
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/46uAO_7C_hVEQvZIAiRuYmh3QSo.roa
File: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (raw, json)
Hash identifier: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=
Subject key identifier: E3:AB:80:3B:FE:C2:FE:15:44:42:F6:48:02:24:6E:62:68:77:41:2A
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0197A5149A71D75C020DF9A89A35530E84F8
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/46uAO_7C_hVEQvZIAiRuYmh3QSo.roa
Signing time: Wed 25 Jun 2025 03:14:40 +0000
ROA not before: Wed 25 Jun 2025 03:14:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 5.129.208.0/24 maxlen: 24
5.129.209.0/24 maxlen: 24
5.129.210.0/24 maxlen: 24
5.129.212.0/24 maxlen: 24
5.129.213.0/24 maxlen: 24
5.129.214.0/24 maxlen: 24
5.129.216.0/24 maxlen: 24
5.129.217.0/24 maxlen: 24
5.129.218.0/24 maxlen: 24
5.129.219.0/24 maxlen: 24
5.129.224.0/24 maxlen: 24
5.129.225.0/24 maxlen: 24
5.129.226.0/24 maxlen: 24
5.129.227.0/24 maxlen: 24
5.129.228.0/24 maxlen: 24
5.129.229.0/24 maxlen: 24
5.129.230.0/24 maxlen: 24
5.129.231.0/24 maxlen: 24
5.129.232.0/24 maxlen: 24
5.129.233.0/24 maxlen: 24
5.129.234.0/24 maxlen: 24
5.129.235.0/24 maxlen: 24
5.129.236.0/24 maxlen: 24
5.129.237.0/24 maxlen: 24
5.129.238.0/24 maxlen: 24
5.129.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:14:9a:71:d7:5c:02:0d:f9:a8:9a:35:53:0e:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jun 25 03:14:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ab803bfec2fe154442f64802246e626877412a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:12:7e:87:8a:80:04:fe:6a:2e:11:05:a5:d8:
3b:3c:d2:d7:fa:f5:76:dd:bf:4c:9d:04:0d:94:97:
35:33:26:42:82:1e:44:6a:86:33:73:90:57:96:94:
e6:f8:10:58:84:f4:ab:59:42:3b:4f:26:35:f8:35:
df:32:03:39:3b:38:d0:d3:d5:71:4c:1e:77:24:7a:
6c:7a:c5:ea:7f:4c:cd:ae:b5:b4:3e:cc:ed:ed:0e:
e7:ad:f3:1b:82:97:9e:d5:d0:7d:c4:34:72:77:51:
d3:2e:3b:c3:77:ac:8a:a1:85:56:ea:58:cb:a9:af:
8f:89:c6:89:19:2f:c8:88:f0:98:03:a3:49:ba:aa:
c0:68:8f:ef:7b:5d:fa:f1:02:bb:72:ab:53:7c:55:
62:bb:19:f3:2e:ed:a9:3e:b8:cf:90:02:18:7b:ab:
c1:23:17:81:20:d7:1c:40:9c:e4:cf:93:53:47:28:
81:f3:b2:3a:fc:cf:c4:8c:67:da:06:02:39:e3:36:
29:41:0f:71:20:70:15:73:2a:32:da:91:c5:b9:69:
f5:0a:31:55:6b:11:b2:83:8a:45:4b:5f:87:1d:19:
f6:1d:5a:c6:9f:b6:4d:d7:ac:b6:2b:cc:9f:f3:da:
38:42:1b:66:1b:75:2a:db:04:b4:72:ae:f8:6e:33:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:80:3B:FE:C2:FE:15:44:42:F6:48:02:24:6E:62:68:77:41:2A
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/46uAO_7C_hVEQvZIAiRuYmh3QSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.208.0-5.129.210.255
5.129.212.0-5.129.214.255
5.129.216.0/22
5.129.224.0/20
Signature Algorithm: sha256WithRSAEncryption
40:70:47:c4:9c:7c:5b:f6:db:cb:64:d7:04:ca:97:0e:dc:79:
1e:b4:fa:9d:72:2c:e2:e2:3d:bd:96:33:ca:6b:d8:10:21:01:
e2:7f:a9:57:20:e6:7a:56:de:76:83:96:07:99:8c:54:c1:08:
1f:8d:7c:9b:fc:48:ee:6d:63:58:dd:55:43:f9:8b:0f:03:02:
0a:c1:d4:51:36:7a:e4:a9:75:ae:90:86:82:9e:76:7b:da:f2:
ed:b4:f8:6b:19:a1:eb:23:44:ff:73:43:b0:ff:ee:66:cd:f0:
55:2c:d3:a1:65:ad:fe:a4:09:d5:63:ba:27:a6:a3:30:52:a5:
17:c3:44:81:db:97:0b:47:5d:fe:f5:a5:c2:8b:42:a4:59:57:
5e:d0:33:75:4a:79:ba:c2:21:35:92:dc:4c:ce:9f:a3:76:84:
d2:bc:47:97:b0:8c:f0:db:66:95:da:93:1a:8e:5d:2f:31:13:
89:5b:b2:25:f3:ec:59:a9:8b:26:c9:be:92:c5:ca:93:b3:5c:
94:32:aa:13:e7:11:ed:b5:68:ac:30:5d:fe:fe:e8:ee:e1:89:
c5:dc:4e:ef:7f:18:18:38:59:5c:fa:f3:96:b5:ee:95:40:26:
1f:5e:e9:37:6d:09:52:6e:ba:0e:c5:6a:2d:8f:ff:fe:f7:39:
b5:f6:46:47
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZelFJpx11wCDfmomjVTDoT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjUwNjI1MDMxNDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2FiODAzYmZlYzJmZTE1NDQ0MmY2NDgwMjI0NmU2MjY4Nzc0MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RJ+h4qABP5qLhEFpdg7PNLX+vV2
3b9MnQQNlJc1MyZCgh5EaoYzc5BXlpTm+BBYhPSrWUI7TyY1+DXfMgM5OzjQ09Vx
TB53JHpsesXqf0zNrrW0Pszt7Q7nrfMbgpee1dB9xDRyd1HTLjvDd6yKoYVW6ljL
qa+PicaJGS/IiPCYA6NJuqrAaI/ve1368QK7cqtTfFViuxnzLu2pPrjPkAIYe6vB
IxeBINccQJzkz5NTRyiB87I6/M/EjGfaBgI54zYpQQ9xIHAVcyoy2pHFuWn1CjFV
axGyg4pFS1+HHRn2HVrGn7ZN16y2K8yf89o4QhtmG3Uq2wS0cq74bjOxQQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFOOrgDv+wv4VREL2SAIkbmJod0EqMB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvNDZ1QU9fN0NfaFZFUXZaSUFpUnVZbWgzUVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAQFgdAD
BAAFgdIwDAMEAgWB1AMEAAWB1gMEAgWB2AMEBAWB4DANBgkqhkiG9w0BAQsFAAOC
AQEAQHBHxJx8W/bby2TXBMqXDtx5HrT6nXIs4uI9vZYzymvYECEB4n+pVyDmelbe
doOWB5mMVMEIH418m/xI7m1jWN1VQ/mLDwMCCsHUUTZ65Kl1rpCGgp52e9ry7bT4
axmh6yNE/3NDsP/uZs3wVSzToWWt/qQJ1WO6J6ajMFKlF8NEgduXC0dd/vWlwotC
pFlXXtAzdUp5usIhNZLcTM6fo3aE0rxHl7CM8NtmldqTGo5dLzETiVuyJfPsWamL
Jsm+ksXKk7NclDKqE+cR7bVorDBd/v7o7uGJxdxO738YGDhZXPrzlrXulUAmH17p
N20JUm66DsVqLY///vc5tfZGRw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:40:08 2025 by rpki-client