Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Fd7oRfblsSpgo1HB8_NxtF5G6vA.roa
File: Fd7oRfblsSpgo1HB8_NxtF5G6vA.roa (raw, json)
Hash identifier: u0JHRcPKBTILwNWmyNhnBiovQlnOIak9XumG3rgutdE=
Subject key identifier: 15:DE:E8:45:F6:E5:B1:2A:60:A3:51:C1:F3:F3:71:B4:5E:46:EA:F0
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01997B27191B19B9BAEF00003146AA0A59D5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Fd7oRfblsSpgo1HB8_NxtF5G6vA.roa
Signing time: Wed 24 Sep 2025 09:56:23 +0000
ROA not before: Wed 24 Sep 2025 09:56:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 46.38.140.0/24 maxlen: 24
46.38.146.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:27:19:1b:19:b9:ba:ef:00:00:31:46:aa:0a:59:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 24 09:56:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15dee845f6e5b12a60a351c1f3f371b45e46eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:7e:c3:1d:ae:e4:32:e3:56:c6:ac:e7:d1:
92:cf:84:f7:87:05:d2:32:d0:bf:9d:9d:3e:c4:dc:
05:14:b8:93:6e:e9:3d:9e:5f:36:bf:c3:75:aa:d1:
07:ad:42:16:ed:8d:37:59:85:c8:ec:eb:9a:55:c1:
f1:39:9f:3a:70:7b:e1:21:24:15:21:5f:70:a1:1f:
7d:c0:29:80:a6:cd:45:f9:99:1a:8d:fc:26:e4:a3:
44:27:e3:c6:c5:08:cc:80:ac:48:26:23:15:cb:8a:
b6:01:d5:2e:31:cb:d7:b6:d3:0c:d0:bd:22:71:4a:
15:f7:49:3a:be:62:07:89:5a:29:b4:4b:f9:e0:fa:
6f:eb:5e:e7:cc:e7:4b:9d:df:80:d3:1d:9f:a6:5d:
90:ea:0b:51:e7:19:b6:1a:c0:72:d0:9f:b0:46:8c:
de:82:18:7f:b8:85:6b:0e:04:0a:bd:45:11:16:76:
82:50:59:6c:b5:e7:97:09:54:17:a9:11:8f:f1:71:
2d:a1:e1:cc:78:4a:67:7c:7e:6b:de:93:61:58:58:
e7:5c:c2:9b:8c:88:66:0f:84:63:5d:91:b0:b7:9e:
7e:f2:41:e1:9f:38:1c:e8:26:bd:07:b8:bd:b8:1d:
1e:a1:78:f8:3f:db:a9:bb:cf:02:dc:e7:e0:8e:ff:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:E8:45:F6:E5:B1:2A:60:A3:51:C1:F3:F3:71:B4:5E:46:EA:F0
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Fd7oRfblsSpgo1HB8_NxtF5G6vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.140.0/24
46.38.146.0/23
46.38.149.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0f:0a:85:d1:69:5c:a1:7a:a4:07:39:43:d8:5f:b0:12:02:
24:cf:81:f5:38:d2:30:2c:35:4b:1c:de:7a:aa:39:26:e4:2a:
a7:cb:c2:8e:76:3b:fe:ca:ee:86:f3:71:73:68:1d:87:cf:5a:
f8:41:af:dc:1d:5c:b4:ac:62:5a:15:f5:e0:8f:d5:24:2e:36:
09:0a:95:79:fa:47:65:d2:6a:c2:28:03:c8:2c:b6:80:6b:aa:
ee:dd:2c:48:88:12:51:43:a3:95:6d:fc:fa:d7:63:ed:97:37:
5d:a0:60:71:5f:1c:24:f1:33:30:a8:fc:3a:6f:b2:ea:0d:c3:
84:24:e1:72:8a:ee:e6:1d:2d:f9:28:62:fb:ed:73:56:f4:c4:
2f:0d:c0:8c:50:1d:a6:0a:c3:a2:a1:fe:90:97:49:b7:3e:17:
cd:06:28:68:77:85:33:b5:24:d7:64:b6:7b:4e:cd:54:24:db:
7d:c5:67:a1:ae:64:7e:99:a0:93:6f:6b:c4:eb:fd:71:73:b8:
86:b2:d3:8e:b1:cf:4e:e5:c1:58:de:42:63:3c:9a:20:10:34:
db:ce:c1:de:dc:a0:b4:2f:d9:26:64:33:f5:a4:ab:47:10:27:
9b:9c:3d:96:cf:08:0f:c0:e8:fe:ae:d3:3b:fb:33:23:02:65:
98:10:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:21 2025 by rpki-client