Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/RkflmKMTMUrJqHaFUNJeUbhKC-I.roa
File: RkflmKMTMUrJqHaFUNJeUbhKC-I.roa (raw, json)
Hash identifier: orUHP/pEtKksjdbFiXyWrXrjXHxmT0wSFykk83oMEWs=
Subject key identifier: 46:47:E5:98:A3:13:31:4A:C9:A8:76:85:50:D2:5E:51:B8:4A:0B:E2
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 019976447B93EAFE0759A1C540B939274804
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/RkflmKMTMUrJqHaFUNJeUbhKC-I.roa
Signing time: Tue 23 Sep 2025 11:10:23 +0000
ROA not before: Tue 23 Sep 2025 11:10:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25454
IP address blocks: 46.166.0.0/18 maxlen: 24
77.89.192.0/18 maxlen: 24
94.243.64.0/18 maxlen: 24
185.8.68.0/22 maxlen: 22
185.8.68.0/23 maxlen: 23
185.8.68.0/24 maxlen: 24
185.8.69.0/24 maxlen: 24
185.167.132.0/22 maxlen: 24
188.131.0.0/17 maxlen: 24
193.239.182.0/23 maxlen: 24
195.22.224.0/19 maxlen: 24
212.56.192.0/19 maxlen: 24
217.12.112.0/20 maxlen: 24
217.12.126.0/24 maxlen: 24
2a00:1858::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:44:7b:93:ea:fe:07:59:a1:c5:40:b9:39:27:48:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Sep 23 11:10:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4647e598a313314ac9a8768550d25e51b84a0be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:8c:5b:de:3e:f0:4f:95:20:3a:89:10:a0:
07:f3:01:e8:d9:70:fd:c3:b5:79:ad:ba:cf:1f:5c:
56:43:d7:b5:17:f7:d6:0c:0d:72:60:c5:eb:4b:58:
ff:92:21:cf:72:1c:1e:6f:9a:a1:bb:e2:8f:8a:6b:
c8:df:cb:5d:f3:c4:cc:93:a2:2c:81:e2:7b:79:9a:
9f:ec:89:6d:34:83:22:7c:b0:d8:c7:8c:8d:3c:54:
c7:3e:4e:a8:16:f1:63:c6:cb:58:69:64:11:3a:d7:
20:c8:aa:46:15:88:01:4e:45:19:a5:8b:b7:94:b9:
49:36:38:90:f2:a2:2d:84:70:b1:a4:6c:ea:f5:4c:
08:65:ee:ad:a1:db:3c:96:7b:f8:73:bc:e6:b6:d1:
b7:a9:de:9d:14:4f:b6:ad:ac:0a:bb:99:5c:2f:55:
67:c1:7a:0e:30:1d:2d:81:47:c9:e5:65:ff:88:53:
34:f6:f0:23:e0:14:23:cf:88:1e:f9:6a:1b:2c:a5:
34:71:46:4b:3a:ab:c0:64:23:72:61:e4:29:13:f1:
cc:88:a8:07:90:f1:74:b5:54:2e:5e:36:70:66:f8:
7f:c9:d6:2d:82:28:2a:ba:46:9f:5a:fe:af:da:a2:
82:1f:fa:57:f0:e7:17:6b:75:6f:ed:5a:23:a2:4f:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:47:E5:98:A3:13:31:4A:C9:A8:76:85:50:D2:5E:51:B8:4A:0B:E2
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/RkflmKMTMUrJqHaFUNJeUbhKC-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.0.0/18
77.89.192.0/18
94.243.64.0/18
185.8.68.0/22
185.167.132.0/22
188.131.0.0/17
193.239.182.0/23
195.22.224.0/19
212.56.192.0/19
217.12.112.0/20
IPv6:
2a00:1858::/32
Signature Algorithm: sha256WithRSAEncryption
42:00:c0:ec:4c:29:69:a7:34:7e:6c:1e:e0:87:b0:d1:1d:c0:
05:32:09:cb:eb:bb:08:58:f1:3a:42:ee:d6:94:9a:39:b6:aa:
a7:02:63:6f:2d:ba:1b:80:81:8f:ee:78:9f:96:f8:6d:05:f2:
32:5a:f7:89:3c:b6:7b:8c:f9:c3:3a:69:99:f2:e0:9f:f9:0b:
17:45:e6:bd:65:41:cb:92:fc:3a:ad:3c:ea:1f:4a:c8:ea:00:
8f:1a:d0:84:fd:22:3f:8f:4f:62:a0:30:eb:38:d9:f1:4a:96:
5e:cb:5f:ee:8c:cd:3b:81:3e:15:01:de:b8:4d:51:4a:35:62:
ba:0b:4c:d3:17:d2:ac:76:d9:2b:09:31:25:41:00:bb:06:94:
01:5c:b5:9d:5e:a5:44:ac:b2:63:fd:60:54:69:30:b4:70:7f:
aa:25:60:ca:3f:64:be:01:1d:08:eb:67:5d:0a:bb:4a:57:29:
b4:f9:f5:e6:64:81:e8:be:a5:d0:35:b5:8e:13:cf:f7:b0:0c:
34:fe:37:fe:e0:87:cb:12:ac:79:82:f3:80:bd:a0:96:5f:b0:
e3:a9:18:0d:38:10:be:b2:c9:a1:4d:64:0f:37:e2:ca:61:67:
2c:7c:ce:6a:09:17:26:c5:11:02:2b:79:39:b2:4f:f4:58:33:
b1:78:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:45 2025 by rpki-client