Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DKi_mw5cXKDjyftdWkCnec4SChM.roa
File: DKi_mw5cXKDjyftdWkCnec4SChM.roa (raw, json)
Hash identifier: dxFNwUwUIGLvkHsYaAxR6/nbkSAsu3uM/w64xkbqEYg=
Subject key identifier: 0C:A8:BF:9B:0E:5C:5C:A0:E3:C9:FB:5D:5A:40:A7:79:CE:12:0A:13
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01993E6A91B3CB3F397CB219A15856ACB828
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DKi_mw5cXKDjyftdWkCnec4SChM.roa
Signing time: Fri 12 Sep 2025 14:53:15 +0000
ROA not before: Fri 12 Sep 2025 14:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 31.222.238.0/24 maxlen: 24
37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.95.11.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
77.75.230.0/24 maxlen: 24
80.71.157.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
84.246.85.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
91.242.229.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.9.0/24 maxlen: 24
94.131.10.0/24 maxlen: 24
94.131.11.0/24 maxlen: 24
94.131.12.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/24 maxlen: 24
94.232.244.0/24 maxlen: 24
94.232.245.0/24 maxlen: 24
94.232.246.0/24 maxlen: 24
94.232.247.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.75.0/24 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
176.126.113.0/24 maxlen: 24
178.23.190.0/24 maxlen: 24
185.53.46.0/24 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
185.252.215.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
193.203.203.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.104.136.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.74.86.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf40::/32 maxlen: 32
2a0b:cf41::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c00::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c01::/32 maxlen: 32
2a11:4c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e00::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d84::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d86::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
2a14:3883:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:6a:91:b3:cb:3f:39:7c:b2:19:a1:58:56:ac:b8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Sep 12 14:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ca8bf9b0e5c5ca0e3c9fb5d5a40a779ce120a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:af:1c:41:a1:5c:23:f9:e6:6f:bb:57:5f:
0a:b1:71:06:7c:6b:9f:47:9a:63:46:1b:23:59:71:
e5:c4:5e:0a:3f:18:5a:ac:c1:de:94:bd:1f:c9:0b:
d8:2e:6e:54:7e:f4:b0:d3:44:2e:ca:c2:66:c4:e9:
c0:00:81:3b:96:c8:3c:29:ae:a2:fc:ff:b6:c6:d1:
23:fa:ca:c1:2f:ce:f4:d1:e1:5c:55:d0:96:98:81:
c6:27:e8:45:cd:5a:46:46:f6:87:49:00:a8:2e:9e:
c8:32:a8:41:f1:f5:47:d3:5e:ad:4b:e3:5b:a2:50:
61:34:b5:f3:3a:ca:e2:89:71:38:17:b7:8f:1a:aa:
0f:d4:94:b4:39:b0:b9:f3:b6:30:89:5f:5f:1b:b9:
16:74:a9:88:82:b7:d7:16:35:6f:de:b2:1a:ff:37:
43:ba:9d:fa:8b:75:2d:2d:25:36:ef:35:8c:a6:2d:
0e:49:09:1b:2a:ca:59:db:fc:81:42:0b:1b:f7:03:
05:7e:ca:cf:ba:25:4b:53:d5:95:48:a5:29:b0:c0:
26:3e:c2:92:c5:0e:a7:15:b4:77:54:e2:2f:40:e1:
96:bd:9f:82:64:d1:ee:b4:a8:93:90:29:18:ab:6c:
b9:c7:c5:77:f2:4f:44:8d:80:24:8b:26:77:d2:8b:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:BF:9B:0E:5C:5C:A0:E3:C9:FB:5D:5A:40:A7:79:CE:12:0A:13
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DKi_mw5cXKDjyftdWkCnec4SChM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.238.0/24
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.95.11.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
77.75.230.0/24
80.71.157.0/24
80.92.204.0-80.92.206.255
84.246.85.0/24
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
91.242.229.0/24
94.131.3.0/24
94.131.8.0-94.131.14.255
94.131.20.0/24
94.131.96.0/23
94.131.99.0-94.131.101.255
94.131.104.0/22
94.131.109.0-94.131.112.255
94.131.116.0-94.131.120.255
94.232.244.0/22
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.75.0/24
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
176.126.113.0/24
178.23.190.0/24
185.53.46.0/24
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
185.252.215.0/24
193.203.202.0/23
194.54.156.0/22
194.62.42.0/24
194.104.136.0/24
194.246.114.0/23
195.42.232.0/22
195.74.86.0/24
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c41::-2a09:7c47:ffff:ffff:ffff:ffff:ffff:ffff
2a0b:cf40::/31
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c00::/30
2a11:4c00::/31
2a11:4c03::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e00::/32
2a11:7e06::/32
2a14:2d80::/29
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
2a14:3883:1::/48
Signature Algorithm: sha256WithRSAEncryption
81:75:b2:2f:17:0a:e6:d7:94:56:5f:dd:85:3d:78:5a:75:6f:
08:b0:b9:51:31:3a:f1:b8:8b:0c:73:74:83:50:26:0d:e5:1e:
65:c3:92:50:83:26:c8:89:1d:0f:18:32:6c:6b:bc:d6:07:60:
eb:8e:6d:34:c9:e5:cb:5e:b7:7e:f1:3f:4a:24:8b:87:87:4c:
14:04:6e:8d:4a:19:84:2f:e6:cf:85:be:f8:39:b4:2b:80:56:
44:b6:3e:b6:63:a5:11:52:40:0f:2c:40:d6:db:69:89:1d:7b:
ac:1c:53:a1:71:c8:f7:55:2c:08:b4:94:57:11:20:a8:0f:44:
2f:96:bc:5e:de:c4:b4:1d:8e:b6:a7:f0:14:fa:39:cb:63:ad:
24:35:6e:e4:b5:f9:23:83:6e:7c:f6:a5:43:5b:db:fc:10:ab:
7b:f1:f8:6d:79:9e:e3:30:ab:39:ff:60:33:48:93:4f:19:6a:
15:22:a0:9a:91:3d:04:81:56:da:8b:e0:c9:0d:8f:3c:58:1f:
4b:10:52:02:f7:ad:08:a1:4d:48:c1:09:6c:bc:59:a7:a6:4d:
bc:8a:5f:6b:1f:ed:31:12:8d:22:d7:bb:36:34:38:30:c6:b4:
6a:28:07:9c:ee:06:c2:a8:83:20:80:af:cb:dd:92:d8:18:80:
93:e8:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:30:35 2025 by rpki-client