Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/K5NEdUPfsWNlU5OaxDmaJB9uhW8.roa
File: K5NEdUPfsWNlU5OaxDmaJB9uhW8.roa (raw, json)
Hash identifier: 7HBZ5dKfBKtNZaeKC9JLdhcxQK1sl2MmzTeySkJRRaA=
Subject key identifier: 2B:93:44:75:43:DF:B1:63:65:53:93:9A:C4:39:9A:24:1F:6E:85:6F
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0199F10A2975905CD5E99153726B431A3F30
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/K5NEdUPfsWNlU5OaxDmaJB9uhW8.roa
Signing time: Fri 17 Oct 2025 07:19:59 +0000
ROA not before: Fri 17 Oct 2025 07:19:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
31.40.242.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/22 maxlen: 22
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/22 maxlen: 22
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/22 maxlen: 22
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/22 maxlen: 22
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/22 maxlen: 22
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/22 maxlen: 22
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/22 maxlen: 22
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/22 maxlen: 22
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/22 maxlen: 22
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:0a:29:75:90:5c:d5:e9:91:53:72:6b:43:1a:3f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Oct 17 07:19:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b93447543dfb1636553939ac4399a241f6e856f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:82:7d:d2:85:b1:0b:cd:e1:50:35:af:14:
5e:4e:95:0e:b6:95:7d:1f:bb:90:e6:b1:46:15:2b:
8b:bb:7c:d4:0f:9d:3f:af:d1:ac:6b:ec:70:a1:b4:
56:b5:ad:40:2e:73:9e:4b:46:de:d7:8b:8f:f1:cf:
e7:e3:49:97:a1:55:16:d6:d3:52:12:77:b4:23:a4:
2e:1e:00:e7:73:f0:6d:65:e6:e8:5c:88:a8:7d:b7:
cf:af:c1:22:34:33:9f:a4:f9:0d:37:68:e7:17:7a:
eb:15:b7:73:53:fd:8f:0a:b8:2a:95:4e:0f:47:eb:
3d:ba:88:ba:41:84:9a:da:50:dd:7a:bf:e9:0b:c4:
1c:6f:af:88:ca:ae:14:5a:60:5f:ef:ff:d6:99:76:
59:18:07:b5:81:34:94:9d:7f:69:3b:15:a7:e4:9d:
63:55:39:4d:4d:16:d5:b9:9b:b8:07:6f:54:78:5c:
8b:38:a6:a4:0e:5f:96:19:19:16:d6:ec:ce:b6:97:
d2:44:b8:0a:89:4d:5c:02:e1:65:f6:94:58:35:95:
7a:ad:51:4d:fc:e6:ae:c6:3c:56:24:33:bf:e9:3d:
cf:cc:90:3a:40:9d:1e:b3:48:55:96:02:97:1a:86:
76:4c:63:cb:b4:1d:69:d4:02:3f:63:22:a6:d4:eb:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:44:75:43:DF:B1:63:65:53:93:9A:C4:39:9A:24:1F:6E:85:6F
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/K5NEdUPfsWNlU5OaxDmaJB9uhW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
31.40.242.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
16:49:b2:f4:90:c7:a1:8d:f2:6b:cc:25:63:5c:eb:25:ee:fa:
ef:43:64:f2:87:da:bf:5f:d7:65:ac:1a:f4:26:ba:84:0d:15:
ac:8a:d6:fe:eb:e9:26:04:ba:5a:81:ca:99:51:17:b6:0f:85:
6a:3e:ad:07:d4:fb:36:bf:76:36:bd:ce:7f:06:ce:8d:fc:57:
8f:ed:08:ff:0c:2f:93:91:88:11:8c:2d:88:26:a1:5a:3d:66:
25:9b:ab:0f:48:ab:dd:7b:30:9a:fc:3c:22:c2:96:f4:80:bf:
e3:7e:7d:5f:37:20:a7:fc:d3:4a:01:34:82:9c:63:a5:21:19:
9f:d8:d7:e7:e8:19:32:9f:04:c0:5f:3d:bf:c6:83:53:b8:ae:
01:d6:ff:fa:76:98:e2:2b:9b:d9:89:51:c6:d2:14:df:1d:64:
9a:32:6f:0c:54:85:9e:e1:f5:18:95:3b:c8:ee:4b:2e:42:2b:
9b:cb:df:28:5a:b7:2e:9a:43:89:80:fb:82:bd:b6:79:6d:51:
83:e3:50:6f:42:d8:9a:90:83:dd:01:7c:d6:d8:ea:5c:b6:0b:
18:6f:09:89:9e:db:49:d7:0b:e5:32:56:60:d8:64:95:e7:bb:
d0:11:78:31:bd:2d:39:29:fe:ff:e8:d6:14:a5:cc:bb:5a:fe:
7d:2e:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:13 2025 by rpki-client