Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/Kn2L20HdTOIfu80Nn50DjBWA6Jo.roa
File: Kn2L20HdTOIfu80Nn50DjBWA6Jo.roa (raw, json)
Hash identifier: t13d2OWM34SoyNogtqsGXCD1a9gIw5aEGwzH9T6/vCE=
Subject key identifier: 2A:7D:8B:DB:41:DD:4C:E2:1F:BB:CD:0D:9F:9D:03:8C:15:80:E8:9A
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 0199868451DAD3D424C2D39256084ED9C9DE
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/Kn2L20HdTOIfu80Nn50DjBWA6Jo.roa
Signing time: Fri 26 Sep 2025 14:54:02 +0000
ROA not before: Fri 26 Sep 2025 14:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1267
IP address blocks: 31.190.0.0/16 maxlen: 16
31.191.0.0/16 maxlen: 16
37.100.0.0/16 maxlen: 16
37.101.0.0/16 maxlen: 16
37.102.0.0/16 maxlen: 16
37.103.0.0/16 maxlen: 16
91.254.0.0/16 maxlen: 16
91.255.0.0/16 maxlen: 16
91.255.0.0/19 maxlen: 19
94.160.0.0/16 maxlen: 16
94.161.0.0/16 maxlen: 16
94.162.0.0/16 maxlen: 16
94.163.0.0/16 maxlen: 16
94.164.0.0/16 maxlen: 16
94.164.0.0/17 maxlen: 17
94.164.128.0/17 maxlen: 17
94.165.0.0/16 maxlen: 16
94.165.128.0/17 maxlen: 17
94.166.0.0/16 maxlen: 16
94.167.0.0/16 maxlen: 16
94.167.0.0/17 maxlen: 17
94.167.128.0/17 maxlen: 17
176.206.0.0/16 maxlen: 16
176.207.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:84:51:da:d3:d4:24:c2:d3:92:56:08:4e:d9:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Sep 26 14:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a7d8bdb41dd4ce21fbbcd0d9f9d038c1580e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:7e:ef:71:55:35:f3:f1:37:01:fe:e2:21:
ab:04:76:13:ac:d4:83:c6:a0:bf:33:a8:6a:d4:13:
ef:55:0b:6c:5a:b7:11:37:8e:02:16:6f:5a:0d:13:
0e:c8:4d:5a:17:1b:e3:2d:7d:e3:49:72:db:f8:9d:
52:9c:9d:ee:4d:a5:33:39:69:a5:97:58:4c:08:6a:
7c:0f:07:32:96:30:01:f5:af:7b:0b:76:40:1b:dc:
14:c2:53:35:64:1d:80:c4:cf:06:38:9a:78:9f:a4:
6a:34:9a:47:49:af:53:e1:fe:62:50:f3:0d:81:40:
f0:ef:0d:f1:15:57:eb:5a:93:3f:ee:3f:fb:ad:cf:
31:c7:53:a7:6f:29:3f:1e:46:5f:ac:34:d1:29:38:
d4:d6:b4:cb:8d:a1:a1:48:f4:a8:0c:fc:1e:d6:1c:
f0:a8:ee:76:92:0e:2b:a5:8e:38:32:92:7f:ac:f3:
6a:be:15:d0:7e:66:9e:7f:2f:5e:9f:22:73:4e:10:
0e:6c:b5:e8:08:1b:96:9e:8c:fa:d9:aa:3f:9c:ba:
e2:03:b9:f3:0f:f6:85:7c:03:0e:ae:fb:ac:25:94:
fe:dc:d0:4d:5c:88:07:b1:4b:a2:ec:20:17:42:b0:
de:c9:ed:2c:4b:a6:44:0d:bc:29:cc:6f:f0:e3:b0:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:8B:DB:41:DD:4C:E2:1F:BB:CD:0D:9F:9D:03:8C:15:80:E8:9A
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/Kn2L20HdTOIfu80Nn50DjBWA6Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.190.0.0/15
37.100.0.0/14
91.254.0.0/15
94.160.0.0/13
176.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
26:5b:94:d7:22:0c:e4:a8:c0:07:16:01:da:6e:b4:1b:01:17:
fc:e0:b3:42:45:50:0c:5a:7e:c1:70:94:2c:1b:20:8f:a3:bb:
32:92:3b:1a:f7:c3:b7:3a:38:6a:3b:d1:6c:d0:65:60:26:7a:
2d:f6:96:b4:e9:f6:c0:ee:f9:d1:b0:6c:14:79:36:f9:57:a5:
70:e9:ed:71:0e:39:7a:0a:3c:5e:24:8e:4c:1c:fe:8d:a1:c9:
d3:8d:c2:57:66:ee:17:e3:3f:5a:88:40:f1:98:3a:1a:89:58:
f9:41:78:28:33:91:52:c6:2b:ed:ec:0e:8e:a1:11:6d:6e:46:
4e:96:37:f6:92:44:76:86:b3:66:26:e0:cf:9b:51:12:5b:d5:
da:b8:28:e3:bc:96:d9:22:f0:9f:31:ce:a3:61:e3:46:04:08:
a0:e6:56:1f:55:ae:0e:5c:03:0a:2d:bd:4b:1e:b8:84:f0:db:
84:12:60:08:fe:31:ad:69:f6:1f:60:0e:87:b5:e0:50:58:b4:
af:42:a7:de:95:27:45:6a:3b:ab:7c:cb:b1:b1:cd:53:2e:e2:
b3:cf:c8:a4:65:8e:5f:97:06:9b:8c:67:b4:e2:e0:89:ab:49:
57:1a:1d:96:85:56:f4:cc:a3:3d:2d:80:b8:53:88:95:e1:20:
bd:ab:8a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:16:22 2025 by rpki-client