Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/BxC0D_I8cfkE04FMob8aYCC9sOA.roa
File: BxC0D_I8cfkE04FMob8aYCC9sOA.roa (raw, json)
Hash identifier: 8IymUbIEXnnTEcSvkY2I75XlihbCRPpcceQZo2zPDi4=
Subject key identifier: 07:10:B4:0F:F2:3C:71:F9:04:D3:81:4C:A1:BF:1A:60:20:BD:B0:E0
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0197883191EB5AEC854CC25993D1DCB9F44E
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/BxC0D_I8cfkE04FMob8aYCC9sOA.roa
Signing time: Thu 19 Jun 2025 12:37:19 +0000
ROA not before: Thu 19 Jun 2025 12:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.151.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
109.69.164.0/22 maxlen: 22
109.69.164.0/24 maxlen: 24
109.69.165.0/24 maxlen: 24
109.69.166.0/24 maxlen: 24
109.69.167.0/24 maxlen: 24
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
2a03:8480::/33 maxlen: 33
2a03:8480:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:31:91:eb:5a:ec:85:4c:c2:59:93:d1:dc:b9:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jun 19 12:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0710b40ff23c71f904d3814ca1bf1a6020bdb0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:7b:ec:5f:ae:a6:7c:5f:70:7c:c3:bb:16:
e0:32:73:65:77:a4:a3:7c:30:8e:b1:ff:46:c8:f3:
2a:b0:cd:c5:f0:cb:3c:78:87:c7:1f:fb:e3:05:65:
81:a7:c7:10:c1:0a:b9:dc:7d:85:17:c8:e8:fe:27:
19:cb:80:ab:9a:d7:c8:b7:96:3f:11:38:69:5a:8b:
c1:79:5f:05:ee:33:c1:c6:48:33:ab:f6:c4:2d:b0:
08:30:cb:91:95:c3:87:29:1a:85:8f:a1:f3:f1:3a:
a5:65:ca:cd:31:c4:26:e5:a8:91:86:99:e0:fa:ce:
28:f2:33:2c:b7:dc:9c:99:cd:ac:c2:34:fe:70:c9:
82:57:26:62:48:77:84:45:92:0c:5f:d0:b5:ab:a0:
d7:73:6f:7a:e7:22:26:d6:fb:a8:51:f4:ba:f8:18:
9c:5c:6a:69:37:24:8a:84:a8:38:c5:44:2d:12:fa:
b9:2e:c5:e8:fd:9e:d9:06:dd:a4:c6:9d:24:4a:1b:
65:32:27:66:82:5a:89:d8:43:cc:06:0d:dc:51:e9:
71:02:83:63:00:9c:43:02:8e:a8:90:20:c5:be:c6:
fe:23:ef:77:1b:4b:f5:a8:56:b4:9e:1a:15:65:18:
cd:b3:25:a6:bf:87:1c:fa:c1:a1:0a:ba:da:3c:6d:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:B4:0F:F2:3C:71:F9:04:D3:81:4C:A1:BF:1A:60:20:BD:B0:E0
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/BxC0D_I8cfkE04FMob8aYCC9sOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/23
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
109.69.164.0/22
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
26:10:6c:df:13:2f:49:5e:f9:f7:60:d4:61:72:86:3d:01:28:
6c:e9:44:c3:5d:37:e7:8c:5a:8b:52:f2:67:40:fa:30:58:e1:
cf:bc:31:c5:d4:77:5d:29:55:6c:ee:ce:d7:e2:6c:48:df:1a:
69:15:bd:47:50:06:7e:a7:bb:09:44:06:69:b9:30:e9:3a:8b:
13:71:be:59:82:c2:bb:69:11:cd:dc:f6:0b:90:68:f2:0b:7f:
82:b2:2f:70:cf:3a:fb:65:d1:87:48:e9:7d:e2:e2:5c:83:43:
5d:33:59:83:ea:dc:ba:10:10:28:39:ca:3b:dc:49:77:1f:00:
93:1f:f6:6e:13:15:06:b9:ed:f6:71:b5:0b:de:ee:5a:fc:2e:
d2:d9:f1:d1:aa:a7:a7:3e:59:63:3f:ab:95:13:5b:3d:7d:08:
af:ad:cc:23:61:75:51:ad:49:5b:b8:f6:ac:a4:34:8d:23:50:
9d:aa:07:5e:c5:63:42:6a:90:3e:59:ab:5e:b8:4a:09:3e:b1:
f3:ff:e0:97:2f:da:32:76:db:35:1a:fd:e0:71:1f:d2:cf:e9:
69:f7:0b:91:5d:46:fe:ac:1c:b2:1d:9b:84:e7:48:3f:f9:92:
a1:dc:5c:19:42:53:d6:a5:2d:db:29:ee:66:dd:e4:72:cb:43:
11:6b:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:53:09 2025 by rpki-client