Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/osKAKznbh_jDyR15kciphndcRGw.roa
File: osKAKznbh_jDyR15kciphndcRGw.roa (raw, json)
Hash identifier: G40jq8pYS0BCQN4mQ38BZ7v/gJiOzfB4yaulxeu8R7k=
Subject key identifier: A2:C2:80:2B:39:DB:87:F8:C3:C9:1D:79:91:C8:A9:86:77:5C:44:6C
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 0198C1103F86B40C13FEC950F0C47CC3AC68
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/osKAKznbh_jDyR15kciphndcRGw.roa
Signing time: Tue 19 Aug 2025 06:42:04 +0000
ROA not before: Tue 19 Aug 2025 06:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/18 maxlen: 23
94.134.89.0/24 maxlen: 24
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:10:3f:86:b4:0c:13:fe:c9:50:f0:c4:7c:c3:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Aug 19 06:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c2802b39db87f8c3c91d7991c8a986775c446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:b1:98:4e:65:f9:b1:4b:98:f1:30:40:39:
6a:8a:cb:eb:fc:13:6f:ae:33:9a:2d:c7:fd:37:1f:
84:dc:61:89:4a:1c:b1:85:63:7b:63:c9:3b:b3:6a:
25:34:f6:2d:26:5e:8b:9e:9f:d6:89:a3:1c:f1:ff:
82:e0:b3:2a:06:ef:4a:22:69:8a:cf:2d:b1:23:fa:
51:79:2a:e0:0a:62:8d:08:05:25:a5:7d:bf:d7:c2:
fb:e7:c0:d7:50:08:59:45:9a:9c:04:a3:30:ed:24:
ec:50:d4:63:f8:06:75:82:81:2a:ab:af:e0:b0:cd:
f0:96:e1:1b:f3:60:8a:a6:ea:53:e1:78:6f:b5:91:
c8:2f:e9:5a:8e:92:7f:b1:55:be:f4:89:14:3a:a8:
40:16:1c:61:13:1e:05:d6:d5:f6:d1:ec:2c:af:04:
38:76:40:fb:98:94:83:b3:cb:c4:cb:86:07:5e:ce:
a3:58:9b:bd:c1:8e:ed:3b:00:30:f6:3b:0c:ce:b2:
e5:45:7e:b6:47:f0:28:8f:38:dd:d4:f3:48:4c:55:
e6:05:65:34:20:f9:77:49:be:4b:ca:ab:b5:4e:ba:
00:72:80:ff:a6:35:05:f6:3d:68:8f:ad:d7:ae:79:
ad:81:9e:97:c0:2a:91:a7:b5:3a:87:c8:b1:0d:ed:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:80:2B:39:DB:87:F8:C3:C9:1D:79:91:C8:A9:86:77:5C:44:6C
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/osKAKznbh_jDyR15kciphndcRGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
78:c4:7f:a4:84:ec:8d:a3:f7:b0:a1:07:15:b5:2b:bb:9e:ba:
16:87:04:d6:e0:8d:68:40:ff:59:7b:7f:70:b4:7e:87:9e:30:
6a:1c:26:aa:4f:12:3a:1f:51:81:67:97:ba:c4:ad:b5:be:11:
27:8d:b5:07:40:0e:58:37:0f:a9:4d:e9:b4:80:6b:9e:97:c0:
bd:01:80:01:a1:ba:ff:33:c2:6e:97:b7:2d:dd:a2:e3:cc:da:
4d:19:bc:f5:01:14:18:5d:57:eb:ea:ba:cb:a0:33:63:d3:87:
93:74:ea:51:24:1b:05:97:8a:e9:eb:6d:e8:71:ba:29:13:4a:
b6:e9:4a:30:51:6c:1f:3c:d2:e3:da:48:92:76:fa:41:7c:28:
0b:c9:66:6d:8b:06:fe:27:f6:39:e9:55:87:46:b2:66:9e:c1:
ff:4a:43:a3:ca:ea:ee:b9:bc:10:c6:d4:46:e5:21:cf:e8:dc:
fd:9e:93:4a:51:5f:3e:1c:6c:40:43:ec:41:4b:3a:31:f7:a2:
90:7a:77:1b:3b:30:f2:18:6c:4f:4d:d1:21:8a:3b:44:30:8c:
12:4f:f7:b9:13:1b:0a:a8:32:22:d6:66:8f:b0:46:50:b1:b9:
64:f3:92:01:02:32:00:f3:b9:95:99:d7:f4:c2:fb:f3:71:d3:
98:59:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:01:10 2025 by rpki-client