Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa
File: KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa (raw, json)
Hash identifier: pqcUxo+09w1rwwb/a+Pv1KMDwz7jBVowX0NYd3fbC7s=
Subject key identifier: 28:F9:5A:AB:4D:53:9B:FE:D9:40:37:12:5E:80:72:88:55:E4:60:FE
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0199288FE9A0C874474A339233FCDA5FDB2E
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa
Signing time: Mon 08 Sep 2025 09:02:23 +0000
ROA not before: Mon 08 Sep 2025 09:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
80.239.119.0/24 maxlen: 24
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
212.169.64.0/18 maxlen: 18
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8f:e9:a0:c8:74:47:4a:33:92:33:fc:da:5f:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Sep 8 09:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28f95aab4d539bfed94037125e80728855e460fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:3d:e9:89:6c:cd:cf:26:eb:a8:c2:34:a5:
1f:37:15:38:bf:e3:f7:8f:2e:30:2c:ec:f1:69:8d:
43:03:5c:09:07:aa:2e:e4:c9:61:80:ca:2c:33:0f:
de:42:da:8c:eb:64:28:c2:ce:3b:38:50:45:89:23:
83:fa:dc:b9:36:6c:36:08:8d:21:3f:14:33:d5:11:
88:7e:da:9d:9c:67:23:cf:75:c0:37:54:9a:91:f1:
58:15:55:59:22:5e:72:0d:07:a4:bd:ca:ac:55:5f:
75:a9:6e:16:3c:3d:eb:1a:fd:22:a7:81:ff:fd:67:
da:fa:ff:f6:78:6c:b8:f4:51:1a:55:b3:6b:6d:2c:
d9:30:a0:9a:56:ba:91:f3:0f:55:07:ca:a9:b7:53:
19:5b:97:76:41:ee:89:46:f7:e3:2b:59:d2:63:79:
51:10:95:f5:ab:39:88:97:40:00:64:a3:d1:55:7e:
b5:3e:e6:c8:23:6d:00:df:68:7c:83:61:36:94:43:
82:40:c1:19:b6:27:42:a7:cd:1a:7e:71:dc:b5:d0:
9e:d8:0f:db:9b:1a:d1:8b:80:62:42:6e:62:7c:ae:
ce:3d:10:51:da:62:0b:e4:dc:bb:91:49:08:80:75:
ba:0a:9c:c0:b7:7b:47:c3:06:43:48:e2:96:a3:90:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:5A:AB:4D:53:9B:FE:D9:40:37:12:5E:80:72:88:55:E4:60:FE
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
212.169.64.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:ff:0f:a9:06:f7:3f:8c:60:64:d1:41:63:cf:c6:cc:6e:2b:
35:81:c0:08:77:2c:cd:40:9d:58:de:6d:c0:fc:2f:ce:f0:3b:
c5:5a:db:f2:9b:10:ca:14:44:d5:86:6c:c5:24:45:e3:f3:be:
c0:d1:e1:67:23:2b:6d:c7:02:25:39:9f:cb:24:cf:08:04:f2:
3b:3d:6d:9f:15:03:ea:f1:f5:8e:eb:ba:ae:4b:a8:d7:99:65:
e3:9f:d1:d5:4e:0d:28:01:9c:0b:15:19:6c:30:de:02:19:2c:
d1:45:7d:64:18:33:de:a7:c4:26:18:7a:18:9d:25:c1:74:2a:
63:9c:7b:77:f8:9e:ce:b3:d6:f8:77:de:76:70:bf:b8:22:4f:
a6:e8:8e:22:72:61:1b:28:65:a1:9b:00:57:c0:68:1d:81:56:
45:f9:c6:b9:c4:48:a4:4c:d9:a2:b0:1c:8c:b5:4f:c9:87:36:
da:6f:ac:03:3e:5d:83:19:ed:a8:1c:60:4e:07:2c:6d:f9:99:
6c:6d:a1:e6:c0:31:41:ed:6c:fe:46:42:d8:45:80:fb:e0:2d:
f7:8c:e1:34:44:3e:4e:42:a8:20:62:a0:a4:49:f0:d2:91:da:
37:41:05:ca:bf:08:16:b3:d8:bf:aa:3b:9b:3e:45:60:fa:c6:
85:91:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:29 2025 by rpki-client