Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Cd6A8HdMV_hMwNvSjXP9Yvk91SE.roa
File: Cd6A8HdMV_hMwNvSjXP9Yvk91SE.roa (raw, json)
Hash identifier: XWcdd7x7brcdYxv0iQ9eqPIIfN43ZARzqkSY7W4em2k=
Subject key identifier: 09:DE:80:F0:77:4C:57:F8:4C:C0:DB:D2:8D:73:FD:62:F9:3D:D5:21
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0198D12F7250CB346A6C85284CF72A1BF991
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Cd6A8HdMV_hMwNvSjXP9Yvk91SE.roa
Signing time: Fri 22 Aug 2025 09:50:04 +0000
ROA not before: Fri 22 Aug 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215597
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
212.95.142.0/24 maxlen: 24
212.95.148.0/24 maxlen: 24
212.95.156.0/24 maxlen: 24
2a12:f680:200::/48 maxlen: 48
2a12:f680:201::/48 maxlen: 48
2a12:f680:204::/48 maxlen: 48
2a12:f680:205::/48 maxlen: 48
2a12:f680:206::/48 maxlen: 48
2a12:f680:207::/48 maxlen: 48
2a12:f680:220::/43 maxlen: 43
2a12:f680:240::/43 maxlen: 43
2a12:f680:260::/43 maxlen: 43
2a12:f680:600::/48 maxlen: 48
2a12:f680:601::/48 maxlen: 48
2a12:f680:602::/48 maxlen: 48
2a12:f680:604::/48 maxlen: 48
2a12:f680:620::/43 maxlen: 43
2a12:f680:640::/43 maxlen: 43
2a12:f680:660::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:2f:72:50:cb:34:6a:6c:85:28:4c:f7:2a:1b:f9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Aug 22 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09de80f0774c57f84cc0dbd28d73fd62f93dd521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:cd:46:19:3e:d7:79:5c:80:28:bb:93:74:
95:42:82:55:8e:9b:e2:b7:34:56:ec:7f:31:76:87:
b0:c9:e4:15:7c:11:c0:d5:aa:3e:38:18:f3:66:a5:
0c:6a:da:53:15:ad:40:71:51:81:cb:58:c8:e4:20:
29:f0:5c:0e:6c:d5:d4:78:ab:e6:db:de:5c:74:34:
55:d5:f0:12:9e:48:df:49:36:f8:ff:19:97:2e:1a:
e7:b5:34:3d:df:8a:54:5c:34:88:6f:84:8e:5e:2d:
83:47:6c:b6:90:6a:8b:a0:f9:ea:ae:ba:21:77:d2:
e2:f9:31:0c:ed:69:c2:d8:85:74:6f:10:aa:42:d5:
0a:fa:41:31:16:fc:9d:79:6b:88:36:54:a7:70:41:
96:14:1c:7a:76:44:56:4a:e0:2a:f6:1c:e9:11:9f:
66:59:b6:56:35:1e:a4:2f:ac:02:1b:26:54:ac:0b:
06:49:3d:4d:a7:a4:a3:1c:60:b4:11:0f:93:9d:92:
b6:40:23:0a:13:50:56:ad:4e:31:a6:e6:6e:91:64:
f7:4f:05:62:5c:f1:aa:1d:5c:e8:e7:8d:7f:f1:00:
e4:a6:79:bd:61:ca:90:8c:67:9c:a4:6b:d9:79:a6:
21:ec:5f:85:e6:9f:47:aa:57:47:59:23:8d:80:ba:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:80:F0:77:4C:57:F8:4C:C0:DB:D2:8D:73:FD:62:F9:3D:D5:21
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Cd6A8HdMV_hMwNvSjXP9Yvk91SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/23
82.199.222.0/23
91.213.191.0/24
91.217.185.0/24
185.95.206.0/23
212.95.142.0/24
212.95.148.0/24
212.95.156.0/24
IPv6:
2a12:f680:200::/47
2a12:f680:204::/46
2a12:f680:220::-2a12:f680:27f:ffff:ffff:ffff:ffff:ffff
2a12:f680:600::-2a12:f680:602:ffff:ffff:ffff:ffff:ffff
2a12:f680:604::/48
2a12:f680:620::-2a12:f680:67f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:a9:8f:60:db:ef:54:ad:34:af:96:b0:a8:c1:6e:bf:9d:f8:
6c:73:e1:79:af:38:05:16:31:16:bc:cc:0d:a4:89:69:84:a2:
86:36:8e:f4:9d:bf:95:14:d8:9f:00:f7:f1:ce:0a:8e:1b:a1:
16:a6:68:bf:4d:6a:1e:c7:69:cd:43:a1:95:c7:a8:2e:fa:b3:
4d:c9:3a:1a:12:8b:d6:ac:aa:79:30:5d:5a:f7:78:0e:e7:44:
4a:32:01:70:b2:f7:8c:c3:e9:b9:a0:a0:81:b6:3c:25:8b:7f:
c7:d0:71:d1:a1:e8:ae:62:16:02:6d:04:9f:47:75:69:21:19:
cf:6e:e9:50:3e:b4:10:30:77:91:3f:27:70:7c:b9:55:5b:7f:
da:e4:e6:f1:50:a8:f2:57:0f:0a:ca:0a:0d:98:b9:f9:67:20:
e4:d9:11:e7:3d:5f:14:5b:bf:d0:51:ef:8b:5d:c4:33:37:4f:
27:3a:a1:0c:25:22:b5:af:b0:5a:25:0e:26:07:f6:55:36:f7:
6f:94:e4:43:bb:fb:90:54:8e:82:69:6b:10:8b:a3:3d:e7:c3:
46:2a:c7:71:89:7d:63:e9:85:0a:4e:b7:b1:9d:40:75:36:54:
f8:0a:f3:e8:2a:67:42:de:14:5f:4d:7f:13:a1:a1:d8:a4:8c:
77:4e:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:04:51 2025 by rpki-client