Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/lRoCCR7d7sV8zan-pzAzhXIb0yk.roa
File: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (raw, json)
Hash identifier: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=
Subject key identifier: 95:1A:02:09:1E:DD:EE:C5:7C:CD:A9:FE:A7:30:33:85:72:1B:D3:29
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 0198093A8CEAC018149DC5B268666031A203
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/lRoCCR7d7sV8zan-pzAzhXIb0yk.roa
Signing time: Mon 14 Jul 2025 13:58:08 +0000
ROA not before: Mon 14 Jul 2025 13:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 91.234.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:3a:8c:ea:c0:18:14:9d:c5:b2:68:66:60:31:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Jul 14 13:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=951a02091eddeec57ccda9fea7303385721bd329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:4b:e3:e8:1c:ad:52:a8:ee:97:30:31:ab:
0b:3b:ef:db:0b:b2:3f:82:a1:1c:40:94:68:20:7e:
d7:f5:95:73:61:ab:6c:20:05:fc:bd:81:48:f0:4a:
85:b8:50:9b:91:fa:52:ed:51:54:67:25:70:36:7a:
22:58:08:94:a3:ea:e8:33:e8:20:20:7c:35:8a:45:
49:7a:e0:b7:35:b7:b6:75:25:34:17:f8:f9:34:4b:
39:cf:2e:9e:ef:fb:03:97:8a:75:09:7d:be:b0:fb:
65:6e:aa:68:3d:4c:99:fa:fc:39:8f:7c:0a:33:b3:
8c:6c:ae:3f:bd:17:f5:eb:b9:cc:6e:96:83:93:a0:
d3:a1:90:0e:a4:fb:81:08:c3:c9:77:c1:4e:6f:8a:
0f:34:1d:25:24:84:f1:59:f3:8a:55:f5:bb:e5:33:
8b:12:5b:e5:86:f9:d2:ef:8a:8c:c1:62:cc:e7:7d:
de:ab:3d:74:ef:88:7e:1e:b0:83:1f:fe:8c:5d:4e:
ea:2d:8a:3e:dd:6b:f8:e4:c2:e0:86:01:1e:32:2f:
62:c7:dc:62:12:c1:f2:69:c4:a0:cc:f9:d0:9f:62:
11:bf:46:ef:67:65:20:b4:c3:27:42:e3:47:9a:3e:
76:11:20:6a:45:8f:bf:7f:38:b6:25:8f:ef:80:e0:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:02:09:1E:DD:EE:C5:7C:CD:A9:FE:A7:30:33:85:72:1B:D3:29
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/lRoCCR7d7sV8zan-pzAzhXIb0yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:07:8c:d7:d8:a2:98:96:f5:a7:18:88:f0:a9:60:d4:d4:ab:
d7:96:80:a2:c9:9b:a0:98:e2:3f:7a:21:c4:0a:5d:23:66:5b:
57:6b:9e:b6:00:05:10:49:94:27:c3:e3:3f:fb:d7:3f:53:2c:
fe:8b:af:38:04:8a:83:3d:c8:4f:54:8a:e1:fe:74:b7:9b:6a:
24:c7:51:1e:6e:5d:1b:60:29:6c:d7:ce:72:98:04:9e:ae:f7:
b3:84:96:5d:7c:15:a3:44:2d:76:b3:58:17:a8:96:f8:99:c1:
30:6b:61:10:23:25:49:57:aa:bf:b2:59:cc:d1:de:24:be:ce:
52:8a:fd:36:f3:9e:eb:ab:6e:74:b6:08:9c:a4:c8:21:23:b6:
f9:eb:80:4f:96:10:90:1a:37:9c:cb:bd:75:ed:7f:d4:2e:29:
0b:d2:9f:dd:62:c4:ec:d7:dd:ae:e9:47:a4:dc:55:01:4f:b1:
03:fa:3d:e7:fb:48:5d:f0:1a:dd:4a:4b:8d:ab:bb:7f:44:3a:
ce:6c:ea:09:c9:79:cc:09:41:db:ff:4b:30:01:8e:20:80:f8:
96:8e:6d:e1:58:b1:6a:bf:2b:04:c1:97:cb:79:37:e1:3a:9d:
c0:c6:a7:21:f9:f0:64:19:9a:08:a3:8b:f9:1b:83:d7:85:78:
ca:20:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:42 2025 by rpki-client