Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/avJEaghetulkdy61P3vVvRtnwao.roa
File: avJEaghetulkdy61P3vVvRtnwao.roa (raw, json)
Hash identifier: isq8BGshz+w5RQmqprep+yBn/iuxAmpetPcOYQFYWJs=
Subject key identifier: 6A:F2:44:6A:08:5E:B6:E9:64:77:2E:B5:3F:7B:D5:BD:1B:67:C1:AA
Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial: 0198A73C9F155C5AB17ED090D6F9AC1A6777
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/avJEaghetulkdy61P3vVvRtnwao.roa
Signing time: Thu 14 Aug 2025 06:20:24 +0000
ROA not before: Thu 14 Aug 2025 06:20:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42442
IP address blocks: 46.167.160.0/19 maxlen: 24
46.167.169.0/24 maxlen: 32
46.167.169.20/32 maxlen: 32
46.167.173.0/24 maxlen: 32
91.208.160.0/24 maxlen: 24
130.0.72.0/21 maxlen: 32
130.0.73.0/24 maxlen: 24
130.0.77.0/24 maxlen: 24
185.165.16.0/22 maxlen: 22
194.50.164.0/24 maxlen: 32
195.137.170.0/24 maxlen: 32
195.137.170.121/32 maxlen: 32
195.137.170.122/32 maxlen: 32
2a00:f660::/32 maxlen: 32
2a03:9480::/32 maxlen: 32
2a03:9480:200::/40 maxlen: 40
2a03:9480:300::/40 maxlen: 40
2a03:9480:301::/48 maxlen: 48
2a03:9480:302::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:3c:9f:15:5c:5a:b1:7e:d0:90:d6:f9:ac:1a:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Validity
Not Before: Aug 14 06:20:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6af2446a085eb6e964772eb53f7bd5bd1b67c1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:a0:50:78:c7:37:d3:9f:83:af:6d:13:0d:
60:f7:b2:db:ef:bb:c0:d1:a2:85:3f:d3:7e:f1:cd:
21:cb:33:1b:f9:c6:cd:62:5b:d1:86:10:41:96:de:
ba:11:73:2f:33:03:70:d5:d1:fc:ba:0b:21:18:08:
bd:b2:c9:ba:31:6b:41:6c:17:58:b0:b8:7c:44:0e:
81:14:6c:dc:09:70:58:63:be:0c:f4:02:c1:fa:3f:
db:64:a9:34:57:ba:c0:b0:33:b2:7b:e4:2c:af:c8:
1d:1c:7d:5e:8e:22:3a:a4:c1:25:f0:54:01:cf:12:
f7:62:81:7c:85:ac:eb:77:91:4f:0d:70:b9:e4:20:
f8:25:ef:a1:84:5b:dd:b0:f6:89:1f:25:39:b0:a8:
3b:c1:7d:4d:88:37:5e:f3:68:6d:fb:3a:d2:09:13:
17:eb:92:db:94:50:c9:6e:cb:01:bb:de:ed:f6:4e:
a1:c1:a4:8a:15:70:83:f4:6a:bf:69:fa:1d:90:02:
72:7f:fb:35:cd:f8:57:86:25:08:cb:11:c3:26:0e:
a4:71:ec:69:83:64:ad:7f:d7:03:0c:94:f6:f6:37:
28:68:8c:76:84:70:15:ed:f1:88:7e:5b:e1:5b:b1:
3f:17:db:2e:f0:28:ff:d4:a1:f6:bc:e0:fa:6e:15:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:44:6A:08:5E:B6:E9:64:77:2E:B5:3F:7B:D5:BD:1B:67:C1:AA
X509v3 Authority Key Identifier:
keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/avJEaghetulkdy61P3vVvRtnwao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.160.0/19
91.208.160.0/24
130.0.72.0/21
185.165.16.0/22
194.50.164.0/24
195.137.170.0/24
IPv6:
2a00:f660::/32
2a03:9480::/32
Signature Algorithm: sha256WithRSAEncryption
7a:c2:ab:98:29:fd:31:b7:56:6a:00:92:df:89:5e:c6:66:54:
14:e5:5b:5b:16:ca:53:80:d9:88:a8:58:10:77:40:ca:a4:73:
35:9e:4b:ad:5b:f8:4b:b6:dc:b9:ba:c2:22:4f:46:0b:7b:fa:
33:78:56:72:fa:15:e6:b4:d5:f1:48:2e:c0:cd:88:db:d7:bf:
e7:d6:7b:b4:69:d7:eb:c5:08:71:16:ae:3d:ff:d2:f8:eb:0d:
04:09:64:1d:55:04:e7:6f:4e:c9:c6:de:9b:d9:3b:8b:ee:f6:
4c:9a:00:2a:d9:10:b2:5f:51:85:43:0e:dc:19:d7:11:27:b1:
55:cc:98:34:19:98:25:62:0a:da:7d:9b:6b:84:cf:d6:e1:77:
d0:95:61:48:ed:86:a9:aa:f2:95:05:5f:d1:f2:fe:55:3b:fe:
d0:59:a1:45:c5:00:a2:ee:ef:52:33:de:5d:b9:cc:27:7d:1f:
ef:2d:4c:30:83:b4:3e:2d:f8:54:87:6b:bc:2e:c4:06:11:1e:
34:dd:81:fa:6f:6b:28:0c:db:01:c8:63:1d:cf:24:6f:5d:16:
73:49:62:a4:ab:08:c6:ed:19:4e:e0:27:0e:87:d1:01:a2:20:
9d:69:48:f3:e8:6d:8d:39:80:1d:6b:db:23:50:8c:3d:20:ef:
05:2e:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:12:06 2025 by rpki-client