da:36:6e:90:1f:f7:e8:f3:2b:44:c3:c3:97:1e:d1:23:76:ad:
7c:5d:df:63:cf:74:02:95:43:fb:ca:28:87:f2:93:99:84:87:
5d:db:9c:b1:9a:29:f8:94:e4:94:c5:65:20:11:a0:07:9d:0a:
f9:29:50:11:34:57:43:48:fa:93:3f:78:eb:91:69:cf:eb:ee:
60:3f:b1:a8:1d:bb:4c:87:b9:bf:aa:67:53:29:65:2c:d9:15:
e8:dd:65:9d:55:57:29:5f:16:c5:09:9c:17:a5:dc:07:3f:31:
ae:9f:8e:f2:7b:8e:a5:26:93:a8:eb:21:69:ab:23:32:41:f4:
a5:18:fb:c9:2b:5c:2e:70:38:ea:1c:8a:ab:40:25:b1:26:7c:
44:cb:95:fc:10:b2:c1:ba:94:36:b4:83:fa:47:54:fb:c2:2d:
b1:fb:3b:74:e9:7d:88:9f:d5:ee:94:5d:f6:6c:ce:21:8b:ee:
bc:35:7c:b9:7f:e3:0b:a1:b7:1a:63:79:93:95:0e:10:66:83:
80:ff:06:f9:3d:d4:c7:5b:84:44:f9:d9:ea:5c:fc:ab:ce:7a:
0e:ea:d8:11:2c:c7:7d:19:81:61:41:b8:74:02:ed:ff:b8:7b:
a7:ee:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:56:25 2025 by rpki-client