Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/kSpbiRk0tTr4djqnevnKIRm6iXs.roa
File: kSpbiRk0tTr4djqnevnKIRm6iXs.roa (raw, json)
Hash identifier: xVdA6H09ACZm0ElsIIOCMigLDnOmLnWWYejsNkcvUwM=
Subject key identifier: 91:2A:5B:89:19:34:B5:3A:F8:76:3A:A7:7A:F9:CA:21:19:BA:89:7B
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0198ADBBD2E0E166AF70142447E39C805C97
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/kSpbiRk0tTr4djqnevnKIRm6iXs.roa
Signing time: Fri 15 Aug 2025 12:37:04 +0000
ROA not before: Fri 15 Aug 2025 12:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41275
IP address blocks: 5.35.112.0/22 maxlen: 22
5.35.112.0/23 maxlen: 23
5.35.113.0/24 maxlen: 24
5.35.114.0/23 maxlen: 23
62.217.184.0/21 maxlen: 21
84.22.132.0/22 maxlen: 22
85.198.104.0/23 maxlen: 23
89.169.48.0/22 maxlen: 22
89.169.48.0/23 maxlen: 23
89.169.50.0/23 maxlen: 23
89.207.216.0/21 maxlen: 21
89.207.216.0/22 maxlen: 22
89.207.216.0/24 maxlen: 24
89.207.217.0/24 maxlen: 24
89.207.220.0/22 maxlen: 22
89.207.221.0/24 maxlen: 24
93.157.244.0/22 maxlen: 22
95.130.128.0/22 maxlen: 22
95.131.144.0/21 maxlen: 21
95.131.144.0/22 maxlen: 22
95.131.144.0/24 maxlen: 24
95.131.148.0/22 maxlen: 22
185.43.198.0/23 maxlen: 23
185.136.76.0/22 maxlen: 22
185.136.76.0/23 maxlen: 23
185.136.78.0/23 maxlen: 23
185.155.17.0/24 maxlen: 24
185.155.18.0/23 maxlen: 23
217.150.200.0/23 maxlen: 23
2a02:5fe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:bb:d2:e0:e1:66:af:70:14:24:47:e3:9c:80:5c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Aug 15 12:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912a5b891934b53af8763aa77af9ca2119ba897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:03:12:8e:c8:1c:c9:fc:2c:e2:69:6c:cb:
8c:24:ed:71:dd:19:73:f4:7f:8b:6d:6c:f4:6f:11:
6e:99:09:9d:a6:b7:0e:a5:67:a4:24:fe:90:52:27:
12:d4:56:f5:88:cc:54:6a:43:18:14:d0:60:ec:60:
f3:c6:76:9f:87:91:cc:d6:e7:38:b2:bd:76:ea:b5:
12:ec:80:cf:05:33:87:31:2a:21:5c:e2:04:3e:55:
6c:ed:fc:0c:fa:6e:f3:b0:cf:74:50:01:fb:2d:bb:
87:b2:a7:15:44:20:63:c4:ad:45:d0:8b:4e:59:12:
0b:07:34:3a:95:17:0d:1f:7b:a8:94:d7:98:30:ba:
7b:1a:7c:51:a9:1b:86:60:6b:4a:d0:4c:1f:30:e9:
55:f5:53:a2:d1:0f:57:67:b7:3f:32:e2:4c:f3:3c:
86:67:23:5f:04:4c:8b:93:5f:c8:d9:d4:5e:56:23:
b5:71:e3:26:35:2e:96:11:52:e2:0b:74:d0:75:ec:
3e:a7:c1:a1:2b:96:41:d7:3d:d2:69:6c:c6:39:c6:
8e:ff:44:28:ed:04:aa:15:21:fb:7d:0a:93:02:fe:
71:90:52:dc:ee:65:9a:03:5e:80:d0:7c:fa:9a:c5:
34:28:76:96:98:e6:c6:f1:04:f8:62:23:6c:be:be:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:5B:89:19:34:B5:3A:F8:76:3A:A7:7A:F9:CA:21:19:BA:89:7B
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/kSpbiRk0tTr4djqnevnKIRm6iXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.112.0/22
62.217.184.0/21
84.22.132.0/22
85.198.104.0/23
89.169.48.0/22
89.207.216.0/21
93.157.244.0/22
95.130.128.0/22
95.131.144.0/21
185.43.198.0/23
185.136.76.0/22
185.155.17.0-185.155.19.255
217.150.200.0/23
IPv6:
2a02:5fe0::/29
Signature Algorithm: sha256WithRSAEncryption
52:c4:32:75:aa:9d:85:13:a0:b3:e0:03:dc:8e:09:4b:2c:0f:
08:dd:ae:de:cf:cf:7d:88:8c:40:0d:e3:b9:78:03:0a:6a:38:
7f:9f:66:cb:9e:69:88:42:06:07:eb:4f:3d:fa:fc:33:ca:88:
a2:6c:7d:fa:65:60:f5:fd:9a:e2:4c:1b:75:fd:2f:57:3c:3a:
1e:5e:f7:b0:64:cc:be:97:47:cc:da:2c:93:b1:46:a3:e8:ef:
a6:ce:fb:31:e2:c1:5e:99:b5:0e:b0:4a:0a:ee:f3:8f:4f:05:
f4:d7:9f:03:49:76:a7:68:47:a3:65:8f:07:6c:6f:b6:4d:f4:
ce:4a:22:1f:7f:91:61:ba:96:3d:03:e6:35:bc:34:b0:7f:39:
9a:c5:1e:eb:3f:64:64:c3:1e:7e:3d:51:54:c2:e5:be:d4:99:
ef:d5:57:95:4d:63:ba:48:2a:63:8e:40:eb:c7:06:d0:4e:cd:
1e:ff:9b:4d:44:0a:db:20:77:e4:84:2c:40:a8:95:6d:78:d4:
05:bf:aa:4e:50:16:85:bc:14:2a:de:22:e6:91:bf:50:9a:f5:
7a:63:c6:50:a5:50:15:cf:26:c3:32:bd:01:32:71:6d:56:b1:
ec:c5:8f:01:ab:73:14:54:31:c5:a8:dc:67:40:d4:eb:97:ec:
a9:f0:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:10 2025 by rpki-client