Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/lek8VaNP5_OMRfw13e8vh39Y3ic.roa
File: lek8VaNP5_OMRfw13e8vh39Y3ic.roa (raw, json)
Hash identifier: eNdxuoCqcWmiQb8k+1c1KARxBXQm44L8CPPFjxF+7M4=
Subject key identifier: 95:E9:3C:55:A3:4F:E7:F3:8C:45:FC:35:DD:EF:2F:87:7F:58:DE:27
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01980DF04C0754E4320D125E2C605ED9B2E8
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/lek8VaNP5_OMRfw13e8vh39Y3ic.roa
Signing time: Tue 15 Jul 2025 11:55:08 +0000
ROA not before: Tue 15 Jul 2025 11:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212913
IP address blocks: 80.76.42.0/24 maxlen: 24
89.221.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:f0:4c:07:54:e4:32:0d:12:5e:2c:60:5e:d9:b2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 15 11:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e93c55a34fe7f38c45fc35ddef2f877f58de27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:fb:29:3d:3f:d8:e2:75:7e:f6:aa:ea:73:
f5:ec:7d:c4:c1:89:91:92:4c:79:e2:f4:c2:97:cc:
2a:b2:82:4f:1b:52:3c:a6:ca:72:9a:9b:3d:f6:7a:
4d:8a:51:44:ab:a5:61:c4:d7:dd:4c:0a:83:52:13:
47:9c:d9:b9:a8:7e:6c:f0:2b:0a:f1:e2:f7:45:68:
87:7b:07:d7:30:d6:80:da:31:d2:1e:1a:83:b9:8d:
bf:08:d4:82:bf:81:8d:31:62:e2:3f:24:99:cd:5b:
98:2b:14:35:0b:d5:19:e0:4e:9c:11:7d:43:0c:46:
b7:74:60:56:1e:47:83:99:24:04:72:a8:89:f6:13:
20:96:1e:28:f0:e6:5e:f4:a2:09:d1:c7:c9:0f:e7:
ec:a3:64:0d:16:ef:a3:d6:76:a0:25:34:f3:92:24:
3b:fe:26:9d:06:ac:e3:e0:11:0f:dd:af:e2:77:02:
e5:ce:95:11:49:2e:0e:8c:02:90:dc:21:63:9c:e3:
06:99:21:f5:ae:75:26:d3:f8:04:93:b3:0a:46:a4:
64:1e:9d:ff:57:2f:f9:b1:53:15:6f:5b:63:d3:ac:
57:70:59:c9:cc:4d:93:31:a0:b4:8a:ea:a5:1b:e7:
de:b6:d4:d7:0d:e6:69:b7:0e:13:e1:5b:83:36:f1:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:3C:55:A3:4F:E7:F3:8C:45:FC:35:DD:EF:2F:87:7F:58:DE:27
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/lek8VaNP5_OMRfw13e8vh39Y3ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.42.0/24
89.221.204.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6e:f3:22:c3:b7:13:da:1c:e3:b0:73:a3:08:fd:14:f1:b8:
10:c5:ff:3d:d0:0f:09:03:5a:85:3a:44:eb:42:34:4a:9e:89:
ca:b5:31:25:4b:bc:9b:0c:03:0d:d9:c9:50:76:69:7c:82:5b:
32:03:3d:e9:f5:3b:b0:57:c9:b5:76:d0:8c:5d:da:6a:ff:0e:
f8:b0:18:e4:e9:e9:80:a1:f1:1e:81:d9:c9:62:fa:9e:9f:4f:
ad:0c:8c:ae:34:58:9e:55:b9:27:86:8a:7c:0f:09:83:a8:26:
2f:4a:7c:ea:17:af:41:3e:1f:ea:ec:44:0a:5e:62:03:8d:5f:
6d:6e:69:0e:3f:c8:37:48:f1:1f:cc:43:c3:6f:3c:79:18:71:
2d:dc:e0:16:50:61:b3:23:c5:40:4d:b8:97:e9:bf:7e:8d:6c:
6a:0e:01:04:65:63:78:03:f6:ef:aa:7d:68:37:3c:0e:d7:8c:
53:05:7d:92:c3:6e:40:e5:eb:5e:04:c5:e2:63:f5:ec:01:eb:
34:70:4c:c2:31:63:7e:e0:d3:7e:a7:d5:6c:a2:f2:47:b2:96:
1f:2a:d7:41:f3:64:40:0c:ee:82:30:22:cd:8f:94:f2:24:6b:
08:68:cc:69:14:48:f5:e1:5e:34:53:b3:a4:11:59:85:8b:56:
b7:e3:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:31:09 2025 by rpki-client