Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/NleuP1D5q1HYCx1bniu7S0UGnKU.roa
File: NleuP1D5q1HYCx1bniu7S0UGnKU.roa (raw, json)
Hash identifier: ZHCVqddSwzrZ5jTMPPMLkCEjlBptOTx+uNZ09AcVm1s=
Subject key identifier: 36:57:AE:3F:50:F9:AB:51:D8:0B:1D:5B:9E:2B:BB:4B:45:06:9C:A5
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 01996B9EF55D96E2E46BEA76022255B5E43D
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/NleuP1D5q1HYCx1bniu7S0UGnKU.roa
Signing time: Sun 21 Sep 2025 09:33:23 +0000
ROA not before: Sun 21 Sep 2025 09:33:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49183
IP address blocks: 46.173.160.0/22 maxlen: 22
46.173.160.0/24 maxlen: 24
46.173.161.0/24 maxlen: 24
46.173.162.0/24 maxlen: 24
46.173.163.0/24 maxlen: 24
46.173.164.0/22 maxlen: 22
46.173.164.0/24 maxlen: 24
46.173.165.0/24 maxlen: 24
46.173.166.0/24 maxlen: 24
46.173.167.0/24 maxlen: 24
46.173.168.0/22 maxlen: 22
46.173.172.0/24 maxlen: 24
46.173.173.0/24 maxlen: 24
46.173.174.0/24 maxlen: 24
46.173.175.0/24 maxlen: 24
94.231.176.0/24 maxlen: 24
94.231.177.0/24 maxlen: 24
94.231.178.0/24 maxlen: 24
94.231.179.0/24 maxlen: 24
94.231.180.0/24 maxlen: 24
94.231.181.0/24 maxlen: 24
94.231.182.0/24 maxlen: 24
94.231.183.0/24 maxlen: 24
94.231.184.0/24 maxlen: 24
94.231.185.0/24 maxlen: 24
94.231.186.0/24 maxlen: 24
94.231.187.0/24 maxlen: 24
94.231.188.0/24 maxlen: 24
94.231.189.0/24 maxlen: 24
94.231.190.0/24 maxlen: 24
94.231.191.0/24 maxlen: 24
2001:678:d94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6b:9e:f5:5d:96:e2:e4:6b:ea:76:02:22:55:b5:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Sep 21 09:33:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3657ae3f50f9ab51d80b1d5b9e2bbb4b45069ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:8f:a4:b3:90:db:ec:42:2c:3a:e3:71:76:
87:4d:8b:03:05:ae:c1:48:85:60:00:9f:4e:6f:20:
2e:e6:fc:12:09:40:0d:b3:ac:05:43:96:a4:ba:eb:
55:11:c8:9a:e4:c1:06:7d:58:09:17:89:34:a0:52:
7f:2e:21:07:b5:03:22:2c:6c:18:44:dd:5d:f4:a8:
12:79:59:3f:fe:fc:66:50:82:62:44:57:ab:7c:6f:
94:95:4c:a9:de:77:bc:d6:c9:27:6c:30:31:3a:1d:
be:3c:fb:63:19:98:95:d2:3a:79:61:d3:26:93:f8:
b9:6c:17:59:cd:dc:b6:4b:f1:07:57:e4:7e:25:34:
6f:5f:7b:9c:62:5c:82:e0:a6:c4:3a:49:9d:bc:39:
94:d4:f0:27:70:d0:3b:6b:aa:01:89:75:2d:01:c6:
db:85:49:1a:13:fc:21:16:55:e7:68:9d:ae:ad:af:
b6:f0:65:9c:d5:df:22:7b:c9:fc:79:5f:22:f0:23:
c2:2e:09:e2:5e:8e:ac:b7:b3:19:17:5a:1b:3a:91:
63:f3:b7:61:34:9d:2c:28:5f:30:fa:c6:bb:cd:86:
e0:6b:bb:ae:2e:fa:72:3c:23:6a:26:33:38:0b:8d:
62:4d:d4:c6:8a:0f:f2:af:98:64:7a:e1:2c:78:7c:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:AE:3F:50:F9:AB:51:D8:0B:1D:5B:9E:2B:BB:4B:45:06:9C:A5
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/NleuP1D5q1HYCx1bniu7S0UGnKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.160.0/20
94.231.176.0/20
IPv6:
2001:678:d94::/48
Signature Algorithm: sha256WithRSAEncryption
26:26:74:0b:af:ea:12:eb:8c:00:88:1a:75:04:8f:f4:e4:ad:
18:ea:4b:fa:ff:2c:2b:45:f4:fe:e3:16:09:17:50:0c:36:11:
9b:5c:ae:65:9f:9c:60:36:bd:8c:f7:d7:96:c5:87:fd:68:3c:
af:b5:ca:8b:4b:47:ee:6d:2e:98:d4:cf:fb:b5:40:57:14:17:
42:b7:19:93:da:0d:e6:b5:be:0a:83:4d:db:2d:35:61:e5:93:
72:b7:ba:d1:9f:e9:38:ea:2a:54:d8:6d:66:96:2a:7c:f1:87:
9c:83:92:7c:68:9e:d6:b0:c4:ba:a0:71:be:63:1c:0b:59:35:
2d:67:ac:32:5f:b3:53:62:14:1b:43:e4:66:61:46:6e:18:c0:
fc:9b:ed:91:b1:a7:aa:a2:49:b8:43:4c:9e:e8:aa:d0:9e:36:
ef:c8:8d:80:ca:a8:4c:11:ba:d7:c2:48:9d:4b:d7:94:1d:b4:
40:e8:b9:57:97:f7:69:00:0c:a7:42:cb:87:b7:b5:b7:1d:33:
b2:0c:de:6f:3b:7f:8a:6b:d8:d4:ee:03:4e:5f:4a:f4:6f:b9:
90:8e:c1:99:91:e5:6b:fc:b3:1d:28:d9:cd:6e:d1:20:01:ff:
0a:4e:63:1f:c8:95:4a:92:9c:5b:0f:96:cb:0e:1b:04:64:60:
ea:46:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:53:30 2025 by rpki-client