Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/kCRuq7L98PE6Zt6HyZcUPfIpvh8.roa
File: kCRuq7L98PE6Zt6HyZcUPfIpvh8.roa (raw, json)
Hash identifier: fBWG5ks98F3nxnikXxLtKqW0MxF2K/jtQo2UYb1fIsg=
Subject key identifier: 90:24:6E:AB:B2:FD:F0:F1:3A:66:DE:87:C9:97:14:3D:F2:29:BE:1F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0199E90BF4CAF3BFE6FDF4576C182C544A82
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/kCRuq7L98PE6Zt6HyZcUPfIpvh8.roa
Signing time: Wed 15 Oct 2025 18:04:58 +0000
ROA not before: Wed 15 Oct 2025 18:04:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e9:0b:f4:ca:f3:bf:e6:fd:f4:57:6c:18:2c:54:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 15 18:04:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90246eabb2fdf0f13a66de87c997143df229be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:58:5f:f7:1e:6e:d4:06:c2:82:38:4f:4a:
67:f9:8f:ff:1a:b8:d5:a8:9c:45:0f:c8:b4:c4:e5:
43:eb:de:6d:25:67:6f:34:35:ff:ea:94:b8:e9:78:
e2:88:07:5d:07:84:af:d7:03:cb:08:4a:39:71:d5:
1a:62:60:28:1f:ce:23:81:07:c1:25:c4:7a:39:fa:
b2:07:eb:70:e0:ee:92:ab:49:e5:e2:40:d6:9e:24:
96:d2:c4:da:2f:3c:b5:bc:8e:bf:12:f3:a0:df:0f:
28:38:ae:de:a2:f8:f0:47:64:f6:5b:14:69:48:63:
74:52:05:cf:17:f0:76:5e:e3:e5:ef:2d:82:28:be:
9b:e8:41:e1:f3:54:0a:a7:4d:19:1e:28:8f:97:36:
48:db:af:47:78:32:4b:16:ee:0f:59:98:8d:74:82:
b2:d5:09:27:1c:af:95:27:18:86:1a:cf:49:0a:01:
f7:61:b7:c2:b3:5b:36:fd:3e:fd:64:32:d9:89:b2:
36:3b:ad:5f:e5:5b:5d:e5:5d:78:ef:21:a9:c1:38:
1c:e5:47:78:a5:12:3e:ea:de:ef:40:25:b9:77:6f:
50:7d:9d:58:60:ad:13:3a:d4:ea:3e:07:9f:4e:c4:
e6:c2:10:3e:69:bc:29:38:e1:3e:c2:19:8b:85:f6:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:6E:AB:B2:FD:F0:F1:3A:66:DE:87:C9:97:14:3D:F2:29:BE:1F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/kCRuq7L98PE6Zt6HyZcUPfIpvh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.234.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.207.0/24
93.152.210.0/23
93.152.214.0-93.152.218.255
93.152.221.0-93.152.224.255
93.152.226.0/23
93.152.230.0/24
93.152.233.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:37:ea:fb:4d:ff:71:5f:3f:aa:b6:c1:f1:48:68:b5:78:c3:
f6:42:a0:ab:7e:c1:f5:e0:3f:88:a9:1f:1a:b2:49:79:25:18:
aa:f3:82:f4:57:c7:d4:71:be:ac:70:1b:d9:68:bc:77:5e:7c:
5d:78:db:e1:03:ab:5a:3a:4f:ec:0e:63:6b:4a:c9:e9:a4:ce:
d5:f8:ae:73:65:84:c9:40:4d:33:99:ad:90:98:07:8a:74:4b:
e1:74:0e:80:ac:1b:a3:46:76:0c:3c:c9:83:01:89:d1:75:11:
a3:c0:e3:ce:24:18:d9:9e:a2:85:32:a4:9f:3b:02:3e:fb:3a:
39:c6:c7:b3:23:2b:55:7f:da:24:bc:0f:77:ae:f8:cb:75:a1:
23:b8:3a:6b:30:75:a9:65:72:5b:78:93:d1:a1:55:9b:80:a8:
b5:e1:8e:5c:01:09:86:16:d9:cf:b1:21:f7:7a:bd:fa:5d:32:
b0:96:f4:d8:bd:22:55:d6:2e:1d:b5:ea:f1:3d:8f:c7:e7:f7:
43:b7:31:55:76:44:72:02:8e:8d:d2:40:f4:03:db:61:57:f8:
47:e8:a7:57:88:7b:7d:d5:a6:96:21:8a:68:f3:de:26:ee:ae:
35:51:78:50:f3:1d:86:ae:46:5a:a7:a0:ec:c5:29:7b:dc:2e:
77:99:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:08 2025 by rpki-client