Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/SS2CXlahSk9By0fRlVm-SmedwzE.roa
File: SS2CXlahSk9By0fRlVm-SmedwzE.roa (raw, json)
Hash identifier: aUQz3cYQAl8T2KPX+MNKNABDFzPqs6nBTTE1ZfNC7QE=
Subject key identifier: 49:2D:82:5E:56:A1:4A:4F:41:CB:47:D1:95:59:BE:4A:67:9D:C3:31
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0198E4FCB8DE617FF5760C4DA8623B375AC1
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/SS2CXlahSk9By0fRlVm-SmedwzE.roa
Signing time: Tue 26 Aug 2025 06:07:04 +0000
ROA not before: Tue 26 Aug 2025 06:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30815
IP address blocks: 88.209.128.0/22 maxlen: 22
88.209.128.0/24 maxlen: 24
88.209.129.0/24 maxlen: 24
88.209.130.0/24 maxlen: 24
88.209.132.0/22 maxlen: 22
88.209.132.0/24 maxlen: 24
88.209.133.0/24 maxlen: 24
88.209.135.0/24 maxlen: 24
88.209.136.0/24 maxlen: 24
88.209.137.0/24 maxlen: 24
88.209.138.0/24 maxlen: 24
88.209.139.0/24 maxlen: 24
88.209.160.0/21 maxlen: 21
88.209.160.0/22 maxlen: 22
88.209.160.0/24 maxlen: 24
88.209.161.0/24 maxlen: 24
88.209.162.0/24 maxlen: 24
88.209.163.0/24 maxlen: 24
88.209.164.0/22 maxlen: 22
88.209.164.0/23 maxlen: 23
88.209.164.0/24 maxlen: 24
88.209.165.0/24 maxlen: 24
88.209.166.0/24 maxlen: 24
88.209.167.0/24 maxlen: 24
88.209.190.0/24 maxlen: 24
88.209.191.0/24 maxlen: 24
93.189.96.0/21 maxlen: 21
93.189.96.0/23 maxlen: 23
93.189.96.0/24 maxlen: 24
93.189.97.0/24 maxlen: 24
93.189.98.0/23 maxlen: 23
93.189.98.0/24 maxlen: 24
93.189.99.0/24 maxlen: 24
93.189.100.0/23 maxlen: 23
93.189.100.0/24 maxlen: 24
93.189.101.0/24 maxlen: 24
93.189.102.0/23 maxlen: 23
93.189.102.0/24 maxlen: 24
93.189.103.0/24 maxlen: 24
185.63.232.0/22 maxlen: 22
185.63.232.0/23 maxlen: 23
185.63.232.0/24 maxlen: 24
185.63.233.0/24 maxlen: 24
185.63.234.0/24 maxlen: 24
185.63.235.0/24 maxlen: 24
2a03:11e0::/32 maxlen: 32
2a03:11e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:fc:b8:de:61:7f:f5:76:0c:4d:a8:62:3b:37:5a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Aug 26 06:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=492d825e56a14a4f41cb47d19559be4a679dc331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:68:a8:f7:92:e5:6b:19:db:83:c4:52:b8:
33:2f:36:95:9e:04:47:72:1d:65:bb:f4:99:20:37:
55:52:cc:4c:c1:64:ff:57:02:77:b9:5f:5c:2e:1d:
b5:22:cc:2b:c7:be:96:0e:a9:29:70:36:29:3b:74:
04:6d:b9:d7:20:88:bb:45:ac:b6:97:58:b6:dd:7c:
4c:3e:80:c3:19:00:4f:38:ad:34:69:8e:04:e6:1b:
ea:03:2b:28:51:c0:76:0c:f0:ac:96:b7:18:0d:80:
fa:3d:f9:e8:ad:a4:10:aa:ca:d4:8a:f1:d7:15:60:
cb:2d:76:73:59:7f:08:f2:68:01:47:78:8c:3d:eb:
06:9f:2f:a0:98:a7:17:1f:19:06:1f:92:65:31:18:
ac:3f:ae:56:01:1a:34:85:fb:e2:ab:b3:30:a5:12:
d4:61:53:db:fd:1f:4d:74:7c:66:64:a7:f9:4a:e6:
5d:b9:c1:2e:e8:d0:46:d0:72:6c:9c:14:ae:46:3c:
87:c7:ac:38:9f:19:ed:dd:65:da:33:13:f3:58:03:
6d:d1:dd:89:85:4c:64:30:d8:75:90:3e:3b:3c:78:
2e:75:7f:ba:ed:ca:27:02:79:be:8a:e2:c0:12:d5:
76:3d:0d:1b:db:cb:60:61:9e:35:bf:20:ca:76:40:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:82:5E:56:A1:4A:4F:41:CB:47:D1:95:59:BE:4A:67:9D:C3:31
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/SS2CXlahSk9By0fRlVm-SmedwzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.128.0-88.209.139.255
88.209.160.0/21
88.209.190.0/23
93.189.96.0/21
185.63.232.0/22
IPv6:
2a03:11e0::/32
Signature Algorithm: sha256WithRSAEncryption
62:f5:f1:e3:1a:61:2d:8b:0c:91:68:f9:bd:aa:a2:e1:36:6d:
81:11:49:02:81:73:43:b2:15:6f:2e:59:b3:54:29:58:eb:54:
a1:9e:e2:bd:63:b9:38:8f:85:d0:3c:86:1f:fb:d4:b1:5c:3c:
46:60:f0:67:82:d2:ab:11:3a:f0:39:77:9a:95:4a:fb:de:99:
a2:67:5e:1c:54:8e:a8:26:97:1f:fe:54:a1:b4:f8:8b:7d:8a:
c3:b1:11:96:21:10:10:9d:84:a2:cd:d2:ce:0d:fc:ca:05:a8:
17:95:cf:8d:a3:3c:05:94:5e:15:9f:ce:80:af:e6:92:24:30:
97:7a:b8:ca:d0:8e:8b:09:72:a6:c8:7e:83:91:e2:d9:7f:c1:
86:96:95:f3:6a:d6:ff:cc:cf:a6:46:b1:5e:0f:ed:78:f6:10:
89:66:2a:a4:67:38:b0:b4:c4:af:5d:80:5d:ab:36:f5:0b:e7:
44:27:17:b1:8d:5d:56:dd:a9:7d:6d:5d:fc:21:f7:c3:08:cd:
c0:ec:58:d8:0c:02:13:29:93:4b:01:d4:3a:eb:24:83:36:46:
3d:57:c4:53:d5:9d:cb:24:87:29:ab:83:81:53:29:fb:ad:45:
c3:71:c7:53:84:85:f3:71:e9:84:93:c9:6d:4d:f4:a9:49:2a:
ee:aa:b8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:45:42 2025 by rpki-client