Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Lat7Ur59L9ROqgP8VE0UMBow9Ik.roa
File: Lat7Ur59L9ROqgP8VE0UMBow9Ik.roa (raw, json)
Hash identifier: 71OLxleyHa71qzZb4OKazZRwmp0vQUFo/BqOXzVQbBI=
Subject key identifier: 2D:AB:7B:52:BE:7D:2F:D4:4E:AA:03:FC:54:4D:14:30:1A:30:F4:89
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01980DD04158858F233C657EDE67F2FEBDD0
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Lat7Ur59L9ROqgP8VE0UMBow9Ik.roa
Signing time: Tue 15 Jul 2025 11:20:08 +0000
ROA not before: Tue 15 Jul 2025 11:20:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.186.194.0/23 maxlen: 24
94.241.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:d0:41:58:85:8f:23:3c:65:7e:de:67:f2:fe:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jul 15 11:20:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dab7b52be7d2fd44eaa03fc544d14301a30f489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:89:8f:f4:ac:9c:ec:f2:4c:31:60:4f:e2:
76:1e:b6:ef:85:ce:6e:36:58:99:92:16:69:cf:67:
e6:be:0a:03:7f:77:a6:be:b7:67:c4:b5:85:39:3d:
32:19:98:68:26:ea:ea:13:7a:ba:c3:96:2f:93:ff:
dd:09:99:26:52:07:94:33:34:26:67:5f:69:3c:d8:
92:36:f2:62:fe:fc:fc:5f:02:96:57:7c:51:43:02:
fc:93:2b:b8:52:2f:9e:4d:13:35:6a:77:60:77:76:
3b:02:17:46:1f:9e:22:5f:2d:46:f2:82:a1:b7:8f:
a8:ed:8f:f9:b2:9d:e8:51:a7:0e:95:d1:f1:a8:fa:
e7:71:87:88:ce:36:a5:66:af:9f:9c:b6:2c:de:85:
4b:92:83:4f:5a:27:82:38:b9:fe:6e:cd:22:16:8a:
33:08:8a:a9:70:47:a4:88:a8:15:71:fe:91:00:77:
8c:61:ee:21:18:9d:2d:48:ab:d8:f1:1d:cc:a1:86:
3e:5b:6a:ae:c1:ad:94:ee:3c:7f:51:d3:38:fe:08:
b1:7a:f2:ce:9f:c7:71:5f:d5:5e:30:46:3e:c3:7a:
89:2b:07:3f:ee:52:3c:bd:50:f9:a0:e5:88:e9:57:
fd:8f:f5:60:61:ee:56:bc:24:e2:8a:09:ca:61:23:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:7B:52:BE:7D:2F:D4:4E:AA:03:FC:54:4D:14:30:1A:30:F4:89
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Lat7Ur59L9ROqgP8VE0UMBow9Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
99:df:fa:71:c8:b0:9a:ed:7b:95:b4:56:61:ef:d7:d8:4e:92:
00:30:e8:d6:24:4a:c9:10:0f:e5:2b:17:57:46:14:50:c2:36:
be:5d:ed:47:8b:9b:ce:25:be:a9:12:c1:ea:a2:49:57:a9:9d:
8e:11:8a:dc:11:2b:cc:cd:e9:23:b6:c0:8c:1a:bf:cf:97:22:
4f:45:64:a1:10:84:84:74:e8:c6:c6:bb:5d:87:d4:62:81:25:
b4:d0:a1:b7:07:fd:58:ed:d6:33:0e:91:63:01:74:a5:13:9d:
79:41:1f:c1:c2:84:da:27:b0:48:2e:3a:17:ef:f1:b4:92:73:
bc:db:84:7a:56:86:f0:05:5a:f1:c3:6e:e1:9a:f1:6e:61:3c:
02:1d:5f:95:10:20:f5:7f:9e:18:eb:a8:37:43:82:51:d8:9f:
3a:20:39:19:71:b0:6c:a9:14:0c:c3:c4:ce:3e:83:a0:2e:60:
9e:86:32:85:d0:52:b8:a3:d0:78:c1:48:ca:83:96:df:3b:fc:
ec:55:d8:40:ac:88:7c:1b:2b:f6:1f:38:1b:dc:92:3f:f8:84:
7e:ee:4e:f5:c5:96:77:a3:f2:10:3f:d0:c1:ed:26:19:c6:2f:
76:96:67:3b:4f:a5:f0:6a:e4:f8:d2:79:82:75:5a:3c:f2:aa:
d3:9c:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:42:28 2025 by rpki-client