Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LeJQNR3tVaZz-2eOZy-Yne6BPWY.roa
File: LeJQNR3tVaZz-2eOZy-Yne6BPWY.roa (raw, json)
Hash identifier: Gz0CrG5sVqbCflyItJgPeuOAwruafU6EJL8ZQwhBdY0=
Subject key identifier: 2D:E2:50:35:1D:ED:55:A6:73:FB:67:8E:67:2F:98:9D:EE:81:3D:66
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01980E1E13CF6F17B318AA40AD8D1A4246C5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LeJQNR3tVaZz-2eOZy-Yne6BPWY.roa
Signing time: Tue 15 Jul 2025 12:45:08 +0000
ROA not before: Tue 15 Jul 2025 12:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153371
IP address blocks: 188.253.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:1e:13:cf:6f:17:b3:18:aa:40:ad:8d:1a:42:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 15 12:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2de250351ded55a673fb678e672f989dee813d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:bc:38:dd:34:87:61:fb:5d:4d:3a:66:db:
90:98:6b:12:ec:0b:e4:d9:ba:86:6f:be:cb:6f:cf:
8a:07:3c:cd:86:ef:d1:9b:66:10:cf:90:f1:e4:f6:
7e:3c:54:49:fa:ef:8b:38:af:bc:86:29:9a:9d:45:
c2:52:be:77:18:47:61:01:86:80:a4:13:38:c1:45:
ce:f8:1c:27:c7:31:c9:0c:86:f1:26:22:ff:ee:3a:
a1:dc:73:b2:88:71:41:08:7a:40:e0:9a:8b:1a:94:
53:87:9c:8e:81:e7:a8:66:d4:d8:1f:b1:62:61:d9:
eb:2d:af:b0:7b:1c:ed:c8:37:01:26:c2:91:fb:df:
68:58:52:ac:5c:77:79:4b:e3:7e:1a:7a:b9:03:8b:
d3:da:a0:49:00:8e:e7:4e:f9:cc:d9:39:aa:16:3f:
56:d9:27:2f:22:e5:47:43:c1:ec:d4:0c:56:45:d0:
23:43:19:c1:71:57:52:6d:a5:1a:ad:3c:44:ad:d7:
13:05:37:c7:57:35:88:f4:9d:86:44:4c:6c:b4:ab:
cf:2d:3f:84:90:72:d6:4a:21:a9:c6:bf:9d:0f:cd:
10:6f:66:08:22:46:92:d6:34:fe:a9:6d:a8:1e:1d:
47:a0:66:c6:ef:98:55:23:12:56:79:68:b2:ee:2c:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E2:50:35:1D:ED:55:A6:73:FB:67:8E:67:2F:98:9D:EE:81:3D:66
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LeJQNR3tVaZz-2eOZy-Yne6BPWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.0.0/24
Signature Algorithm: sha256WithRSAEncryption
92:aa:04:ea:53:83:53:ea:f5:70:2d:12:32:8b:b1:b4:08:54:
3f:29:1d:39:49:10:f0:07:bc:92:d6:80:16:9b:c9:f0:4b:fa:
a7:35:9a:05:bf:4e:73:40:f8:6c:fa:04:96:01:3d:9e:3a:6f:
01:4f:74:a2:a3:44:b0:bc:da:a7:62:76:1e:fc:33:80:d4:bd:
ea:cb:38:ce:16:90:ff:ac:a4:82:33:9b:19:03:35:f5:f7:a4:
b9:ee:8f:8d:94:91:e8:30:0b:1d:b8:7e:14:08:6c:da:85:61:
d7:49:b7:92:15:ed:ca:27:fc:37:97:25:fa:13:95:cd:f7:ad:
86:63:b6:54:6b:aa:e8:a3:4e:7b:f4:ed:57:cc:5c:95:d3:81:
1d:7e:8a:87:a2:cf:f2:19:82:69:4d:68:14:8d:67:81:9c:98:
0d:83:4c:d2:0d:64:e9:c5:a9:12:27:44:30:8f:ee:3b:65:f3:
e0:61:d0:2e:71:f6:3a:ad:8a:ba:a4:91:4c:fe:7d:10:ff:95:
c4:43:53:b2:30:84:83:57:02:47:4b:19:bf:51:4e:dc:a0:38:
14:de:3f:dc:08:b4:36:f7:eb:f1:26:9b:47:7e:9d:7f:f7:47:
81:ab:f2:40:f5:8b:62:11:26:20:49:d3:27:2b:6a:9b:8e:fb:
9f:f6:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:36:26 2025 by rpki-client