Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6eBmTb7oTFjvB-t6q34h4uDQFck.roa
File: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (raw, json)
Hash identifier: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=
Subject key identifier: E9:E0:66:4D:BE:E8:4C:58:EF:07:EB:7A:AB:7E:21:E2:E0:D0:15:C9
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01999A23D3523167D8E51DDD338B74D3D3B9
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6eBmTb7oTFjvB-t6q34h4uDQFck.roa
Signing time: Tue 30 Sep 2025 10:21:03 +0000
ROA not before: Tue 30 Sep 2025 10:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393336
IP address blocks: 37.49.144.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:23:d3:52:31:67:d8:e5:1d:dd:33:8b:74:d3:d3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 30 10:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e0664dbee84c58ef07eb7aab7e21e2e0d015c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:4f:41:49:7d:8a:69:8b:b2:90:60:59:05:
ab:29:86:31:0c:2c:29:01:71:6c:d6:c5:a6:94:c6:
83:28:f8:48:3a:85:c0:65:64:c6:73:3f:da:25:3f:
d3:39:4e:19:b9:1f:01:50:dd:c6:f9:20:2a:24:e1:
40:06:fe:ab:30:0f:db:99:5a:a2:81:fd:9b:84:05:
b0:10:fb:66:11:4e:92:c9:67:e2:88:b1:a4:d9:26:
ad:18:b8:0a:fa:e6:bc:b0:c1:65:51:8e:c0:8c:b6:
b6:73:65:b9:3b:33:93:46:89:96:2d:61:84:56:8a:
8d:e8:74:a1:dc:2f:b6:c2:49:e9:b7:52:8e:42:86:
10:91:97:52:61:c5:f1:4d:b7:3b:0e:fc:02:66:5c:
42:0d:7d:8e:ea:61:c0:15:73:e9:7a:6b:40:63:1d:
9b:c1:55:fb:ba:cc:55:5b:5d:c1:b1:89:83:bd:10:
d3:49:c9:c2:c8:f1:ca:bf:90:d8:3a:d5:d4:b8:fc:
02:df:fb:f3:ba:fd:fd:d0:73:4f:28:31:61:bc:47:
cb:a9:c7:26:c3:25:3b:69:cf:ae:89:b3:3d:3e:01:
e4:30:26:ac:1d:2e:09:66:3b:9a:eb:f8:cd:4e:7b:
b1:fb:35:47:8d:ab:df:c0:ea:b1:3d:71:c6:f5:ff:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:66:4D:BE:E8:4C:58:EF:07:EB:7A:AB:7E:21:E2:E0:D0:15:C9
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6eBmTb7oTFjvB-t6q34h4uDQFck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.147.0/24
94.74.171.0/24
109.203.161.0/24
109.203.163.0/24
109.203.166.0/24
176.46.129.0-176.46.130.255
176.46.133.0/24
176.46.135.0/24
176.46.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a6:4c:e6:43:3c:11:31:05:91:bf:54:92:a1:81:5f:4b:ac:
34:78:f1:b9:e5:23:7f:3f:94:35:88:0f:4c:f6:c5:66:e2:85:
30:79:08:63:e9:9a:dd:62:2f:f7:c0:c0:be:c6:2e:9d:da:18:
e1:06:85:9c:19:91:35:9c:09:a4:95:0a:af:0c:ee:8f:51:e7:
59:c2:b0:56:50:eb:12:77:0d:c6:ee:50:52:f2:3e:0d:13:23:
5d:d8:6c:53:cd:6e:e5:04:05:3b:6f:ae:12:12:f6:85:82:31:
a9:a8:0b:e6:c7:2f:6e:0c:9a:d8:f3:df:27:63:6e:bb:e4:3e:
44:b7:b9:3f:b4:ab:ca:47:ed:fb:62:75:aa:2a:5e:97:d5:ff:
d8:f8:11:4b:2c:bd:45:9b:79:d6:c4:e2:04:c3:ae:2d:dd:2a:
5e:9e:d8:05:1c:c3:c8:80:e0:f5:56:78:97:c2:8b:ae:79:b4:
b4:33:26:42:95:09:e4:c4:38:d9:3f:f9:90:f5:7e:54:70:e3:
7e:0e:bf:01:84:05:39:38:8b:d0:c2:e9:79:06:f5:22:54:d2:
59:2a:02:5e:13:40:a4:01:29:0c:f5:a5:3e:fa:d8:b7:a7:f9:
1e:9e:15:f8:7e:5e:80:3e:79:2d:25:bc:9c:66:9a:cc:09:2d:
0e:21:e3:14
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZmaI9NSMWfY5R3dM4t009O5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjUwOTMwMTAyMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWUwNjY0ZGJlZTg0YzU4ZWYwN2ViN2FhYjdlMjFlMmUwZDAxNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqlPQUl9immLspBgWQWrKYYxDCwp
AXFs1sWmlMaDKPhIOoXAZWTGcz/aJT/TOU4ZuR8BUN3G+SAqJOFABv6rMA/bmVqi
gf2bhAWwEPtmEU6SyWfiiLGk2SatGLgK+ua8sMFlUY7AjLa2c2W5OzOTRomWLWGE
VoqN6HSh3C+2wknpt1KOQoYQkZdSYcXxTbc7DvwCZlxCDX2O6mHAFXPpemtAYx2b
wVX7usxVW13BsYmDvRDTScnCyPHKv5DYOtXUuPwC3/vzuv390HNPKDFhvEfLqccm
wyU7ac+uibM9PgHkMCasHS4JZjua6/jNTnux+zVHjavfwOqxPXHG9f8IRQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFOngZk2+6ExY7wfreqt+IeLg0BXJMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvNmVCbVRiN29URmp2Qi10NnEzNGg0dURRRmNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAJTGQAwQA
JTGTAwQAXkqrAwQAbcuhAwQAbcujAwQAbcumMAwDBACwLoEDBACwLoIDBACwLoUD
BACwLocDBACwLokwDQYJKoZIhvcNAQELBQADggEBAKamTOZDPBExBZG/VJKhgV9L
rDR48bnlI38/lDWID0z2xWbihTB5CGPpmt1iL/fAwL7GLp3aGOEGhZwZkTWcCaSV
Cq8M7o9R51nCsFZQ6xJ3DcbuUFLyPg0TI13YbFPNbuUEBTtvrhIS9oWCMamoC+bH
L24Mmtjz3ydjbrvkPkS3uT+0q8pH7ftidaoqXpfV/9j4EUssvUWbedbE4gTDri3d
Kl6e2AUcw8iA4PVWeJfCi655tLQzJkKVCeTEONk/+ZD1flRw434OvwGEBTk4i9DC
6XkG9SJU0lkqAl4TQKQBKQz1pT762Len+R6eFfh+XoA+eS0lvJxmmswJLQ4h4xQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:29:10 2025 by rpki-client