Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/k9TbI2t4Kp7vDAt7i0tnhyyajoY.roa
File: k9TbI2t4Kp7vDAt7i0tnhyyajoY.roa (raw, json)
Hash identifier: j0ckdzsklQZCmAh2ozOq49lCKu/16Fuapj8ps1FrvWs=
Subject key identifier: 93:D4:DB:23:6B:78:2A:9E:EF:0C:0B:7B:8B:4B:67:87:2C:9A:8E:86
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0197639D87E6BB501831967A542E0D3B2547
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/k9TbI2t4Kp7vDAt7i0tnhyyajoY.roa
Signing time: Thu 12 Jun 2025 10:09:17 +0000
ROA not before: Thu 12 Jun 2025 10:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6866
IP address blocks: 31.153.0.0/16 maxlen: 24
31.153.0.0/17 maxlen: 17
31.153.0.0/19 maxlen: 19
31.153.0.0/20 maxlen: 20
31.153.16.0/20 maxlen: 20
31.153.32.0/19 maxlen: 19
31.153.64.0/19 maxlen: 19
31.153.96.0/19 maxlen: 19
31.153.128.0/19 maxlen: 19
31.153.160.0/19 maxlen: 19
31.153.192.0/19 maxlen: 19
31.153.224.0/19 maxlen: 19
37.149.0.0/16 maxlen: 24
46.198.0.0/17 maxlen: 24
46.198.0.0/18 maxlen: 18
46.198.0.0/19 maxlen: 19
46.198.32.0/19 maxlen: 19
46.198.64.0/18 maxlen: 18
46.198.64.0/19 maxlen: 19
46.198.96.0/19 maxlen: 19
46.199.0.0/16 maxlen: 24
46.199.0.0/18 maxlen: 18
46.199.0.0/19 maxlen: 19
46.199.16.0/20 maxlen: 20
46.199.32.0/19 maxlen: 19
46.199.32.0/20 maxlen: 20
46.199.48.0/20 maxlen: 20
46.199.64.0/20 maxlen: 20
46.199.88.0/24 maxlen: 24
46.199.192.0/19 maxlen: 19
46.199.224.0/19 maxlen: 19
62.228.0.0/16 maxlen: 24
62.228.0.0/19 maxlen: 19
62.228.0.0/21 maxlen: 21
62.228.8.0/21 maxlen: 21
62.228.16.0/22 maxlen: 22
62.228.20.0/22 maxlen: 22
62.228.24.0/21 maxlen: 21
62.228.32.0/19 maxlen: 19
62.228.64.0/19 maxlen: 19
62.228.96.0/19 maxlen: 19
62.228.128.0/19 maxlen: 19
62.228.160.0/19 maxlen: 19
62.228.192.0/19 maxlen: 19
62.228.224.0/19 maxlen: 19
62.228.226.0/23 maxlen: 23
62.228.228.0/24 maxlen: 24
62.228.229.0/24 maxlen: 24
62.228.240.0/23 maxlen: 23
81.4.128.0/18 maxlen: 24
81.4.128.0/19 maxlen: 19
81.4.133.0/24 maxlen: 24
81.4.160.0/19 maxlen: 19
81.4.160.0/20 maxlen: 20
81.4.160.0/21 maxlen: 21
81.4.168.0/21 maxlen: 21
81.4.174.0/24 maxlen: 24
81.4.176.0/21 maxlen: 21
83.168.0.0/18 maxlen: 24
83.168.0.0/19 maxlen: 19
83.168.32.0/19 maxlen: 19
87.228.128.0/17 maxlen: 24
87.228.128.0/18 maxlen: 18
87.228.144.0/20 maxlen: 20
87.228.160.0/20 maxlen: 20
87.228.176.0/20 maxlen: 20
87.228.192.0/20 maxlen: 20
87.228.208.0/20 maxlen: 20
87.228.224.0/19 maxlen: 19
87.228.224.0/20 maxlen: 20
87.228.240.0/20 maxlen: 20
93.109.0.0/16 maxlen: 24
93.109.0.0/19 maxlen: 19
93.109.32.0/19 maxlen: 19
93.109.64.0/19 maxlen: 19
93.109.96.0/19 maxlen: 19
93.109.128.0/19 maxlen: 19
93.109.160.0/19 maxlen: 19
93.109.192.0/19 maxlen: 19
93.109.209.0/24 maxlen: 24
93.109.219.0/24 maxlen: 24
93.109.224.0/19 maxlen: 19
93.109.227.0/24 maxlen: 24
93.109.239.0/24 maxlen: 24
128.0.107.0/24 maxlen: 24
128.0.200.0/21 maxlen: 24
128.0.208.0/20 maxlen: 24
128.0.224.0/20 maxlen: 24
128.0.240.0/20 maxlen: 24
176.92.200.0/21 maxlen: 21
176.92.224.0/19 maxlen: 24
176.92.240.0/20 maxlen: 20
185.2.96.0/22 maxlen: 24
185.2.96.0/24 maxlen: 24
185.2.97.0/24 maxlen: 24
185.2.98.0/24 maxlen: 24
185.2.99.0/24 maxlen: 24
195.14.128.0/19 maxlen: 24
195.14.128.0/20 maxlen: 20
195.14.142.0/24 maxlen: 24
195.14.144.0/20 maxlen: 20
195.14.146.0/24 maxlen: 24
195.14.151.0/24 maxlen: 24
195.14.153.0/24 maxlen: 24
212.31.96.0/19 maxlen: 24
212.31.96.0/20 maxlen: 20
212.31.96.0/24 maxlen: 24
212.31.112.0/20 maxlen: 20
212.31.121.0/24 maxlen: 24
212.31.122.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
213.7.0.0/16 maxlen: 24
213.7.0.0/17 maxlen: 17
213.7.0.0/20 maxlen: 20
213.7.16.0/20 maxlen: 20
213.7.32.0/20 maxlen: 20
213.7.48.0/20 maxlen: 20
213.7.64.0/20 maxlen: 20
213.7.80.0/20 maxlen: 20
213.7.96.0/20 maxlen: 20
213.7.112.0/20 maxlen: 20
213.7.128.0/18 maxlen: 18
213.7.128.0/20 maxlen: 20
213.7.144.0/20 maxlen: 20
213.7.160.0/20 maxlen: 20
213.7.176.0/20 maxlen: 20
213.7.192.0/20 maxlen: 20
213.7.208.0/20 maxlen: 20
213.7.208.0/24 maxlen: 24
213.7.220.0/22 maxlen: 22
213.7.224.0/20 maxlen: 20
213.7.240.0/20 maxlen: 20
213.7.240.0/24 maxlen: 24
213.149.160.0/19 maxlen: 24
213.149.160.0/20 maxlen: 20
213.149.176.0/20 maxlen: 20
2a00:1358::/29 maxlen: 48
2a00:1358::/30 maxlen: 48
2a00:1358::/31 maxlen: 48
2a00:1358::/32 maxlen: 48
2a00:1358:1000::/48 maxlen: 48
2a00:1358:b000::/44 maxlen: 44
2a00:1358:d000::/40 maxlen: 40
2a00:1358:df00::/48 maxlen: 48
2a00:1358:f000::/40 maxlen: 40
2a00:1358:f000::/41 maxlen: 41
2a00:1358:f080::/41 maxlen: 41
2a00:1359::/32 maxlen: 48
2a00:135a::/31 maxlen: 48
2a00:135a::/32 maxlen: 48
2a00:135b::/32 maxlen: 48
2a00:135c::/30 maxlen: 48
2a00:135c::/31 maxlen: 48
2a00:135c::/32 maxlen: 48
2a00:135d::/32 maxlen: 48
2a00:135e::/31 maxlen: 48
2a00:135e::/32 maxlen: 48
2a00:135f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:9d:87:e6:bb:50:18:31:96:7a:54:2e:0d:3b:25:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jun 12 10:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93d4db236b782a9eef0c0b7b8b4b67872c9a8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:e9:a3:d1:30:37:70:96:29:73:60:56:4f:
25:c6:63:9b:98:2c:ca:33:b7:49:5f:62:64:3b:1b:
52:cf:f6:fc:c3:4f:60:29:58:99:83:32:14:b5:2f:
8e:84:8e:c4:bf:48:2d:69:e1:8a:7b:4a:42:93:81:
81:da:bf:78:eb:63:f3:bd:18:43:57:e7:90:76:90:
15:3d:29:15:bb:75:e1:51:52:c2:0f:23:ce:d7:96:
c9:62:0f:8a:65:df:0b:7c:01:f4:2a:94:7a:8b:85:
91:59:02:96:df:9e:8c:46:63:7a:1e:f0:b0:c1:2b:
8d:47:ee:dd:a2:75:cc:1c:49:d9:30:26:a3:55:9a:
ff:2e:91:cf:b0:dd:cd:98:b2:63:c8:e2:f1:7b:3c:
bd:29:61:59:73:34:d2:2c:be:db:c2:50:3f:b0:d2:
f8:1a:58:db:ae:b4:57:c1:18:8f:22:7d:03:c1:81:
6a:f6:8f:23:e1:2e:9d:05:c7:3a:36:61:48:04:66:
3a:dd:09:91:3d:d4:43:df:cd:0c:8d:5c:13:8b:e5:
2f:03:5e:3c:45:82:a2:6d:2a:84:f1:c9:3d:8a:f7:
1e:a3:62:53:fc:40:7b:32:2a:9b:b0:ef:80:91:56:
21:cb:c9:37:29:77:e3:fb:30:fd:90:20:db:27:bf:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:DB:23:6B:78:2A:9E:EF:0C:0B:7B:8B:4B:67:87:2C:9A:8E:86
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/k9TbI2t4Kp7vDAt7i0tnhyyajoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.0.0/16
37.149.0.0/16
46.198.0.0/17
46.199.0.0/16
62.228.0.0/16
81.4.128.0/18
83.168.0.0/18
87.228.128.0/17
93.109.0.0/16
128.0.107.0/24
128.0.200.0-128.0.255.255
176.92.200.0/21
176.92.224.0/19
185.2.96.0/22
195.14.128.0/19
212.31.96.0/19
213.7.0.0/16
213.149.160.0/19
IPv6:
2a00:1358::/29
Signature Algorithm: sha256WithRSAEncryption
4f:85:e1:a3:41:9b:fc:c9:b6:cf:2a:7c:8f:af:59:9c:7c:f9:
57:96:20:91:9b:51:7e:50:a3:7d:41:99:b4:ce:51:fd:79:f5:
bc:3f:3e:76:df:bb:51:1c:cc:36:b3:5e:41:9f:ce:13:ce:96:
f1:c0:c8:e0:9e:fb:a6:50:36:ab:9e:65:a6:a8:04:d1:42:5f:
e3:d4:f9:5b:ad:5f:54:a8:6e:95:a3:a8:88:a4:04:19:07:16:
6e:98:dc:fa:96:31:73:d1:62:5b:d7:97:87:b5:76:e2:24:00:
e5:3b:96:6a:17:16:15:e8:c3:5e:f8:ee:54:c5:87:7f:31:11:
8f:a2:29:f8:44:cc:f0:5c:d6:12:bc:3f:03:d2:7d:9b:e5:04:
db:73:d3:b7:a1:cf:bc:aa:4c:a8:6c:84:03:c1:76:33:d0:d0:
84:09:ce:31:98:26:5a:a0:2c:bc:e7:be:79:79:91:4b:6c:ba:
81:17:b7:60:e6:21:fb:1c:b7:d2:66:21:14:76:cc:f9:61:9f:
62:b8:0d:92:e1:65:75:7a:7a:57:cf:a4:6a:e8:b6:2c:9e:81:
5a:4f:a6:d4:ce:fe:32:5c:e5:0e:6e:8f:9b:4f:37:59:4b:b1:
ee:d7:ef:e3:e2:11:60:d6:b0:7d:9e:88:59:cc:13:64:1c:8b:
eb:b2:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:07:09 2025 by rpki-client