Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/CZXJGRoUoWuu8m8Vf-p8XPEe55c.roa
File: CZXJGRoUoWuu8m8Vf-p8XPEe55c.roa (raw, json)
Hash identifier: m+nDhZl/y7ju9f0kRfYmNOercDH6XJbHZwXUWm6y7JU=
Subject key identifier: 09:95:C9:19:1A:14:A1:6B:AE:F2:6F:15:7F:EA:7C:5C:F1:1E:E7:97
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019890617C6F3B993C414957CA91D6AB5CBF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/CZXJGRoUoWuu8m8Vf-p8XPEe55c.roa
Signing time: Sat 09 Aug 2025 19:49:24 +0000
ROA not before: Sat 09 Aug 2025 19:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.4.0/22 maxlen: 24
46.3.4.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.8.0/22 maxlen: 22
46.3.12.0/22 maxlen: 24
46.3.16.0/22 maxlen: 24
46.3.16.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.18.0/24 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.20.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.64.0/23 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/22 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.3.70.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.72.0/22 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
46.3.86.0/23 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.92.0/22 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.94.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.116.0/23 maxlen: 24
46.3.118.0/24 maxlen: 24
46.3.119.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/23 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.151.0/24 maxlen: 24
46.3.156.0/23 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/22 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/22 maxlen: 24
46.3.168.0/24 maxlen: 24
46.3.169.0/24 maxlen: 24
46.3.170.0/24 maxlen: 24
46.3.171.0/24 maxlen: 24
46.3.172.0/24 maxlen: 24
46.3.174.0/24 maxlen: 24
46.3.175.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.202.0/23 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.220.0/23 maxlen: 24
46.3.223.0/24 maxlen: 24
46.3.224.0/22 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.230.0/23 maxlen: 24
46.3.230.0/24 maxlen: 24
46.3.231.0/24 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/22 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.4.0/23 maxlen: 24
46.232.6.0/23 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/23 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.64.0/22 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.70.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.224.0/23 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.236.0/22 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/23 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/22 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:61:7c:6f:3b:99:3c:41:49:57:ca:91:d6:ab:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Aug 9 19:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0995c9191a14a16baef26f157fea7c5cf11ee797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:a4:f4:40:e7:0a:0f:df:e4:f7:c5:f6:de:
5c:0f:79:c0:d2:e6:93:17:62:bc:9c:85:ca:f2:71:
da:41:88:92:ae:ab:64:f6:a4:07:d6:2c:34:9c:a9:
36:76:57:f0:e8:35:3f:9d:23:fb:8b:63:99:76:9c:
e1:a9:83:25:18:f2:67:df:c9:09:91:b4:fe:56:eb:
39:ec:7b:0e:58:f7:c2:1b:0c:e7:10:3d:7c:6d:5a:
57:10:79:ac:32:39:65:ad:95:95:3f:45:bf:6d:63:
8a:44:49:8a:30:d0:37:e5:08:2b:15:c6:7f:b0:74:
4c:4a:2a:2b:1a:47:ee:3b:67:7c:6a:52:37:0a:c0:
34:87:42:ed:f5:5d:80:6c:bc:e3:cb:31:4c:0f:e5:
e7:a6:69:42:68:7d:7c:2c:7b:63:07:be:42:f0:d7:
8d:b2:1d:26:44:a3:4b:eb:1a:97:1a:45:9f:4d:8c:
d3:4d:c4:ce:89:50:95:a9:83:da:04:ce:36:a7:36:
38:81:c8:08:bb:41:bd:fb:86:8c:f4:78:7e:07:2f:
0b:b0:af:f2:c3:8b:cd:fc:13:41:0f:17:6b:dc:32:
34:cc:32:02:b5:ac:ca:c6:69:b1:9d:3d:d6:a4:ab:
7f:d9:7e:35:38:71:4f:50:77:b3:f1:cf:a5:66:32:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:C9:19:1A:14:A1:6B:AE:F2:6F:15:7F:EA:7C:5C:F1:1E:E7:97
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/CZXJGRoUoWuu8m8Vf-p8XPEe55c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0-46.3.20.255
46.3.23.0/24
46.3.48.0-46.3.66.255
46.3.68.0-46.3.77.255
46.3.84.0-46.3.95.255
46.3.116.0-46.3.131.255
46.3.134.0/23
46.3.148.0/22
46.3.156.0/23
46.3.160.0-46.3.172.255
46.3.174.0/23
46.3.184.0-46.3.190.255
46.3.201.0-46.3.215.255
46.3.220.0/23
46.3.223.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.0.0/21
46.232.16.0/22
46.232.21.0-46.232.23.255
46.232.64.0/21
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.195.0-149.126.196.255
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.214.0/24
149.126.224.0-149.126.226.255
149.126.228.0/24
149.126.231.0/24
149.126.236.0/22
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/22
Signature Algorithm: sha256WithRSAEncryption
17:22:bc:87:3c:36:ea:da:1e:3d:71:74:da:a4:6c:9b:cf:12:
f0:db:8f:79:b4:5f:02:37:43:6b:99:01:2b:2b:90:94:61:cd:
6f:ea:5b:1e:c1:22:1d:9b:b6:77:a2:cd:62:cf:58:7a:4c:fe:
68:71:f6:31:98:f8:e3:2a:56:91:d7:1c:fe:b3:76:da:80:33:
fb:a4:80:c8:5c:47:01:18:42:4b:95:2d:e8:af:6d:49:88:f2:
79:3d:37:84:31:d8:66:fc:1f:b8:9f:fd:69:31:cb:7f:58:e8:
05:cb:90:bc:eb:91:18:ac:ac:bd:73:47:c2:cf:3c:9b:a4:ab:
82:2f:f3:fe:6e:25:a9:d4:c3:1b:34:f0:7b:74:a8:48:e5:c0:
78:0f:49:20:8c:cb:b6:22:35:49:ad:ca:5a:51:a3:a3:0a:57:
c5:51:88:be:b9:78:c5:a2:00:cf:58:73:83:66:d2:d9:db:aa:
c3:85:76:42:53:b6:ce:bb:7b:4c:61:9e:77:eb:da:c9:7b:a5:
dd:66:49:3c:09:1b:a1:4c:6f:52:a5:64:cc:77:5e:15:40:c6:
14:4c:5d:44:cb:d1:84:4f:17:c8:f8:af:61:91:74:aa:76:b0:
29:81:a0:46:e7:3a:9f:09:c8:4a:01:35:88:d7:83:6d:5e:a6:
21:48:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:10 2025 by rpki-client