Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/lM1B4eqvI9WRB2F5MltXjXFSUNw.roa
File: lM1B4eqvI9WRB2F5MltXjXFSUNw.roa (raw, json)
Hash identifier: AbZgfqJhiLBwdICwkR/kGfMSad6ug4enx96U2XP1Fgk=
Subject key identifier: 94:CD:41:E1:EA:AF:23:D5:91:07:61:79:32:5B:57:8D:71:52:50:DC
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 0197F0241FE0B621B437E76F9495C655E9DA
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/lM1B4eqvI9WRB2F5MltXjXFSUNw.roa
Signing time: Wed 09 Jul 2025 17:03:08 +0000
ROA not before: Wed 09 Jul 2025 17:03:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5640
IP address blocks: 90.183.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:24:1f:e0:b6:21:b4:37:e7:6f:94:95:c6:55:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jul 9 17:03:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94cd41e1eaaf23d591076179325b578d715250dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:04:a8:d6:2b:fb:f4:09:66:9f:82:fb:5c:
06:d6:e9:e9:c9:a2:01:c6:1a:66:cc:67:27:0d:46:
43:b9:4c:90:25:47:e4:96:82:8e:08:b0:ac:06:62:
91:7b:16:f0:53:34:77:09:3d:e5:89:06:19:3d:f9:
e4:9e:35:c9:15:48:57:e8:7e:59:bf:da:f3:b6:f6:
10:3f:23:d4:3e:c5:33:b0:7a:28:21:ad:01:09:15:
57:95:14:d1:bb:26:aa:1d:f4:7f:25:ff:ea:0a:3e:
0f:cb:b4:5d:90:5a:df:6e:7b:28:b6:81:11:61:d2:
ac:a0:2f:33:9b:57:81:b2:d2:d8:df:c3:f7:2a:09:
68:4e:ca:a7:06:80:2b:36:b5:ab:57:1e:97:64:4c:
c5:4a:6e:99:55:bd:2d:c4:1c:b1:21:25:2d:50:aa:
bf:5a:8e:74:b9:53:b2:23:d4:f6:53:1a:ce:b9:b2:
1f:b1:fb:fe:57:1d:4c:b8:a5:21:f4:92:01:16:fd:
1e:8c:61:35:8e:37:2b:a5:1e:73:0e:a3:1f:64:f8:
bc:df:26:31:d6:76:07:70:7b:9b:88:62:d5:91:8e:
1a:58:50:7b:17:7d:3e:46:c1:22:3e:f3:2a:67:57:
68:49:25:d4:ab:07:e3:29:07:15:03:a3:af:a5:84:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:41:E1:EA:AF:23:D5:91:07:61:79:32:5B:57:8D:71:52:50:DC
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/lM1B4eqvI9WRB2F5MltXjXFSUNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.183.151.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:e5:69:af:ed:2b:50:9c:7a:75:7c:7d:d1:34:60:11:75:
cf:8a:2d:a6:15:3c:2d:c2:49:9f:a2:70:28:48:d2:10:7e:46:
c2:fd:d1:fd:89:33:1b:83:50:66:6f:ec:72:70:d3:5f:39:e8:
e0:65:49:1a:70:ea:1d:31:58:16:06:04:a0:36:e9:40:c4:24:
5f:53:c4:e4:2f:7c:e3:23:d9:d1:20:1d:75:a8:d2:94:00:15:
9f:c4:8d:3c:59:f0:c5:ab:54:4b:32:26:12:fe:00:8e:ec:4c:
07:20:31:b7:e8:40:d1:0d:94:3c:01:8d:3d:7b:6a:84:12:76:
19:36:53:86:0a:61:cc:33:ba:76:44:18:42:b6:d3:1e:38:80:
71:66:1e:80:8a:8c:85:91:b0:70:b9:06:86:6b:22:67:b9:28:
2c:07:32:93:b3:5b:3f:5a:68:32:e2:b9:66:b5:bd:93:86:c3:
a5:81:e1:52:76:42:b7:08:8b:70:ef:16:9a:27:73:99:20:16:
58:24:25:bb:68:3b:39:8c:51:10:f5:bb:63:d3:23:ca:65:f8:
13:5f:db:05:e9:ad:9b:8a:ef:4e:2a:fe:86:b4:47:c0:b7:6d:
5a:66:51:04:ce:63:a1:14:d8:75:53:5d:3f:62:7d:0f:53:5b:
63:0a:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:34:46 2025 by rpki-client