Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ksrEobalLCBWyKJfEvgKO7eGBn0.roa
File: ksrEobalLCBWyKJfEvgKO7eGBn0.roa (raw, json)
Hash identifier: mhEeMKvhAtKkfgKwj2K8qvolMSVHSEc7JsD/l79bIzA=
Subject key identifier: 92:CA:C4:A1:B6:A5:2C:20:56:C8:A2:5F:12:F8:0A:3B:B7:86:06:7D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0198CBF89BB0F8BDCFAE1929690D4BFEC8F7
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ksrEobalLCBWyKJfEvgKO7eGBn0.roa
Signing time: Thu 21 Aug 2025 09:32:04 +0000
ROA not before: Thu 21 Aug 2025 09:32:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24589
IP address blocks: 31.42.80.0/20 maxlen: 20
83.243.88.0/21 maxlen: 21
84.38.136.0/21 maxlen: 21
87.99.64.0/19 maxlen: 19
87.99.64.0/24 maxlen: 24
87.99.65.0/24 maxlen: 24
87.99.66.0/24 maxlen: 24
87.99.67.0/24 maxlen: 24
87.99.95.0/24 maxlen: 24
88.135.128.0/19 maxlen: 19
91.90.224.0/19 maxlen: 29
91.90.225.0/24 maxlen: 24
91.90.230.0/24 maxlen: 24
91.90.231.0/24 maxlen: 24
91.90.236.0/24 maxlen: 24
91.90.237.0/25 maxlen: 25
91.90.238.0/24 maxlen: 24
91.90.252.64/29 maxlen: 29
91.90.255.0/24 maxlen: 24
91.233.214.0/23 maxlen: 23
109.197.208.0/21 maxlen: 21
109.197.208.0/24 maxlen: 24
109.229.192.0/19 maxlen: 19
171.25.218.0/23 maxlen: 23
176.103.176.0/22 maxlen: 22
176.103.184.0/24 maxlen: 24
176.106.48.0/20 maxlen: 20
176.106.100.0/23 maxlen: 23
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
185.47.10.0/24 maxlen: 24
185.47.11.0/24 maxlen: 24
185.220.196.0/22 maxlen: 22
185.220.196.0/24 maxlen: 24
193.111.244.0/22 maxlen: 22
193.238.212.0/22 maxlen: 22
193.238.212.128/25 maxlen: 25
193.238.216.0/21 maxlen: 21
194.9.212.0/22 maxlen: 22
194.9.212.0/24 maxlen: 24
195.69.88.0/22 maxlen: 22
213.110.64.0/23 maxlen: 23
213.110.76.0/22 maxlen: 22
213.110.80.0/20 maxlen: 20
2a01:8ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:f8:9b:b0:f8:bd:cf:ae:19:29:69:0d:4b:fe:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 21 09:32:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92cac4a1b6a52c2056c8a25f12f80a3bb786067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:8b:eb:89:d6:36:fb:b8:1d:77:81:52:93:
d0:d0:62:80:df:fb:28:24:7e:03:57:0b:b9:ab:8a:
6b:79:49:43:ab:dc:cf:da:b6:83:7e:21:37:af:8d:
e6:90:dd:ec:1f:36:73:23:1f:80:c7:1b:d4:c1:41:
df:9a:65:a4:d0:e4:7c:62:ab:43:70:95:0e:4b:82:
5a:30:88:73:8e:b5:c9:7f:55:1a:a2:82:eb:57:64:
29:7e:23:84:1a:6b:ad:66:0f:31:81:42:32:c9:8c:
2a:48:b1:86:72:4b:c7:e7:32:01:41:3e:8a:9c:6e:
33:3a:a5:71:65:ed:3a:e9:bf:18:35:25:7f:79:9e:
9f:88:96:2c:ed:ad:3f:74:5b:ac:6f:84:38:19:21:
ce:d8:c7:77:02:dd:b5:1d:93:a4:90:1e:22:a1:02:
79:11:4c:74:8b:a0:64:84:a0:85:ea:cf:63:31:1b:
e1:f8:b8:77:64:c8:da:d0:63:09:48:5e:97:92:6e:
b3:8d:e0:36:0b:fe:db:a3:fd:0b:90:77:cf:2f:c5:
f0:32:b4:df:24:e6:57:16:59:26:98:2b:93:23:26:
fe:74:95:2d:ea:c1:de:49:bd:5c:97:a1:fe:95:e3:
da:5c:30:49:ca:11:9e:a1:84:2b:26:51:67:a1:f4:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:C4:A1:B6:A5:2C:20:56:C8:A2:5F:12:F8:0A:3B:B7:86:06:7D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ksrEobalLCBWyKJfEvgKO7eGBn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.80.0/20
83.243.88.0/21
84.38.136.0/21
87.99.64.0/19
88.135.128.0/19
91.90.224.0/19
91.233.214.0/23
109.197.208.0/21
109.229.192.0/19
171.25.218.0/23
176.103.176.0/22
176.103.184.0/24
176.106.48.0/20
176.106.100.0/23
176.106.160.0-176.106.183.255
185.47.10.0/23
185.220.196.0/22
193.111.244.0/22
193.238.212.0-193.238.223.255
194.9.212.0/22
195.69.88.0/22
213.110.64.0/23
213.110.76.0-213.110.95.255
IPv6:
2a01:8ca0::/32
Signature Algorithm: sha256WithRSAEncryption
73:0c:e8:4f:da:7d:ba:1a:05:a9:70:b2:7e:d9:0e:72:24:f2:
ee:a5:1b:4b:a2:3c:08:a0:d3:31:a0:44:9f:a4:fd:2a:31:28:
8b:41:a8:70:1b:cc:a2:88:56:09:45:4b:fa:eb:35:c7:c5:1c:
d8:da:37:13:33:fb:a1:c6:30:e1:5b:48:72:5d:d5:d0:31:59:
9f:9c:51:f2:87:f1:3f:0e:06:d0:50:3f:73:98:26:69:6f:69:
d8:60:59:67:d9:64:6f:01:47:4a:a3:b4:f8:88:b2:bf:ef:84:
44:af:5d:be:3b:57:4e:18:87:63:a9:2f:d8:ab:76:59:8d:25:
6d:31:dc:1f:cd:dc:91:82:4a:0f:8d:08:a7:be:45:14:6c:34:
84:55:8c:83:b9:38:5c:b8:5c:82:7a:06:f0:3b:22:91:32:ed:
4e:dd:28:d1:b8:e1:2b:dc:b7:39:a2:aa:c6:00:e4:c8:f5:d6:
c9:41:3e:bf:80:f3:1e:8e:ba:8d:b3:75:b8:8d:3e:0a:9b:93:
3d:31:f2:ce:fc:ed:61:49:02:e6:19:7d:bb:44:a8:52:9e:18:
76:67:38:eb:84:0a:51:24:5e:e7:79:f4:fe:c8:ba:66:cd:48:
a0:3d:34:bb:fa:f1:57:8b:b9:ab:41:a8:e7:89:ec:d3:6e:89:
50:67:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:23:49 2025 by rpki-client