Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/2K91_HI3yRMddEE3CCdohZUgZwo.roa
File: 2K91_HI3yRMddEE3CCdohZUgZwo.roa (raw, json)
Hash identifier: L2hHrr+jKFFMceiT1hMQ07sIlZ5+5KK9MtoxNrnP1Sc=
Subject key identifier: D8:AF:75:FC:72:37:C9:13:1D:74:41:37:08:27:68:85:95:20:67:0A
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019A39B4D2FACC61B3D2EE09EBACCC8A57E2
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/2K91_HI3yRMddEE3CCdohZUgZwo.roa
Signing time: Fri 31 Oct 2025 09:59:02 +0000
ROA not before: Fri 31 Oct 2025 09:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206996
IP address blocks: 5.249.160.0/24 maxlen: 24
5.249.161.0/24 maxlen: 24
5.249.162.0/24 maxlen: 24
5.249.163.0/24 maxlen: 24
5.249.164.0/24 maxlen: 24
5.249.165.0/24 maxlen: 24
5.249.166.0/24 maxlen: 24
45.141.36.0/24 maxlen: 24
45.141.37.0/24 maxlen: 24
45.146.252.0/24 maxlen: 24
45.146.253.0/24 maxlen: 24
45.146.254.0/24 maxlen: 24
45.146.255.0/24 maxlen: 24
88.214.56.0/24 maxlen: 24
88.214.57.0/24 maxlen: 24
88.214.58.0/24 maxlen: 24
88.214.59.0/24 maxlen: 24
92.42.44.0/24 maxlen: 24
92.42.45.0/24 maxlen: 24
92.42.46.0/24 maxlen: 24
92.42.47.0/24 maxlen: 24
134.255.216.0/24 maxlen: 24
134.255.217.0/24 maxlen: 24
134.255.218.0/24 maxlen: 24
134.255.219.0/24 maxlen: 24
134.255.231.0/24 maxlen: 24
134.255.232.0/24 maxlen: 24
134.255.233.0/24 maxlen: 24
134.255.234.0/24 maxlen: 24
147.189.168.0/24 maxlen: 24
147.189.169.0/24 maxlen: 24
147.189.170.0/24 maxlen: 24
147.189.171.0/24 maxlen: 24
147.189.172.0/24 maxlen: 24
147.189.173.0/24 maxlen: 24
147.189.174.0/24 maxlen: 24
147.189.175.0/24 maxlen: 24
185.223.28.0/24 maxlen: 24
185.223.29.0/24 maxlen: 24
185.223.30.0/24 maxlen: 24
185.223.31.0/24 maxlen: 24
185.239.236.0/24 maxlen: 24
185.239.237.0/24 maxlen: 24
185.239.238.0/24 maxlen: 24
185.239.239.0/24 maxlen: 24
185.249.196.0/24 maxlen: 24
185.249.197.0/24 maxlen: 24
185.249.198.0/24 maxlen: 24
185.249.199.0/24 maxlen: 24
193.23.126.0/24 maxlen: 24
193.23.127.0/24 maxlen: 24
193.23.160.0/24 maxlen: 24
193.23.161.0/24 maxlen: 24
193.34.69.0/24 maxlen: 24
193.203.238.0/24 maxlen: 24
194.156.88.0/24 maxlen: 24
194.156.89.0/24 maxlen: 24
194.156.90.0/24 maxlen: 24
194.156.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b4:d2:fa:cc:61:b3:d2:ee:09:eb:ac:cc:8a:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Oct 31 09:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8af75fc7237c9131d744137082768859520670a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:9e:60:5a:b6:de:e1:40:79:6f:19:c2:14:
cb:7b:08:f8:67:48:8d:68:87:c7:c9:29:93:a9:2f:
b3:b7:82:f2:f9:1b:5d:9e:eb:eb:7b:c4:0a:c7:e6:
14:ef:08:73:14:43:31:12:e5:45:03:49:5c:11:c7:
65:91:c1:33:d5:93:91:21:b9:2d:c9:c6:0e:11:23:
46:40:5f:f1:62:de:7a:3e:5f:01:b4:d6:3b:d4:51:
84:b0:96:fa:ae:70:81:f8:31:10:72:19:10:f9:2a:
3d:3d:bc:47:07:ae:34:b8:0f:27:cc:a4:2c:84:0f:
7a:74:b4:0c:9f:db:7d:44:64:a7:2a:c3:8e:d0:88:
a6:2e:f3:3b:9c:c5:bc:70:e7:a0:07:13:0f:16:3d:
58:c3:5f:8b:6b:25:5d:40:0b:22:f6:7f:66:c0:a0:
a3:3c:34:92:4a:f3:83:d9:40:7d:5d:e3:c5:3d:32:
7c:e1:b2:0e:26:ba:8c:a7:37:ea:26:bd:5e:b2:af:
73:06:3a:48:de:b8:fc:a1:a4:fc:7f:40:7b:df:01:
0f:2b:fc:c5:33:6e:5e:23:13:dd:37:55:ac:5a:6a:
7c:b4:54:26:ee:22:50:a8:77:e7:30:9f:5e:75:d3:
c0:54:a6:42:64:07:73:60:e3:26:cc:8f:9e:01:df:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AF:75:FC:72:37:C9:13:1D:74:41:37:08:27:68:85:95:20:67:0A
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/2K91_HI3yRMddEE3CCdohZUgZwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.160.0-5.249.166.255
45.141.36.0/23
45.146.252.0/22
88.214.56.0/22
92.42.44.0/22
134.255.216.0/22
134.255.231.0-134.255.234.255
147.189.168.0/21
185.223.28.0/22
185.239.236.0/22
185.249.196.0/22
193.23.126.0/23
193.23.160.0/23
193.34.69.0/24
193.203.238.0/24
194.156.88.0/22
Signature Algorithm: sha256WithRSAEncryption
28:fd:e9:0f:64:2d:26:ff:e0:15:50:e7:e1:80:1a:a0:7b:13:
80:58:aa:c8:5e:f1:9e:72:32:79:4c:ee:9f:50:ed:45:6e:c3:
f4:8a:c2:e1:ac:9a:7b:9e:d1:90:67:b2:55:1e:82:f5:7b:3e:
fe:62:d5:be:a3:4e:f5:6c:ff:35:96:28:68:98:41:c9:91:f1:
d4:43:ae:1f:03:4a:79:d2:03:51:93:29:e3:53:c2:df:58:68:
e8:d4:07:a5:5d:36:03:f7:44:45:c2:d9:90:16:f6:96:99:2c:
19:1b:c2:78:75:24:0a:d0:00:74:90:95:6e:25:87:78:23:c2:
9c:73:87:dd:0d:d1:f1:78:bc:39:c7:93:55:af:98:e3:74:14:
ec:63:44:11:9b:87:94:4a:82:f7:05:a1:b1:ba:df:50:6a:60:
bd:51:5b:e4:9a:91:b6:d7:26:f1:e7:58:3b:1a:ea:35:20:4d:
36:de:06:36:89:36:bd:da:16:f5:6f:52:49:fd:9c:df:cc:df:
62:a3:c6:c0:75:15:c4:74:c1:de:9e:e7:43:de:cc:47:17:86:
c1:ba:a0:3b:aa:82:5c:45:ed:73:8b:cf:f1:31:9e:82:c4:d4:
08:dd:67:5e:a0:ac:21:3c:64:4c:09:5c:85:cc:32:78:ff:ed:
d6:18:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:39 2025 by rpki-client