Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/k_MSpCKVnChWzSccoFJBjl40Vo8.roa
File: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (raw, json)
Hash identifier: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=
Subject key identifier: 93:F3:12:A4:22:95:9C:28:56:CD:27:1C:A0:52:41:8E:5E:34:56:8F
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019D105B9252F1C480404119BA87B179512B
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/k_MSpCKVnChWzSccoFJBjl40Vo8.roa
Signing time: Sat 21 Mar 2026 12:25:29 +0000
ROA not before: Sat 21 Mar 2026 12:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214038
IP address blocks: 31.192.210.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:5b:92:52:f1:c4:80:40:41:19:ba:87:b1:79:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Mar 21 12:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93f312a422959c2856cd271ca052418e5e34568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:bb:f9:ac:da:43:e0:5b:0a:91:af:43:e9:
51:85:05:f3:54:57:4d:17:f5:ee:93:06:f8:79:8d:
e2:a6:35:c1:73:5b:aa:11:0a:5d:b1:41:e0:74:77:
f4:3a:6c:99:cb:ee:68:0c:6b:42:6a:f0:4b:1c:11:
0a:64:ac:62:32:cd:d3:e5:87:3a:1f:4d:41:19:1d:
b3:8b:3a:35:75:ef:eb:a1:d9:b3:f8:d0:01:50:5d:
15:1e:d9:7d:7b:47:51:09:ba:f3:24:18:86:a7:b7:
9f:fc:c9:b1:1f:1b:0c:02:d7:0e:2d:ba:b8:51:b6:
cf:fe:75:ca:53:8c:73:70:78:d2:65:cc:92:ae:19:
2d:ee:c5:ce:cf:7f:19:a3:7f:d4:ee:55:99:93:dc:
59:b0:4d:3c:c3:7c:0c:b3:d4:1b:c2:33:2c:71:79:
14:49:b6:7d:cf:69:45:85:e6:90:f5:e5:81:7c:45:
4c:04:d6:89:28:3b:6f:1d:06:8c:bf:01:7f:55:d4:
10:d2:95:fb:56:3b:43:3b:c9:2a:1f:95:4d:e4:4b:
b3:e2:71:b5:91:2b:d9:63:27:2f:43:e5:4b:e0:68:
1e:33:9d:8e:9e:6e:c4:94:ba:c0:8c:f7:71:0c:76:
db:ba:b3:f2:1d:46:67:9e:f6:eb:39:c6:34:05:07:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:12:A4:22:95:9C:28:56:CD:27:1C:A0:52:41:8E:5E:34:56:8F
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/k_MSpCKVnChWzSccoFJBjl40Vo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.210.0/24
89.43.30.0/24
89.252.136.0/24
89.252.144.0/24
93.115.77.0/24
94.102.10.0/24
95.173.166.0/24
95.173.183.0/24
159.253.32.0/24
185.95.85.0/24
IPv6:
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
14:08:fc:c7:22:83:2a:28:12:9d:ef:c5:6d:29:3a:51:f0:7d:
48:16:6a:8c:ea:cc:3e:72:e3:ab:d0:f4:5a:39:f1:4e:a9:bc:
41:66:8e:40:3f:e2:60:bc:14:70:ae:52:7e:78:c2:89:db:07:
76:07:94:f2:8b:8d:d9:16:99:57:2a:62:74:29:27:b8:ae:04:
bf:f2:26:b5:6b:84:78:c4:26:da:f0:43:12:41:0d:27:24:65:
3f:ab:8e:70:08:94:31:19:07:9d:54:68:18:80:30:0d:22:af:
81:fa:59:8b:b4:1d:62:1f:87:de:37:76:7f:78:09:8c:2a:b8:
be:5d:6d:d2:69:d7:1a:46:11:34:65:37:3c:e5:94:b1:6a:ed:
de:29:1b:ad:33:84:80:f8:6c:ff:06:ea:15:65:28:3d:b0:1e:
d8:f8:6d:bf:31:98:67:6c:0b:86:67:5e:36:a9:5d:6f:bc:e6:
b8:04:34:07:55:78:fa:13:a7:88:6a:8e:02:c5:8a:47:5e:e0:
ce:92:fb:97:3b:28:e4:4d:fd:cf:09:bd:3f:09:12:2e:10:b7:
76:e3:31:22:5a:72:47:15:81:d6:27:46:c3:ba:95:48:cf:29:
03:d2:7a:36:75:57:e0:d6:41:7f:07:67:99:2b:62:b3:9b:28:
07:c4:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:01:21 2026 by rpki-client