Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kyMlmgxE2NuIqIqIAI93nroZbro.roa
File: kyMlmgxE2NuIqIqIAI93nroZbro.roa (raw, json)
Hash identifier: 4ZYyau6JeZt1ZwMFqMR8X9diyi4hbBHuoLH5EqZOW7w=
Subject key identifier: 93:23:25:9A:0C:44:D8:DB:88:A8:8A:88:00:8F:77:9E:BA:19:6E:BA
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019680AA0DAB980576D36BC278CFAD691150
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kyMlmgxE2NuIqIqIAI93nroZbro.roa
Signing time: Tue 29 Apr 2025 08:29:10 +0000
ROA not before: Tue 29 Apr 2025 08:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.141.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:aa:0d:ab:98:05:76:d3:6b:c2:78:cf:ad:69:11:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Apr 29 08:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9323259a0c44d8db88a88a88008f779eba196eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:e2:b5:c0:9a:73:51:0b:18:06:5a:19:e7:
02:ff:0e:c6:94:16:6d:c4:62:1e:4e:97:8d:c4:9e:
08:f8:82:a7:b4:80:b0:b6:59:e4:74:f4:39:d0:8c:
96:80:e7:9d:b7:a9:15:26:3a:d8:1f:9d:6b:64:9c:
bb:72:03:cf:15:d5:76:e8:1b:13:da:ba:7c:3a:eb:
00:f0:c2:5c:09:58:27:65:08:96:ed:d0:2a:79:fa:
a4:8b:87:ad:34:9a:53:7a:08:f5:12:78:08:54:c6:
80:3f:82:76:5b:35:a1:3d:fa:50:23:90:28:00:ef:
c2:27:c4:fb:a8:99:85:cb:71:83:19:b2:30:be:78:
5c:63:9b:48:56:c2:a4:cd:41:0a:00:a8:b3:eb:ae:
ca:9e:77:68:4c:99:93:5b:8e:eb:d5:2c:30:71:74:
bf:36:2c:5e:5e:17:2e:b6:02:fe:cd:3d:b5:71:0c:
3e:13:2b:79:cf:d3:00:d7:bb:c2:2e:14:ae:b5:a7:
1b:b8:25:a1:fc:13:ca:2f:9e:fa:43:50:2a:49:50:
0f:68:cb:01:31:8f:a6:ab:24:78:2f:57:a3:b2:fc:
79:1f:bd:9d:07:09:3d:16:b5:8a:31:9b:8a:ef:92:
a1:70:a6:a8:6a:27:d3:83:77:af:21:61:c2:10:b8:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:25:9A:0C:44:D8:DB:88:A8:8A:88:00:8F:77:9E:BA:19:6E:BA
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kyMlmgxE2NuIqIqIAI93nroZbro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.141.255
89.252.143.0-89.252.148.255
89.252.150.0/24
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
08:d4:47:c7:b6:5c:9c:97:a4:c8:03:88:c7:08:f4:6e:a4:9c:
bd:5e:ce:bf:f2:b5:45:5a:6b:21:28:4f:73:a4:44:c5:d1:eb:
6e:b8:60:65:8c:6f:36:3f:67:1b:08:83:bc:ee:3e:f2:fa:c2:
5a:26:ec:b1:11:55:98:6a:39:19:94:e1:3f:47:66:8b:53:58:
29:fe:52:2b:07:85:97:3a:a5:3e:d8:80:4c:b9:67:10:67:af:
f1:b8:7d:50:3b:48:e0:e7:1d:6e:68:e4:de:e0:16:99:da:da:
82:0e:6f:e8:43:19:7c:35:f7:f5:88:a1:1b:0d:80:a7:53:55:
c6:8f:14:25:8e:fa:de:12:58:6b:50:e0:e7:e9:12:6e:ae:72:
61:25:b1:dd:81:69:6a:f3:e0:d9:50:9c:d7:74:67:e5:7b:e1:
d4:de:e4:65:f9:14:1e:c0:6a:8c:7d:6c:f0:02:4a:00:90:6b:
af:2e:dd:66:76:a2:9c:47:a1:12:c7:d0:05:28:9c:5f:2a:91:
ad:38:75:25:37:a3:f5:a3:d0:a1:d4:38:c6:b6:cd:56:ec:a3:
1c:80:85:ee:42:ce:b9:82:fd:c6:a4:64:05:58:80:aa:e5:b8:
8c:5f:e6:22:a3:12:89:c1:64:cb:b1:39:73:9d:e0:ab:8b:f2:
e9:7d:34:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:40:38 2025 by rpki-client