Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa
File: PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa (raw, json)
Hash identifier: X0DXQ3bBNCzCj3LUePAQk7Zy5NXqPrKEOx5dW7kBo5M=
Subject key identifier: 3C:AE:C1:72:B1:52:D2:5E:5B:9E:56:74:1C:07:F4:CE:CB:F8:75:12
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 01999977B320F5EF80D1B9398D930D9178E5
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa
Signing time: Tue 30 Sep 2025 07:13:02 +0000
ROA not before: Tue 30 Sep 2025 07:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6752
IP address blocks: 46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
46.175.156.0/22 maxlen: 22
46.175.156.0/24 maxlen: 24
46.175.157.0/24 maxlen: 24
46.175.158.0/24 maxlen: 24
46.175.159.0/24 maxlen: 24
80.80.84.0/22 maxlen: 22
80.80.84.0/24 maxlen: 24
80.80.85.0/24 maxlen: 24
80.80.92.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.4.0/22 maxlen: 22
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.80.0/22 maxlen: 22
91.187.83.0/24 maxlen: 24
91.187.84.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
91.187.92.0/22 maxlen: 22
91.187.93.0/24 maxlen: 24
94.125.138.0/23 maxlen: 23
94.125.140.0/23 maxlen: 23
109.111.96.0/19 maxlen: 19
109.111.96.0/22 maxlen: 22
109.111.96.0/24 maxlen: 24
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.111.0/24 maxlen: 24
109.111.112.0/22 maxlen: 22
109.111.116.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
185.87.46.0/23 maxlen: 23
185.132.200.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
185.194.59.0/24 maxlen: 24
185.247.24.0/22 maxlen: 22
188.241.26.0/23 maxlen: 23
194.158.64.0/19 maxlen: 19
194.158.64.0/22 maxlen: 22
194.158.64.0/24 maxlen: 24
194.158.68.0/22 maxlen: 22
194.158.72.0/22 maxlen: 22
194.158.72.0/23 maxlen: 23
194.158.76.0/22 maxlen: 22
194.158.78.0/24 maxlen: 24
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.84.0/24 maxlen: 24
194.158.85.0/24 maxlen: 24
194.158.88.0/22 maxlen: 22
194.158.92.0/22 maxlen: 22
194.158.95.0/24 maxlen: 24
213.236.8.0/24 maxlen: 24
2a02:8060::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:77:b3:20:f5:ef:80:d1:b9:39:8d:93:0d:91:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Sep 30 07:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3caec172b152d25e5b9e56741c07f4cecbf87512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:a5:b4:8a:97:e7:48:be:aa:ca:ac:e5:08:
3a:49:27:ac:4b:58:c6:d6:99:ea:fa:1a:6c:c9:bf:
a4:3b:02:0e:b6:e4:49:5b:64:7e:3b:12:49:9c:79:
fa:ed:8a:78:e4:b5:af:fe:a6:2c:3d:dc:93:35:da:
f2:1e:16:e5:a5:7c:41:de:c2:0b:cd:a0:5a:09:bd:
d6:25:e6:c2:3a:30:46:11:c7:52:36:65:49:48:e3:
8e:15:b1:61:07:2c:dc:42:5b:0d:50:67:a3:a9:f6:
40:77:8c:33:63:14:88:87:57:45:d2:29:5f:68:43:
b1:14:70:6b:b8:1d:cb:97:b0:66:50:f6:c3:a1:25:
7d:11:17:34:c4:56:c9:87:0e:83:25:b5:c4:4d:cc:
a4:a9:15:9c:a1:03:03:cc:c6:28:dd:7d:38:d1:27:
0e:a8:79:ba:fb:21:9a:51:f5:ed:e0:66:5a:c7:a2:
0a:2c:a4:1e:33:d7:86:8d:11:dc:fc:83:10:04:e8:
de:73:40:fb:4f:73:23:5a:1e:2c:80:2e:58:43:83:
4e:96:7b:43:b1:89:4a:ee:78:35:76:4b:ec:c2:69:
f7:46:16:9c:ed:2c:35:44:a1:97:39:70:3e:99:34:
65:63:38:89:0d:ef:a1:7a:a4:6b:d0:c6:b4:84:36:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:C1:72:B1:52:D2:5E:5B:9E:56:74:1C:07:F4:CE:CB:F8:75:12
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
94.125.138.0-94.125.141.255
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
185.247.24.0/22
188.241.26.0/23
194.158.64.0/19
213.236.8.0/24
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
25:6d:19:e4:0e:44:14:ff:09:72:b9:26:62:33:51:e1:cd:78:
e7:1b:0d:78:39:e4:99:38:6f:e7:61:b1:6f:10:ba:b6:1f:ac:
f6:21:c3:15:7b:6f:a3:a4:76:1d:ae:06:18:75:dd:87:cb:26:
00:9b:15:a0:d0:2e:21:c9:3c:40:7f:79:e4:6c:46:5a:2a:87:
71:ea:ba:28:17:46:4e:6d:01:67:d7:8d:81:81:75:94:ae:cf:
6b:9a:51:98:d5:b3:fa:cd:4f:46:db:41:1d:78:3d:9d:2b:81:
38:4d:13:6b:93:be:95:3f:1f:41:d7:dd:aa:97:cb:01:62:e4:
3d:ae:99:56:f0:39:67:f8:97:4b:f7:09:e1:f0:e0:e5:85:60:
00:ed:61:10:2f:66:9c:4d:90:43:19:74:a7:1d:12:65:95:5c:
cb:fe:24:0f:98:46:e2:f5:a6:02:d6:e4:ca:9d:16:5e:c2:08:
9d:2b:53:26:b1:42:cc:bf:09:59:95:6e:e3:33:2b:74:c3:b2:
41:b1:55:4e:03:b2:09:c9:ad:a2:93:b1:07:f5:e5:bd:bf:de:
3d:2d:2b:ad:d8:65:44:e9:fb:96:64:b4:84:a6:ce:f5:b1:b8:
ff:47:00:90:a8:10:35:b3:bd:de:72:ec:44:89:94:c8:6b:29:
38:cd:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:48 2025 by rpki-client