Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/kcs2xZoDmPXZrjiKX5DvOPWpkqQ.roa
File: kcs2xZoDmPXZrjiKX5DvOPWpkqQ.roa (raw, json)
Hash identifier: BzU/GVljA4JQZocf7nZChzPTPhXWy8F7yFPm928mpUo=
Subject key identifier: 91:CB:36:C5:9A:03:98:F5:D9:AE:38:8A:5F:90:EF:38:F5:A9:92:A4
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019A49FE228B06517F5BB578BF2960D8D01A
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/kcs2xZoDmPXZrjiKX5DvOPWpkqQ.roa
Signing time: Mon 03 Nov 2025 13:53:03 +0000
ROA not before: Mon 03 Nov 2025 13:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
72.60.0.0/20 maxlen: 24
72.60.16.0/22 maxlen: 24
72.60.20.0/22 maxlen: 24
72.60.24.0/21 maxlen: 24
72.60.32.0/21 maxlen: 24
72.60.40.0/22 maxlen: 24
72.60.44.0/22 maxlen: 24
72.60.48.0/20 maxlen: 24
72.60.64.0/21 maxlen: 24
72.60.72.0/21 maxlen: 24
72.60.80.0/21 maxlen: 24
72.60.88.0/21 maxlen: 24
72.60.96.0/21 maxlen: 24
72.60.104.0/21 maxlen: 24
72.60.112.0/20 maxlen: 24
72.60.128.0/24 maxlen: 24
72.60.129.0/24 maxlen: 24
72.60.130.0/23 maxlen: 24
72.60.132.0/23 maxlen: 24
72.60.134.0/23 maxlen: 24
72.60.136.0/21 maxlen: 24
72.60.144.0/20 maxlen: 24
72.60.160.0/20 maxlen: 24
72.60.176.0/21 maxlen: 24
72.60.184.0/21 maxlen: 24
72.60.192.0/21 maxlen: 24
72.60.200.0/21 maxlen: 24
72.60.208.0/22 maxlen: 24
72.60.212.0/22 maxlen: 24
72.60.216.0/21 maxlen: 24
72.60.224.0/21 maxlen: 24
72.60.232.0/21 maxlen: 24
72.60.240.0/20 maxlen: 24
72.61.0.0/20 maxlen: 24
72.61.16.0/22 maxlen: 24
72.61.20.0/22 maxlen: 24
72.61.24.0/21 maxlen: 24
72.61.32.0/19 maxlen: 24
72.61.64.0/20 maxlen: 24
72.61.80.0/20 maxlen: 24
72.61.96.0/20 maxlen: 24
72.61.112.0/20 maxlen: 24
72.61.128.0/21 maxlen: 24
72.61.136.0/22 maxlen: 24
72.61.140.0/22 maxlen: 24
72.61.144.0/22 maxlen: 24
72.61.148.0/22 maxlen: 24
72.61.152.0/21 maxlen: 24
72.61.160.0/21 maxlen: 24
72.61.168.0/21 maxlen: 24
72.61.176.0/20 maxlen: 24
72.61.192.0/21 maxlen: 24
72.61.200.0/21 maxlen: 24
72.61.208.0/21 maxlen: 24
72.61.216.0/21 maxlen: 24
72.61.224.0/19 maxlen: 24
72.62.0.0/22 maxlen: 24
72.62.32.0/19 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/23 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
148.230.70.0/23 maxlen: 24
148.230.72.0/21 maxlen: 24
148.230.80.0/20 maxlen: 24
148.230.96.0/22 maxlen: 24
148.230.100.0/22 maxlen: 24
148.230.104.0/21 maxlen: 24
148.230.112.0/21 maxlen: 24
148.230.120.0/22 maxlen: 24
148.230.124.0/22 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:fe:22:8b:06:51:7f:5b:b5:78:bf:29:60:d8:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Nov 3 13:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91cb36c59a0398f5d9ae388a5f90ef38f5a992a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a1:f8:0d:4c:21:3f:e5:e6:71:61:e2:4e:63:
35:77:37:5f:9c:b3:70:ac:97:d9:f9:4c:c4:dd:c4:
14:92:0e:d6:84:b7:14:f0:e6:ed:02:fb:d9:04:01:
0e:74:06:f9:cc:9a:d1:9d:7c:e5:68:49:f5:49:f9:
31:dd:5b:41:7b:5b:c2:f3:bf:69:35:69:46:a1:8b:
a4:d5:84:17:2f:c7:ba:db:f0:4c:03:d2:52:66:85:
f6:24:0f:68:2a:7c:18:24:b6:9e:81:f6:3d:cc:39:
22:3c:3b:0a:02:82:3f:d9:79:18:e9:9a:e7:4b:03:
20:75:f3:2d:70:0b:03:04:53:7e:d0:ad:31:ae:4b:
da:72:d7:c1:b4:56:03:a1:06:ef:3a:ee:a6:62:05:
1e:0a:e7:87:12:45:bf:97:fc:fc:fe:3d:59:70:7e:
a5:50:a4:49:28:b7:ee:2f:fe:93:4f:67:9e:34:c5:
50:30:3a:a3:31:3c:15:22:9c:c9:b8:61:fa:6e:e9:
0c:d6:f1:f8:f4:21:4e:3d:57:8d:7f:94:e3:dd:ea:
e7:bb:9c:26:98:4a:9f:c5:9f:8c:34:08:5d:b9:0c:
b0:46:c6:31:d5:0e:72:65:a1:d4:31:b5:1b:96:3f:
35:1f:93:45:bc:12:02:01:6f:d1:b1:27:d0:f8:08:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:36:C5:9A:03:98:F5:D9:AE:38:8A:5F:90:EF:38:F5:A9:92:A4
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/kcs2xZoDmPXZrjiKX5DvOPWpkqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.255.255
69.62.64.0/18
72.60.0.0-72.62.3.255
72.62.32.0/19
103.199.184.0/22
148.222.52.0/22
148.230.64.0/18
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
af:e2:7b:1f:d1:bb:6e:86:8a:c9:23:ff:c1:17:90:04:cc:33:
aa:3b:b5:d3:77:eb:56:98:7e:7f:91:82:25:83:d3:95:a7:18:
54:14:e1:e1:f9:f8:77:56:25:f8:07:f4:d2:7e:68:42:8d:ca:
9f:79:19:3b:e2:19:68:97:8d:f9:07:b7:ea:6d:12:fc:a7:74:
26:11:1b:74:ad:94:ae:9c:ec:75:ec:b9:b4:98:0f:40:cb:92:
2c:85:06:0a:9f:c5:49:a1:6c:57:15:bb:25:a2:35:8b:2a:89:
6f:22:c5:d9:9f:5f:e2:0e:15:76:e3:32:5b:be:17:31:74:bc:
31:4e:cd:51:72:75:56:4a:cd:da:a2:64:91:ed:c2:11:61:01:
38:69:2d:4d:57:ea:1f:5a:42:85:e5:ad:e9:42:46:d7:f5:e1:
6a:c4:c5:e7:c7:bd:88:58:a8:93:ee:2b:2f:d7:2f:a3:58:35:
fd:af:78:25:39:6e:c3:1a:e9:fb:84:e9:50:6f:8e:af:f3:ab:
f2:c2:df:5f:f0:e6:28:da:e2:bd:14:66:d0:2a:14:78:d9:93:
76:9a:0b:72:5b:97:36:de:e5:dc:48:a1:98:de:17:e2:43:5c:
ad:64:f9:92:f0:5e:60:d7:7f:55:3f:6c:5d:51:e8:23:35:ca:
74:eb:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:51 2025 by rpki-client