Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa
File: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (raw, json)
Hash identifier: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=
Subject key identifier: 5F:71:3D:76:4A:CC:A9:60:7F:0C:8A:85:65:D5:6B:65:B8:37:7B:FE
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0198A4DAE0C6F0C28C8E0F381D76032035D1
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa
Signing time: Wed 13 Aug 2025 19:14:24 +0000
ROA not before: Wed 13 Aug 2025 19:14:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
79.173.128.0/18 maxlen: 18
79.173.128.0/19 maxlen: 19
79.173.128.0/20 maxlen: 20
79.173.128.0/21 maxlen: 21
79.173.136.0/21 maxlen: 21
79.173.144.0/21 maxlen: 21
79.173.152.0/21 maxlen: 21
79.173.160.0/19 maxlen: 19
79.173.160.0/21 maxlen: 21
79.173.168.0/21 maxlen: 21
79.173.176.0/21 maxlen: 21
79.173.184.0/21 maxlen: 21
80.252.120.0/22 maxlen: 22
83.143.224.0/21 maxlen: 21
83.143.224.0/22 maxlen: 22
83.143.228.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
162.255.208.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.128.0/20 maxlen: 20
195.167.128.0/21 maxlen: 21
195.167.136.0/21 maxlen: 21
195.167.138.0/24 maxlen: 24
195.167.176.0/20 maxlen: 20
195.167.176.0/21 maxlen: 21
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
195.167.184.0/21 maxlen: 21
195.167.184.0/24 maxlen: 24
195.167.186.0/24 maxlen: 24
195.167.187.0/24 maxlen: 24
195.167.189.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
209.42.8.0/21 maxlen: 21
2a00:5840::/32 maxlen: 32
2a02:890::/32 maxlen: 32
2a06:e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:da:e0:c6:f0:c2:8c:8e:0f:38:1d:76:03:20:35:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Aug 13 19:14:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f713d764acca9607f0c8a8565d56b65b8377bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:a3:fe:09:31:b6:82:0c:78:b9:1e:b5:42:
0d:05:8b:29:b7:da:31:8b:ff:c7:4d:3a:89:2f:1e:
04:cd:e7:cd:3d:7e:29:79:a6:73:e6:7e:1f:5b:cd:
1a:02:91:e4:16:00:b4:94:b2:37:2b:83:9a:64:4f:
ae:86:55:34:16:55:53:a2:c9:43:53:02:3d:c2:7b:
c5:33:e1:0d:f3:7a:93:32:13:37:5d:74:60:e8:0b:
e3:ab:b4:14:e1:c4:42:5e:9f:4c:63:1c:30:36:3c:
e2:4b:79:12:84:ef:86:2f:c3:65:c3:33:db:d2:d7:
2e:81:ba:eb:17:12:2a:c5:71:62:fb:6f:09:b0:09:
58:12:ba:ba:a4:8a:f5:8b:99:da:ef:a5:27:0a:57:
6e:f4:40:f6:b0:a2:e8:8d:28:c8:dd:04:97:25:92:
25:c5:dd:16:55:68:92:7b:e3:a0:38:23:f9:cd:0a:
6a:c7:3f:20:6d:b5:90:0a:ae:01:b0:f1:ee:a4:ae:
48:a5:16:6e:56:24:7e:b6:e1:40:7a:6f:4a:a2:dc:
12:6d:45:a0:dd:ff:ea:f2:17:81:31:94:e9:37:8a:
3a:8f:18:23:c4:0d:f8:15:78:d0:cf:77:c7:e3:02:
0c:24:d9:c8:a9:15:77:b0:d3:72:55:87:73:76:b6:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:3D:76:4A:CC:A9:60:7F:0C:8A:85:65:D5:6B:65:B8:37:7B:FE
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
79.173.128.0/18
80.252.120.0/22
83.143.224.0/21
103.110.208.0/22
109.224.248.0/21
162.255.208.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.128.0/20
195.167.176.0/20
209.42.4.0-209.42.15.255
IPv6:
2a00:5840::/32
2a02:890::/32
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
e5:d9:84:60:f6:d6:77:c8:ac:13:ff:14:64:1a:82:8d:39:f4:
7c:2e:90:75:6c:e9:9e:58:0d:10:a8:9e:8e:fd:7e:89:b0:ae:
0d:6d:b3:32:4b:b0:0c:74:9a:6f:e8:cb:17:36:11:cc:14:90:
94:45:08:36:ef:5c:59:ff:91:76:c6:8a:b0:5a:e3:13:88:74:
bd:d7:20:69:46:7c:8f:14:56:36:cf:54:75:a2:18:1b:42:ab:
1d:0e:6a:94:75:00:55:4a:7f:a5:9c:31:a3:91:bd:7f:a7:29:
ef:bf:b9:01:eb:34:1a:7a:7d:64:1d:b2:62:5f:da:7c:66:af:
28:b6:76:36:ca:73:71:f1:37:67:63:61:37:ba:2a:f7:9e:ad:
0d:03:d9:4c:22:09:e9:65:36:8f:e1:0e:84:a8:c8:b3:4d:5e:
76:44:fa:c0:63:6f:bd:ad:29:09:74:38:9b:60:1f:70:59:be:
21:69:bb:3f:f2:01:f8:13:00:3a:f0:32:41:51:7a:8b:bd:14:
c6:0c:89:83:a7:ac:6e:6c:40:4a:6a:92:ea:a5:14:80:67:0b:
55:17:4f:97:8b:21:9a:54:39:06:75:40:21:b3:3c:e2:0f:84:
99:41:f7:30:be:a4:40:a0:aa:6d:1a:db:c1:88:e4:53:e4:86:
85:b1:22:49
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZik2uDG8MKMjg84HXYDIDXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjUwODEzMTkxNDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjcxM2Q3NjRhY2NhOTYwN2YwYzhhODU2NWQ1NmI2NWI4Mzc3YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN6j/gkxtoIMeLketUINBYspt9ox
i//HTTqJLx4EzefNPX4peaZz5n4fW80aApHkFgC0lLI3K4OaZE+uhlU0FlVToslD
UwI9wnvFM+EN83qTMhM3XXRg6Avjq7QU4cRCXp9MYxwwNjziS3kShO+GL8NlwzPb
0tcugbrrFxIqxXFi+28JsAlYErq6pIr1i5na76UnCldu9ED2sKLojSjI3QSXJZIl
xd0WVWiSe+OgOCP5zQpqxz8gbbWQCq4BsPHupK5IpRZuViR+tuFAem9KotwSbUWg
3f/q8heBMZTpN4o6jxgjxA34FXjQz3fH4wIMJNnIqRV3sNNyVYdzdrZ6NQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFF9xPXZKzKlgfwyKhWXVa2W4N3v+MB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvWDNFOWRrck1xV0JfRElxRlpkVnJaYmczZV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzBoBAIAATBiAwQCLZaM
AwQCT2NYAwQGT62AAwQCUPx4AwQDU4/gAwQCZ27QAwQDbeD4AwQDov/QAwQCuWyo
AwQCuc2sAwQBwbI2AwQBwbJwAwQEw6eAAwQEw6ewMAwDBALRKgQDBATRKgAwGwQC
AAIwFQMFACoAWEADBQAqAgiQAwUDKgYOQDANBgkqhkiG9w0BAQsFAAOCAQEA5dmE
YPbWd8isE/8UZBqCjTn0fC6QdWzpnlgNEKiejv1+ibCuDW2zMkuwDHSab+jLFzYR
zBSQlEUINu9cWf+RdsaKsFrjE4h0vdcgaUZ8jxRWNs9UdaIYG0KrHQ5qlHUAVUp/
pZwxo5G9f6cp77+5Aes0Gnp9ZB2yYl/afGavKLZ2NspzcfE3Z2NhN7oq956tDQPZ
TCIJ6WU2j+EOhKjIs01edkT6wGNvva0pCXQ4m2AfcFm+IWm7P/IB+BMAOvAyQVF6
i70UxgyJg6esbmxASmqS6qUUgGcLVRdPl4shmlQ5BnVAIbM84g+EmUH3ML6kQKCq
bRrbwYjkU+SGhbEiSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:13 2025 by rpki-client