Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/9-Lq9NSY6nMi32xtrHchy0u9eLo.roa
File: 9-Lq9NSY6nMi32xtrHchy0u9eLo.roa (raw, json)
Hash identifier: Z9AqNkkBI9qUeSw20awtQHkRxTjGqDrKUrCkhNF8va8=
Subject key identifier: F7:E2:EA:F4:D4:98:EA:73:22:DF:6C:6D:AC:77:21:CB:4B:BD:78:BA
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0197BA6444476FD2D640428E6B7DECD631BD
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/9-Lq9NSY6nMi32xtrHchy0u9eLo.roa
Signing time: Sun 29 Jun 2025 06:33:42 +0000
ROA not before: Sun 29 Jun 2025 06:33:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:64:44:47:6f:d2:d6:40:42:8e:6b:7d:ec:d6:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 29 06:33:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e2eaf4d498ea7322df6c6dac7721cb4bbd78ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:d0:ac:7b:1c:4b:a4:2f:f6:62:05:75:ec:
79:58:3e:fd:11:d2:f2:e6:12:91:dd:ea:42:d8:d6:
b6:9c:4f:b0:2a:9c:c8:19:ad:99:8a:ea:b4:b8:74:
9f:ad:49:d1:f5:67:e6:99:f6:81:c7:91:11:91:09:
f0:21:4e:ec:ae:ac:92:ec:0a:5b:e4:77:18:4a:21:
ca:08:8a:d1:f8:57:a2:42:28:23:c2:9e:7f:2d:19:
8d:22:cd:0c:df:32:14:97:11:d8:01:b8:45:23:66:
e6:b1:a6:53:e1:ee:4d:ae:b7:32:4f:e8:fb:05:da:
d7:e8:3c:a5:2a:3a:24:ae:dd:2c:00:6a:13:cf:4d:
d6:06:10:80:6d:79:f3:ae:f9:3f:08:ad:ae:a6:d8:
88:fc:93:9e:e2:f8:d5:62:8a:07:b2:7c:1c:f9:58:
1f:30:e7:d3:fc:3c:82:44:7a:12:72:db:2d:a2:25:
8e:9b:76:47:8e:c1:c8:67:d3:3d:76:0f:f6:09:ab:
7c:6b:1a:8f:ed:96:16:5a:1f:ce:35:a6:64:c1:d3:
cc:8f:bc:04:03:80:18:69:03:31:d8:ee:29:ad:7b:
3f:03:4b:40:be:06:22:98:08:79:bc:17:ca:f0:95:
54:1f:42:96:bc:4b:b8:58:06:79:9d:d3:1f:08:c8:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:EA:F4:D4:98:EA:73:22:DF:6C:6D:AC:77:21:CB:4B:BD:78:BA
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/9-Lq9NSY6nMi32xtrHchy0u9eLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.106.0/24
46.20.111.0/24
185.160.194.0/23
185.169.220.0/22
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
8b:75:95:13:8c:59:f2:1b:04:3f:af:2a:66:2f:b7:b2:f7:96:
55:f9:30:7c:33:aa:68:d8:32:4e:5c:7a:e7:06:7d:19:88:5d:
21:ca:15:d5:21:af:30:00:31:40:d5:09:71:01:6f:e5:b6:2d:
0c:a2:e8:a1:32:76:cf:75:7e:55:b7:2c:cc:cf:47:1c:72:c2:
30:ed:05:7e:14:07:43:b8:97:28:ff:f5:b3:1c:93:f3:91:24:
f3:4f:68:1a:ae:ae:11:40:89:69:ff:ac:59:5c:51:e5:d7:11:
28:c4:89:7a:c8:5f:f8:17:0b:f9:6f:79:bc:47:87:14:3c:a7:
4f:f0:8c:8e:26:3d:8c:a4:fe:e8:f5:07:e6:3c:e7:24:de:fb:
cf:98:1c:30:52:c3:6e:dc:de:79:2b:0f:ba:a8:de:6c:92:31:
14:e6:83:d2:82:28:42:06:50:97:22:80:13:b4:1a:a5:4f:91:
95:c0:3e:c5:30:d6:14:cc:8f:0d:80:86:bb:de:f0:23:87:7d:
1d:ec:fe:6a:9d:1f:47:e0:5e:5a:34:13:2e:5b:58:8e:77:ca:
47:14:10:03:2f:a4:14:7e:8d:fe:a0:ef:d9:8b:8b:98:3f:2f:
50:b1:97:17:84:2d:e5:5b:b7:5e:a4:53:99:72:d7:ec:a7:68:
03:d0:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:59:33 2025 by rpki-client