Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/LNIMITYAbnJvMYE5J7ei8eACNa0.roa
File: LNIMITYAbnJvMYE5J7ei8eACNa0.roa (raw, json)
Hash identifier: TvpR/eCPWYxWewvW/DN1BJNGxjnk3BZ6oYY2B4jFvf8=
Subject key identifier: 2C:D2:0C:21:36:00:6E:72:6F:31:81:39:27:B7:A2:F1:E0:02:35:AD
Certificate issuer: /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial: 0197E915CA780595A350A18FF729CF805284
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/LNIMITYAbnJvMYE5J7ei8eACNa0.roa
Signing time: Tue 08 Jul 2025 08:10:08 +0000
ROA not before: Tue 08 Jul 2025 08:10:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9044
IP address blocks: 91.199.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:15:ca:78:05:95:a3:50:a1:8f:f7:29:cf:80:52:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Validity
Not Before: Jul 8 08:10:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd20c2136006e726f31813927b7a2f1e00235ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:c1:39:c6:4a:8c:73:36:58:cc:ce:89:04:
94:04:11:fd:f0:85:2d:5a:1d:d5:03:b6:d9:cb:5d:
3b:83:2b:8f:1c:04:5e:d6:ab:7b:b6:ac:bf:c7:cc:
f4:4e:32:da:8d:3b:3c:db:d9:e9:ac:59:2c:df:e8:
35:12:2f:84:3b:2e:93:2b:d3:45:45:72:23:46:50:
fd:5f:20:37:89:81:98:3b:ef:86:2b:dc:60:69:e6:
f7:fa:b9:8e:87:b0:88:19:38:62:41:a7:f4:04:16:
5b:52:f7:cd:e8:59:c1:5f:2d:8b:b4:f4:31:83:09:
77:c2:50:f9:d5:70:c4:81:89:b3:1c:3c:31:28:f9:
b1:70:7e:cd:64:63:e3:fc:06:d4:d2:88:c4:dd:d7:
36:a6:c5:88:2c:4c:ed:4e:83:da:d7:b5:47:8a:41:
f6:80:08:3e:f9:87:2d:b7:b9:15:15:c1:7d:63:9f:
34:a6:c1:cd:8b:6a:a2:f6:94:31:ac:a8:bd:6d:1c:
d0:f7:08:58:d0:5a:ae:02:d8:29:de:bf:a0:b0:c7:
8a:b7:51:0d:99:18:53:6c:a6:b5:e0:e4:8f:30:dc:
e7:68:9a:ef:32:42:04:96:68:e7:05:98:79:ec:12:
b2:a0:92:38:a9:0d:a8:dd:ac:13:c2:e2:2f:db:df:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:0C:21:36:00:6E:72:6F:31:81:39:27:B7:A2:F1:E0:02:35:AD
X509v3 Authority Key Identifier:
keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/LNIMITYAbnJvMYE5J7ei8eACNa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.228.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:dd:5a:7c:83:a1:6a:d3:cf:46:39:d9:46:ce:fb:92:b5:
35:fd:7a:5e:c1:2f:ca:c9:00:63:ad:0b:24:ed:75:f9:1e:17:
45:44:21:9b:12:f9:d0:12:96:e6:84:85:7e:de:2c:91:c7:e4:
cc:0b:7d:0a:ae:22:e7:3a:e0:4a:f1:e4:39:d3:51:3f:71:d7:
10:b9:fc:f1:ba:3e:7b:28:a4:5e:ce:e4:18:20:20:de:39:f0:
4c:f8:a0:20:87:76:04:43:4d:63:38:e7:8c:be:2b:e0:b0:bf:
df:0e:e5:04:cb:49:aa:19:a3:e1:6e:0a:9b:94:b2:b4:62:84:
07:61:29:e8:17:76:b8:d4:bf:aa:0f:3e:8e:d9:d2:ac:a2:11:
5b:00:b6:38:93:05:f4:7a:d1:07:c9:22:df:c6:f4:eb:c2:95:
0e:1c:79:7a:06:31:94:d3:b6:2a:8e:5e:75:1d:c9:a5:3d:d4:
22:1b:ab:c1:57:d8:72:b5:91:6e:86:e2:e6:05:d6:d1:6c:76:
42:17:4b:2b:60:d2:fb:02:61:20:41:7e:6b:1f:24:f8:1c:50:
0b:fb:40:ca:66:b2:60:45:16:83:79:f0:34:88:62:36:9d:6a:
3b:d3:3e:2b:f8:31:ff:c3:e1:14:e6:fc:4a:93:99:4c:73:81:
18:c1:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:13 2025 by rpki-client