Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/KscvLVMtZmBkxarHMZjKvBgfLfk.roa
File: KscvLVMtZmBkxarHMZjKvBgfLfk.roa (raw, json)
Hash identifier: LHSFj6xYYHfALWFv5ULF2z+mFPohWH8M77+ifjvdIiM=
Subject key identifier: 2A:C7:2F:2D:53:2D:66:60:64:C5:AA:C7:31:98:CA:BC:18:1F:2D:F9
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 01985A8B342E3CF14107F2BF07C85DB753EF
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/KscvLVMtZmBkxarHMZjKvBgfLfk.roa
Signing time: Wed 30 Jul 2025 08:55:29 +0000
ROA not before: Wed 30 Jul 2025 08:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 5.10.144.0/20 maxlen: 20
31.28.65.0/24 maxlen: 24
31.28.67.0/24 maxlen: 24
31.28.68.0/24 maxlen: 24
31.28.70.0/24 maxlen: 24
31.28.72.0/24 maxlen: 24
31.28.75.0/24 maxlen: 24
31.28.80.0/22 maxlen: 22
31.28.84.0/23 maxlen: 23
31.28.86.0/24 maxlen: 24
45.88.112.0/22 maxlen: 22
82.163.192.0/19 maxlen: 24
82.163.205.0/24 maxlen: 24
91.238.221.0/24 maxlen: 24
94.126.43.0/24 maxlen: 24
94.126.47.0/24 maxlen: 24
144.98.0.0/16 maxlen: 16
158.41.64.0/18 maxlen: 18
165.65.0.0/16 maxlen: 16
178.18.116.0/23 maxlen: 23
178.18.119.0/24 maxlen: 24
185.28.240.0/22 maxlen: 22
185.120.204.0/22 maxlen: 22
185.121.76.0/22 maxlen: 22
185.135.164.0/22 maxlen: 22
185.237.48.0/22 maxlen: 22
193.0.176.0/23 maxlen: 23
193.221.128.0/19 maxlen: 19
194.8.254.0/23 maxlen: 23
206.245.213.0/24 maxlen: 24
206.245.224.0/21 maxlen: 21
206.245.232.0/22 maxlen: 22
206.245.236.0/23 maxlen: 23
2a00:e340::/29 maxlen: 29
2a10:d700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:8b:34:2e:3c:f1:41:07:f2:bf:07:c8:5d:b7:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jul 30 08:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac72f2d532d666064c5aac73198cabc181f2df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:57:c7:37:4c:f4:4b:0a:ae:99:94:4d:aa:
b0:b1:fc:2f:91:d7:42:81:03:cd:72:74:44:9e:69:
db:4f:1b:fa:db:fd:13:42:28:e1:0f:f6:0d:03:40:
a4:e7:56:90:e3:ae:f1:61:ff:a6:35:1b:38:fa:4d:
b5:71:01:2b:a5:32:0b:cb:39:8f:55:d3:2a:46:ee:
9c:f6:f1:b3:f8:4b:d0:bc:ea:91:6c:7d:17:ad:23:
6f:34:da:0f:2d:67:a7:74:87:93:15:60:54:40:ab:
53:5b:47:49:e8:1f:b0:7e:83:0d:42:f8:d6:a9:52:
e8:9d:73:eb:43:f6:93:17:22:b8:29:79:4f:7d:22:
14:93:4c:0c:e8:3e:29:a4:fa:cb:ed:09:ca:02:02:
a6:80:dd:c1:ba:5e:27:b9:83:13:55:d7:18:26:69:
a2:f6:cd:17:71:19:eb:00:f4:7f:8a:b2:f4:9e:aa:
1d:85:5b:db:66:47:05:fd:02:97:d9:03:bd:3a:47:
5e:14:2c:76:2e:67:4e:f2:13:c5:fe:f6:7e:92:da:
44:eb:ce:3a:12:da:13:0f:ec:d4:41:15:02:6a:74:
29:33:d0:02:56:4f:58:d4:5a:37:1b:61:75:9a:7f:
ee:34:40:59:22:ce:64:d5:9c:4b:70:f2:65:f4:76:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:2F:2D:53:2D:66:60:64:C5:AA:C7:31:98:CA:BC:18:1F:2D:F9
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/KscvLVMtZmBkxarHMZjKvBgfLfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.144.0/20
31.28.65.0/24
31.28.67.0-31.28.68.255
31.28.70.0/24
31.28.72.0/24
31.28.75.0/24
31.28.80.0-31.28.86.255
45.88.112.0/22
82.163.192.0/19
91.238.221.0/24
94.126.43.0/24
94.126.47.0/24
144.98.0.0/16
158.41.64.0/18
165.65.0.0/16
178.18.116.0/23
178.18.119.0/24
185.28.240.0/22
185.120.204.0/22
185.121.76.0/22
185.135.164.0/22
185.237.48.0/22
193.0.176.0/23
193.221.128.0/19
194.8.254.0/23
206.245.213.0/24
206.245.224.0-206.245.237.255
IPv6:
2a00:e340::/29
2a10:d700::/29
Signature Algorithm: sha256WithRSAEncryption
b3:90:fe:cf:a3:fb:57:01:57:ed:ca:3f:5e:88:46:7c:c6:bc:
4f:52:22:f4:d3:b1:e5:db:75:61:7b:d3:bf:85:46:55:de:ad:
c8:08:94:6c:79:22:f2:c1:38:bc:90:0d:6b:e6:c9:f2:76:37:
e6:3d:7e:ed:ae:5f:f7:19:a7:95:84:32:e8:94:58:4c:d6:ed:
0d:2d:a0:1f:f1:2a:e3:24:28:7f:93:22:a1:de:8b:c8:06:df:
bb:21:5b:00:f7:c4:c2:54:63:56:17:10:38:b1:80:68:68:90:
a0:62:ef:0b:2c:9f:5e:6c:b1:4d:19:d5:69:eb:82:48:81:17:
01:22:fb:89:51:3c:1d:55:9f:81:2a:52:66:cf:d0:05:55:6f:
92:15:10:31:67:5b:fb:62:ba:1d:0c:52:ca:cc:51:9e:a1:9e:
2a:64:86:5a:8a:62:9d:88:a5:8d:ff:ff:e6:7d:35:f3:53:42:
33:57:ba:50:f2:c9:3d:e1:98:e1:61:a4:93:23:af:ee:0a:06:
8e:bd:80:8a:92:7f:02:f0:f8:c3:31:23:04:57:23:50:3c:56:
37:04:64:98:64:7b:91:e8:37:5a:1d:9d:7a:72:5a:d9:87:23:
04:f8:a8:5b:c3:1c:a8:fd:91:28:aa:be:15:a6:cc:a5:5a:b4:
18:2e:e2:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:48 2025 by rpki-client