Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8Cd-XgxSv6ohOnTWeXSLAuARRG4.roa
File: 8Cd-XgxSv6ohOnTWeXSLAuARRG4.roa (raw, json)
Hash identifier: ixerOPdqEcOruaBwLEca3uAIxXGOOdyI1K0JP9P4nf4=
Subject key identifier: F0:27:7E:5E:0C:52:BF:AA:21:3A:74:D6:79:74:8B:02:E0:11:44:6E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019890617D48F71F79259E796663EBD5721C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8Cd-XgxSv6ohOnTWeXSLAuARRG4.roa
Signing time: Sat 09 Aug 2025 19:49:24 +0000
ROA not before: Sat 09 Aug 2025 19:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.4.0/22 maxlen: 24
46.3.8.0/23 maxlen: 24
46.3.8.0/24 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.16.0/22 maxlen: 24
46.3.20.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.64.0/23 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/22 maxlen: 24
46.3.72.0/22 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.80.0/21 maxlen: 21
46.3.84.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
46.3.86.0/23 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.92.0/22 maxlen: 24
46.3.116.0/23 maxlen: 24
46.3.118.0/23 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.148.0/22 maxlen: 24
46.3.156.0/23 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/22 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/22 maxlen: 24
46.3.172.0/24 maxlen: 24
46.3.175.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.202.0/23 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/22 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.230.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/22 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.6.0/23 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/23 maxlen: 24
46.232.64.0/22 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.70.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.224.0/23 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.236.0/22 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/23 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:61:7d:48:f7:1f:79:25:9e:79:66:63:eb:d5:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Aug 9 19:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0277e5e0c52bfaa213a74d679748b02e011446e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:2b:3c:33:4a:8c:64:2a:f8:f9:11:3e:c7:
35:d0:a0:c7:7f:7c:c1:22:11:af:08:dd:e0:62:28:
e3:13:ef:a8:6c:7a:4a:79:82:81:0f:b5:49:8c:a0:
8d:ef:02:56:ba:9d:d3:fb:15:e5:35:ab:c7:9d:8c:
77:59:f8:fe:8e:ee:6f:5e:df:77:2c:9b:a8:fb:c5:
39:b0:9d:e9:ef:de:92:d6:39:13:f8:bf:25:82:1a:
06:60:d1:94:15:03:f2:84:3f:c5:09:5f:fe:b0:ab:
da:a5:2a:bf:02:03:c0:0c:84:a2:52:9a:14:1a:3b:
87:fc:0f:96:a2:73:8a:d6:c6:70:d7:aa:77:40:b7:
10:dd:ae:05:07:f6:ab:32:ba:5a:ef:16:48:16:84:
36:75:58:40:c8:f3:e4:83:5a:7a:42:6c:91:59:cf:
2b:4b:4b:c6:a4:78:9a:5f:d7:90:ed:62:15:d8:3d:
ec:e0:97:00:ed:34:3b:38:f9:3a:17:ba:8b:0c:7c:
3c:37:9a:cf:5b:d3:bf:34:a9:63:d4:ae:28:79:c3:
2a:40:4c:1c:21:9c:d8:f2:02:86:ba:60:3d:39:1c:
59:95:fb:b5:00:15:fe:e7:ba:95:8f:64:43:54:d9:
94:f0:90:f4:16:38:6f:f0:fe:29:e6:e6:7c:01:9c:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:7E:5E:0C:52:BF:AA:21:3A:74:D6:79:74:8B:02:E0:11:44:6E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8Cd-XgxSv6ohOnTWeXSLAuARRG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0-46.3.9.255
46.3.12.0-46.3.20.255
46.3.23.0/24
46.3.48.0-46.3.66.255
46.3.68.0-46.3.77.255
46.3.80.0/20
46.3.116.0-46.3.131.255
46.3.134.0/23
46.3.148.0/22
46.3.156.0/23
46.3.160.0-46.3.172.255
46.3.175.0/24
46.3.184.0/21
46.3.201.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.246.255
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.0.0/22
46.232.6.0/23
46.232.16.0/22
46.232.21.0-46.232.23.255
46.232.64.0/21
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.196.0/24
149.126.198.0/24
149.126.203.0-149.126.204.255
149.126.206.0/24
149.126.208.0/24
149.126.224.0-149.126.226.255
149.126.228.0/24
149.126.231.0/24
149.126.236.0/22
149.126.242.0/24
149.126.244.0/23
149.126.251.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
4e:51:c3:3d:b3:fa:72:f0:8d:84:71:f5:ec:ac:01:16:d5:2e:
de:a1:80:1f:18:54:62:97:11:cb:c3:fe:6b:ed:f1:7a:ca:bc:
91:2f:05:0e:0b:a2:a5:ca:ca:87:4c:f6:d5:0e:91:97:79:af:
ca:be:3d:6e:45:54:59:da:7a:39:19:0e:a6:18:6e:e0:4c:9e:
1b:85:57:bd:52:4e:43:52:14:2c:c4:9f:6b:ec:4d:e0:d6:65:
4b:5f:21:02:99:a3:c7:09:7e:3d:28:0f:9f:a9:a5:02:d9:22:
a7:36:d9:16:03:b3:97:a0:de:a9:dc:c5:0b:10:79:ee:2f:be:
df:15:af:41:82:a6:66:ae:cf:22:38:11:60:ff:40:5a:11:db:
39:cb:59:49:70:50:e6:35:b8:48:9a:14:8f:e7:04:45:20:b5:
58:0e:fc:7d:c7:da:c9:f4:01:1c:97:63:17:09:df:e5:af:ec:
5b:06:8c:82:e8:92:2b:83:82:18:6f:a5:c0:ad:3d:27:07:9b:
5c:ad:5d:3d:98:dd:c2:34:08:ba:08:71:f0:83:24:c7:cb:08:
5f:9f:1f:23:f7:c6:ae:b8:8c:31:df:f1:12:2b:74:6d:8b:2a:
62:c4:45:7e:36:6e:c6:ee:da:23:b0:30:e4:e1:94:32:e4:8f:
24:1c:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:20 2025 by rpki-client