Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/aZPp_cV5jr5aukOafXhVZHLOxO8.roa
File: aZPp_cV5jr5aukOafXhVZHLOxO8.roa (raw, json)
Hash identifier: HiVo5n2AfzX/D2YKvojUG77iVNrUKo2LAmIGlr0XbVQ=
Subject key identifier: 69:93:E9:FD:C5:79:8E:BE:5A:BA:43:9A:7D:78:55:64:72:CE:C4:EF
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0199EBCDD480AADF5441E818225A62FB7EBA
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/aZPp_cV5jr5aukOafXhVZHLOxO8.roa
Signing time: Thu 16 Oct 2025 06:55:58 +0000
ROA not before: Thu 16 Oct 2025 06:55:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35039
IP address blocks: 139.66.0.0/23 maxlen: 23
139.66.2.0/23 maxlen: 23
139.66.4.0/23 maxlen: 23
139.66.6.0/23 maxlen: 23
139.66.8.0/23 maxlen: 23
139.66.10.0/23 maxlen: 23
139.66.12.0/23 maxlen: 23
139.66.14.0/23 maxlen: 23
139.66.16.0/23 maxlen: 23
139.66.18.0/23 maxlen: 23
139.66.26.0/23 maxlen: 23
139.66.28.0/23 maxlen: 23
139.66.30.0/23 maxlen: 23
139.66.122.0/23 maxlen: 23
139.66.124.0/23 maxlen: 23
139.66.126.0/23 maxlen: 23
155.56.128.0/23 maxlen: 23
155.56.210.0/24 maxlen: 24
155.56.227.0/24 maxlen: 24
155.56.228.0/23 maxlen: 23
155.56.248.0/24 maxlen: 24
217.77.240.0/22 maxlen: 22
217.77.244.0/22 maxlen: 22
217.77.252.0/24 maxlen: 24
217.77.253.0/24 maxlen: 24
217.77.254.0/24 maxlen: 24
217.77.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:cd:d4:80:aa:df:54:41:e8:18:22:5a:62:fb:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Oct 16 06:55:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6993e9fdc5798ebe5aba439a7d78556472cec4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:9c:fb:ca:0b:fc:7b:fa:77:55:15:75:b0:
04:8d:eb:a7:da:a3:e8:a1:ad:5f:7b:87:0f:84:b3:
76:1c:d6:ee:59:ea:19:6f:6f:10:24:18:49:3d:a9:
c0:24:a2:ef:4a:e2:ea:be:83:ab:c3:54:85:f9:bf:
b0:82:a4:d6:a3:68:fa:fc:05:68:99:5d:aa:46:ef:
ac:49:29:00:5d:2c:3c:b3:d7:17:d5:d7:bf:35:81:
c9:28:f9:a3:15:3c:26:55:ea:4d:75:f3:22:7b:d8:
84:c9:f2:5b:8a:07:91:c4:8f:43:1a:4b:ab:ab:06:
57:c1:c8:c5:97:c0:aa:70:9a:9c:a1:94:9d:1d:20:
67:ed:da:4f:b2:55:0e:46:96:e1:76:c7:4e:f7:c0:
4e:f3:69:c6:f2:ef:64:9f:56:ec:77:8a:f5:96:79:
3e:84:f1:0e:c1:f9:01:fb:e8:65:bb:23:3d:10:16:
f6:59:3c:63:b9:8a:76:40:ac:78:41:86:c7:ee:17:
a2:6c:6b:ce:a8:ba:44:3c:e1:81:4d:cb:23:08:7c:
ee:ce:09:75:97:26:51:a1:41:be:3d:40:2b:46:5f:
e5:19:5e:58:43:3a:be:94:55:fa:f0:a3:31:78:c5:
ab:bd:1a:2d:d5:a8:e1:17:3a:ea:5e:8c:ee:7c:d4:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:E9:FD:C5:79:8E:BE:5A:BA:43:9A:7D:78:55:64:72:CE:C4:EF
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/aZPp_cV5jr5aukOafXhVZHLOxO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.66.0.0-139.66.19.255
139.66.26.0-139.66.31.255
139.66.122.0-139.66.127.255
155.56.128.0/23
155.56.210.0/24
155.56.227.0-155.56.229.255
155.56.248.0/24
217.77.240.0/21
217.77.252.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d9:b8:88:4b:5f:14:c4:63:de:72:87:9e:4d:37:ae:d8:b2:
31:f1:fd:9b:53:7b:3d:ef:bc:70:e7:5b:09:43:27:9b:90:a3:
80:1c:46:02:d6:55:a0:df:43:f0:e1:0e:75:a3:0a:76:5e:21:
18:fa:81:0c:b5:f5:ac:54:9d:ee:bf:18:a4:81:f2:ca:9c:30:
5c:37:75:03:69:50:f1:bb:08:8f:37:a9:15:a9:cd:93:79:6a:
8a:23:cd:48:31:bb:81:75:77:53:2b:df:c2:57:3e:4d:0d:c4:
38:bb:30:fe:20:55:52:5c:43:32:e3:38:77:50:e3:e6:d6:0c:
f0:8b:54:29:01:13:e9:7c:e5:d8:e3:da:9c:30:ce:be:2a:c0:
9b:ff:94:11:dc:4a:a3:53:38:b7:5a:7d:ce:6e:c8:8d:65:e6:
1c:f5:ee:b5:79:97:62:0e:cb:4c:7c:40:4a:a5:54:4c:ca:1d:
69:cb:9c:90:cf:e4:c6:60:86:61:31:0d:63:36:cb:17:3a:cb:
2c:2e:99:b4:32:ca:97:e6:62:06:aa:cd:cd:6c:c4:82:d2:38:
aa:94:a5:20:e1:6c:69:5c:6b:1d:64:7e:86:8a:09:4a:b5:e7:
b0:0e:91:e9:30:26:ea:ca:1c:89:04:b5:4e:ff:b9:1a:3c:8d:
45:48:00:8d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAZnrzdSAqt9UQegYIlpi+366MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUxMDE2MDY1NTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTkzZTlmZGM1Nzk4ZWJlNWFiYTQzOWE3ZDc4NTU2NDcyY2VjNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFKc+8oL/Hv6d1UVdbAEjeun2qPo
oa1fe4cPhLN2HNbuWeoZb28QJBhJPanAJKLvSuLqvoOrw1SF+b+wgqTWo2j6/AVo
mV2qRu+sSSkAXSw8s9cX1de/NYHJKPmjFTwmVepNdfMie9iEyfJbigeRxI9DGkur
qwZXwcjFl8CqcJqcoZSdHSBn7dpPslUORpbhdsdO98BO82nG8u9kn1bsd4r1lnk+
hPEOwfkB++hluyM9EBb2WTxjuYp2QKx4QYbH7heibGvOqLpEPOGBTcsjCHzuzgl1
lyZRoUG+PUArRl/lGV5YQzq+lFX68KMxeMWrvRot1ajhFzrqXozufNSdyQIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFGmT6f3FeY6+WrpDmn14VWRyzsTvMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvYVpQcF9jVjVqcjVhdWtPYWZYaFZaSExPeE84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVMAsDAwGLQgME
AotCEDAMAwQBi0IaAwQFi0IAMAwDBAGLQnoDBAeLQgADBAGbOIADBACbONIwDAME
AJs44wMEAZs45AMEAJs4+AMEA9lN8AMEAtlN/DANBgkqhkiG9w0BAQsFAAOCAQEA
BNm4iEtfFMRj3nKHnk03rtiyMfH9m1N7Pe+8cOdbCUMnm5CjgBxGAtZVoN9D8OEO
daMKdl4hGPqBDLX1rFSd7r8YpIHyypwwXDd1A2lQ8bsIjzepFanNk3lqiiPNSDG7
gXV3Uyvfwlc+TQ3EOLsw/iBVUlxDMuM4d1Dj5tYM8ItUKQET6Xzl2OPanDDOvirA
m/+UEdxKo1M4t1p9zm7IjWXmHPXutXmXYg7LTHxASqVUTModacuckM/kxmCGYTEN
YzbLFzrLLC6ZtDLKl+ZiBqrNzWzEgtI4qpSlIOFsaVxrHWR+hooJSrXnsA6R6TAm
6sociQS1Tv+5GjyNRUgAjQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:46 2025 by rpki-client