Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/46CrIffnQ_Z2VULr2_zq5ycXi_o.roa
File: 46CrIffnQ_Z2VULr2_zq5ycXi_o.roa (raw, json)
Hash identifier: woo5CJdBZeqj+spRxywdEIpQkRHqd5niNUiG63o0aik=
Subject key identifier: E3:A0:AB:21:F7:E7:43:F6:76:55:42:EB:DB:FC:EA:E7:27:17:8B:FA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 0199BEDDE8D47BB37ACA8973A915665FB434
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/46CrIffnQ_Z2VULr2_zq5ycXi_o.roa
Signing time: Tue 07 Oct 2025 13:30:37 +0000
ROA not before: Tue 07 Oct 2025 13:30:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 62.145.192.0/18 maxlen: 18
62.145.192.0/19 maxlen: 19
62.145.224.0/19 maxlen: 19
80.112.0.0/17 maxlen: 17
80.112.0.0/18 maxlen: 18
80.112.64.0/18 maxlen: 18
80.114.0.0/17 maxlen: 17
80.114.0.0/18 maxlen: 18
80.114.64.0/18 maxlen: 18
80.114.192.0/18 maxlen: 18
80.114.192.0/19 maxlen: 19
80.114.224.0/19 maxlen: 19
80.115.0.0/17 maxlen: 17
80.115.0.0/18 maxlen: 18
80.115.64.0/18 maxlen: 18
80.115.128.0/18 maxlen: 18
80.115.128.0/19 maxlen: 19
80.115.160.0/19 maxlen: 19
82.72.0.0/14 maxlen: 14
82.72.0.0/15 maxlen: 15
82.74.0.0/15 maxlen: 15
82.101.192.0/18 maxlen: 18
82.101.192.0/19 maxlen: 19
82.101.224.0/19 maxlen: 19
82.151.160.0/19 maxlen: 19
82.151.160.0/20 maxlen: 20
82.151.176.0/20 maxlen: 20
82.217.0.0/16 maxlen: 16
82.217.0.0/17 maxlen: 17
82.217.128.0/17 maxlen: 17
83.80.0.0/13 maxlen: 13
83.80.0.0/14 maxlen: 14
83.84.0.0/14 maxlen: 14
84.24.0.0/13 maxlen: 13
84.24.0.0/14 maxlen: 14
84.28.0.0/14 maxlen: 14
84.104.0.0/14 maxlen: 14
84.104.0.0/15 maxlen: 15
84.106.0.0/15 maxlen: 15
85.147.0.0/16 maxlen: 16
85.147.0.0/17 maxlen: 17
85.147.128.0/17 maxlen: 17
89.220.128.0/17 maxlen: 17
89.220.128.0/18 maxlen: 18
89.220.192.0/18 maxlen: 18
94.208.0.0/13 maxlen: 13
94.208.0.0/14 maxlen: 14
94.212.0.0/14 maxlen: 14
185.130.168.0/22 maxlen: 22
185.130.168.0/23 maxlen: 23
185.130.170.0/23 maxlen: 23
212.54.32.0/19 maxlen: 19
212.54.32.0/20 maxlen: 20
212.54.48.0/20 maxlen: 20
212.120.64.0/18 maxlen: 18
212.120.64.0/19 maxlen: 19
212.120.96.0/19 maxlen: 19
212.127.128.0/17 maxlen: 17
212.127.128.0/18 maxlen: 18
212.127.192.0/18 maxlen: 18
212.204.128.0/18 maxlen: 18
212.204.128.0/19 maxlen: 19
212.204.160.0/19 maxlen: 19
213.34.96.0/19 maxlen: 19
213.34.96.0/20 maxlen: 20
213.34.112.0/20 maxlen: 20
213.51.0.0/16 maxlen: 16
213.73.128.0/17 maxlen: 17
213.73.128.0/18 maxlen: 18
213.73.192.0/18 maxlen: 18
217.62.0.0/16 maxlen: 16
217.62.0.0/17 maxlen: 17
217.62.128.0/17 maxlen: 17
217.63.0.0/18 maxlen: 18
217.63.0.0/19 maxlen: 19
217.63.32.0/19 maxlen: 19
217.63.192.0/18 maxlen: 18
217.63.192.0/19 maxlen: 19
217.63.224.0/19 maxlen: 19
217.101.0.0/16 maxlen: 16
217.101.0.0/17 maxlen: 17
217.101.128.0/17 maxlen: 17
217.102.128.0/18 maxlen: 18
217.102.128.0/19 maxlen: 19
217.102.160.0/19 maxlen: 19
217.102.192.0/19 maxlen: 19
217.102.192.0/20 maxlen: 20
217.102.208.0/20 maxlen: 20
217.104.0.0/17 maxlen: 17
217.104.0.0/18 maxlen: 18
217.104.64.0/18 maxlen: 18
217.105.64.0/18 maxlen: 18
217.105.64.0/19 maxlen: 19
217.105.96.0/19 maxlen: 19
217.105.128.0/18 maxlen: 18
217.105.128.0/19 maxlen: 19
217.105.160.0/19 maxlen: 19
217.120.0.0/14 maxlen: 14
217.120.0.0/15 maxlen: 15
217.122.0.0/15 maxlen: 15
2001:b88::/33 maxlen: 33
2001:1c00::/23 maxlen: 23
2001:1c00::/24 maxlen: 24
2001:1d00::/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:dd:e8:d4:7b:b3:7a:ca:89:73:a9:15:66:5f:b4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Oct 7 13:30:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a0ab21f7e743f6765542ebdbfceae727178bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:a3:f6:ae:66:04:f7:f5:56:5d:eb:e1:00:
93:9c:5c:b5:ff:42:9b:2c:63:c4:74:51:d4:a7:12:
60:11:fe:43:e5:38:fe:c2:00:60:ab:b2:4f:72:73:
7d:35:97:68:8c:6e:d7:1a:c2:4c:6e:2d:75:62:08:
db:54:b7:73:6c:cb:30:e6:0f:db:4b:09:d6:43:14:
6e:1e:20:72:fb:97:e0:67:3e:67:47:6a:d9:3c:a0:
d3:04:49:9f:35:ec:9e:61:ba:43:60:9d:91:20:45:
ac:ac:11:77:2c:49:5b:2d:66:e0:a1:f6:b2:b8:5e:
60:a3:a4:b2:89:39:ad:c4:57:c8:50:ab:33:03:87:
2b:6e:8c:0f:9d:29:a5:8c:1f:c3:81:f1:85:5c:51:
2c:51:8c:70:95:b3:d1:a5:19:cd:08:45:b6:bd:6a:
2a:00:af:39:f2:e5:26:01:7a:7e:06:9b:01:d7:86:
1e:4a:44:81:d5:db:db:55:a6:15:c4:00:14:99:4f:
5b:b9:c7:2d:c0:39:72:5e:d8:5a:9f:00:c4:fb:d0:
a7:ba:53:f2:43:9c:7b:a1:02:6a:93:4f:c5:29:1f:
82:d4:8a:c2:4e:9e:6f:a5:2a:ab:85:ee:d9:02:75:
79:e1:58:2d:6c:d1:ef:82:86:9c:20:36:89:48:09:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:AB:21:F7:E7:43:F6:76:55:42:EB:DB:FC:EA:E7:27:17:8B:FA
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/46CrIffnQ_Z2VULr2_zq5ycXi_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.192.0/18
80.112.0.0/17
80.114.0.0/17
80.114.192.0-80.115.191.255
82.72.0.0/14
82.101.192.0/18
82.151.160.0/19
82.217.0.0/16
83.80.0.0/13
84.24.0.0/13
84.104.0.0/14
85.147.0.0/16
89.220.128.0/17
94.208.0.0/13
185.130.168.0/22
212.54.32.0/19
212.120.64.0/18
212.127.128.0/17
212.204.128.0/18
213.34.96.0/19
213.51.0.0/16
213.73.128.0/17
217.62.0.0-217.63.63.255
217.63.192.0/18
217.101.0.0/16
217.102.128.0-217.102.223.255
217.104.0.0/17
217.105.64.0-217.105.191.255
217.120.0.0/14
IPv6:
2001:b88::/33
2001:1c00::/23
Signature Algorithm: sha256WithRSAEncryption
6d:14:f0:67:f1:ed:70:49:d1:89:4d:9f:1a:16:0e:85:14:04:
a7:69:65:f0:75:46:4c:37:da:02:e7:15:63:ec:a8:5f:0d:e5:
d7:2f:67:81:a8:7d:00:c3:33:ef:a2:f0:35:53:21:10:c3:ce:
ab:ae:b7:ff:0d:a8:65:54:d3:26:5b:e6:12:f9:d0:a2:2e:21:
65:fc:e2:b0:07:f3:4b:23:f9:40:a8:24:2f:9c:fa:83:28:79:
87:1e:24:b0:b1:a8:ed:27:3e:c8:02:82:30:3a:9b:a2:ed:94:
d5:f6:07:69:3c:01:08:e7:f7:fd:33:57:34:ef:18:4b:dd:26:
62:01:bc:36:14:99:25:e0:80:19:a3:29:b8:71:7b:20:11:0c:
38:52:18:e1:58:4e:f1:70:42:42:02:f9:3a:e5:b9:8b:a3:5f:
78:e1:40:66:45:e4:4a:08:c0:81:ce:c2:1e:53:02:e1:51:8a:
4e:86:dd:3f:e2:97:88:7e:d9:11:94:43:55:09:f2:7b:b9:56:
af:27:a3:32:d6:36:29:92:7d:af:6a:11:26:b6:58:39:b2:0e:
a4:55:ac:2b:c8:69:22:3c:b0:77:da:fb:4d:6f:cc:f0:dc:b5:
77:85:74:44:45:c2:a3:9f:6a:80:4d:fb:e7:38:5e:43:2c:95:
00:c0:fc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:53 2025 by rpki-client