Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Mt5QYf_4Xq_yvYJJjc-iHCphQJE.roa
File: Mt5QYf_4Xq_yvYJJjc-iHCphQJE.roa (raw, json)
Hash identifier: ysqdjg4chy/J74a4lpP9QwAxrf/wPu44ILlhgX7HlLM=
Subject key identifier: 32:DE:50:61:FF:F8:5E:AF:F2:BD:82:49:8D:CF:A2:1C:2A:61:40:91
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0199A13EF8F57176B0D9EC6772D3D8E06B1B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Mt5QYf_4Xq_yvYJJjc-iHCphQJE.roa
Signing time: Wed 01 Oct 2025 19:28:02 +0000
ROA not before: Wed 01 Oct 2025 19:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 46.8.96.0/24 maxlen: 24
46.8.100.0/22 maxlen: 24
46.8.112.0/22 maxlen: 24
46.8.118.0/23 maxlen: 24
46.8.120.0/21 maxlen: 24
46.8.194.0/23 maxlen: 24
46.8.198.0/23 maxlen: 24
46.8.202.0/24 maxlen: 24
109.248.16.0/20 maxlen: 24
188.130.182.0/24 maxlen: 24
188.130.224.0/21 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a1:3e:f8:f5:71:76:b0:d9:ec:67:72:d3:d8:e0:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 1 19:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32de5061fff85eaff2bd82498dcfa21c2a614091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:a6:99:39:e1:c2:81:ea:92:86:08:be:f6:
77:4b:3c:68:a0:95:99:53:4a:58:e2:1b:d6:77:5c:
a5:be:b3:50:71:a1:5b:2f:99:e9:f5:bd:d3:0a:45:
80:43:8f:c1:5f:ec:64:72:6c:de:85:8a:67:02:3c:
65:fd:19:09:41:6c:88:c7:26:2e:de:4c:02:75:a7:
e1:82:6e:fb:fe:ca:40:aa:4e:70:d4:9b:c4:6e:c7:
1d:f8:f8:41:c8:67:dc:11:12:b7:04:fa:44:b7:02:
64:34:69:62:78:6d:85:37:54:a9:96:e6:13:7f:03:
67:29:cb:fd:44:6e:81:1a:09:b4:cd:a2:bb:34:d8:
54:47:35:47:06:22:6e:d3:a6:9e:05:7e:23:5e:60:
cf:f1:41:44:02:05:52:51:d0:35:b3:40:cd:1d:fb:
24:eb:f2:89:20:5a:02:5c:f2:4d:66:4c:92:6f:69:
78:10:26:24:dc:ac:99:1d:b0:6b:f5:ba:b2:8c:a9:
63:c5:de:90:20:4f:88:df:bd:45:bf:7f:a5:af:2e:
c5:09:46:8b:33:57:74:73:6a:c7:bd:7a:47:00:98:
ea:9e:a7:60:a3:bf:8d:fc:db:5f:07:3b:e1:c7:3f:
d8:8d:e8:fc:5b:00:c9:1d:8e:c1:ae:fc:44:d6:88:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:50:61:FF:F8:5E:AF:F2:BD:82:49:8D:CF:A2:1C:2A:61:40:91
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Mt5QYf_4Xq_yvYJJjc-iHCphQJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.96.0/24
46.8.100.0/22
46.8.112.0/22
46.8.118.0-46.8.127.255
46.8.194.0/23
46.8.198.0/23
46.8.202.0/24
109.248.16.0/20
188.130.182.0/24
188.130.224.0/21
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
35:ea:c6:4c:27:88:5d:5d:e1:b0:63:a5:9f:cc:f4:a7:bf:ed:
99:c4:7b:71:22:b9:41:ec:ca:de:4e:5c:7e:22:38:2c:44:f4:
ad:13:d6:7f:49:d6:5c:d7:7e:62:aa:c6:f2:90:cf:44:a8:90:
0e:10:3f:69:80:9d:b0:5c:ee:1e:3e:15:19:07:b5:f1:ee:20:
7f:2a:97:4c:10:23:eb:d3:f1:d7:c3:fa:d9:2c:1a:5e:9a:dc:
67:4e:58:55:7b:98:8d:76:29:30:46:e3:50:81:50:61:13:6d:
ec:af:c1:3f:c7:24:9c:78:21:be:24:be:66:aa:02:a1:4f:1a:
60:c7:e6:b5:2c:45:19:48:c4:51:24:e5:e2:3e:36:80:c2:3a:
2a:9e:aa:f1:18:0f:4e:46:db:c0:24:59:46:cc:4c:ff:d4:4c:
66:9c:bb:f9:ff:94:bf:63:84:0f:c8:20:d3:bc:15:73:05:c2:
c4:9b:48:b7:f5:de:e2:8f:96:51:90:1b:d7:53:6f:da:bc:52:
90:80:2a:06:ea:ed:fb:b2:d5:37:b8:b0:e0:a0:05:d0:cc:a0:
a8:d8:bc:b8:9c:cf:ed:8e:14:6f:4f:aa:45:99:3d:9f:ae:f3:
ae:d1:f9:3a:75:87:97:c1:ba:2b:5e:44:ad:2b:f2:2c:e3:77:
52:9c:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:35:26 2025 by rpki-client