Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LLB318gT3Kc56Xgq8digRS9PBz8.roa
File: LLB318gT3Kc56Xgq8digRS9PBz8.roa (raw, json)
Hash identifier: 6oVAKF0NRsiFpgTUOxJ7LNJPpt0i9VdA60BU8UEcM4Q=
Subject key identifier: 2C:B0:77:D7:C8:13:DC:A7:39:E9:78:2A:F1:D8:A0:45:2F:4F:07:3F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0197C7023F6CDC761F53DC278EDD1CB3FC4D
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LLB318gT3Kc56Xgq8digRS9PBz8.roa
Signing time: Tue 01 Jul 2025 17:21:42 +0000
ROA not before: Tue 01 Jul 2025 17:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205964
IP address blocks: 2a06:fe41::/32 maxlen: 32
2a11:400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:02:3f:6c:dc:76:1f:53:dc:27:8e:dd:1c:b3:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jul 1 17:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb077d7c813dca739e9782af1d8a0452f4f073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:1e:ee:77:27:e4:22:f7:b9:54:be:ec:8b:
be:35:19:cd:ee:34:ab:c2:73:d9:f2:86:29:fe:9a:
88:cf:23:54:e2:c7:2b:b3:25:4f:af:21:5c:7e:69:
e9:5b:dd:e5:05:3e:4c:42:6c:b6:6a:c9:4a:d1:5a:
4f:d8:db:24:80:dc:d6:54:b2:df:7c:54:7f:d7:15:
17:18:03:79:bb:40:8c:09:f6:94:e6:0c:24:92:70:
28:d4:b0:90:06:fe:0b:60:9e:7e:e7:96:c8:4d:b9:
ec:00:b6:5b:30:63:a6:b5:29:28:47:36:16:b3:1d:
7d:8c:80:5a:c8:08:d6:21:31:15:a2:55:ce:f4:e6:
c3:0e:72:54:3a:3a:c6:55:e8:d0:81:8c:4d:f0:e8:
c3:3f:94:7e:42:da:7c:0b:2f:c7:5e:7b:0b:7e:f5:
1d:ff:58:f3:b3:85:88:88:ce:1f:31:52:75:74:01:
9e:e8:b0:57:48:e6:6b:25:b0:1c:ae:09:00:72:fd:
55:31:16:2d:01:44:7a:4c:15:dc:50:2f:42:bb:14:
32:57:54:b0:45:25:6f:1b:3c:46:b2:bd:8c:7a:fb:
bd:18:86:f3:d2:05:ee:01:10:19:ce:e1:91:f8:60:
26:e3:46:ea:30:e3:34:7b:b9:67:20:e4:f8:66:43:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:77:D7:C8:13:DC:A7:39:E9:78:2A:F1:D8:A0:45:2F:4F:07:3F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LLB318gT3Kc56Xgq8digRS9PBz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fe41::/32
2a11:400::/29
Signature Algorithm: sha256WithRSAEncryption
12:ba:67:ab:73:24:9f:ae:24:b2:6a:b5:65:03:bb:09:f5:5a:
aa:35:c3:fa:c9:c0:d8:7f:d5:67:4e:4c:9c:40:7d:bd:70:42:
71:b6:ee:92:7a:da:02:8a:ef:d5:55:19:d6:05:02:93:a6:95:
33:c2:67:41:b6:77:04:38:f0:9c:b3:9f:f0:3e:7d:eb:a0:f2:
8d:93:f0:5f:27:30:38:71:0d:b7:39:0f:dc:72:31:3b:5e:d5:
97:17:4e:19:bd:49:e2:43:f3:93:b5:28:59:26:0a:10:a8:24:
14:bc:1c:a6:67:6f:3b:8a:42:93:11:24:37:cb:6f:9c:a3:44:
9c:99:fb:cb:4a:26:45:31:f8:99:78:cc:a6:25:33:5c:c6:cf:
73:5d:eb:3b:51:b3:01:de:c7:ec:33:f2:e6:44:31:fd:c5:36:
03:7d:ac:9a:d5:94:b7:64:68:08:99:e9:d7:03:48:56:f3:35:
f8:5f:a2:8a:7a:78:14:88:f8:c2:26:1b:cc:96:6a:33:4e:23:
d1:ad:70:c4:4f:e9:de:0c:b4:62:a8:1d:0d:5a:03:9c:4b:82:
a4:8e:cf:4c:15:71:0b:21:7e:5e:20:90:15:32:54:4d:67:ab:
60:0a:92:61:82:6c:80:dc:f6:98:dc:c6:e9:65:27:b0:af:19:
01:d5:2f:dd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZfHAj9s3HYfU9wnjt0cs/xNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwNzAxMTcyMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2IwNzdkN2M4MTNkY2E3MzllOTc4MmFmMWQ4YTA0NTJmNGYwNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Ye7ncn5CL3uVS+7Iu+NRnN7jSr
wnPZ8oYp/pqIzyNU4scrsyVPryFcfmnpW93lBT5MQmy2aslK0VpP2NskgNzWVLLf
fFR/1xUXGAN5u0CMCfaU5gwkknAo1LCQBv4LYJ5+55bITbnsALZbMGOmtSkoRzYW
sx19jIBayAjWITEVolXO9ObDDnJUOjrGVejQgYxN8OjDP5R+Qtp8Cy/HXnsLfvUd
/1jzs4WIiM4fMVJ1dAGe6LBXSOZrJbAcrgkAcv1VMRYtAUR6TBXcUC9CuxQyV1Sw
RSVvGzxGsr2Mevu9GIbz0gXuARAZzuGR+GAm40bqMOM0e7lnIOT4ZkMiIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCywd9fIE9ynOel4KvHYoEUvTwc/MB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvTExCMzE4Z1QzS2M1NlhncThkaWdSUzlQQno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgb+QQMF
AyoRBAAwDQYJKoZIhvcNAQELBQADggEBABK6Z6tzJJ+uJLJqtWUDuwn1Wqo1w/rJ
wNh/1WdOTJxAfb1wQnG27pJ62gKK79VVGdYFApOmlTPCZ0G2dwQ48Jyzn/A+feug
8o2T8F8nMDhxDbc5D9xyMTte1ZcXThm9SeJD85O1KFkmChCoJBS8HKZnbzuKQpMR
JDfLb5yjRJyZ+8tKJkUx+Jl4zKYlM1zGz3Nd6ztRswHex+wz8uZEMf3FNgN9rJrV
lLdkaAiZ6dcDSFbzNfhfoop6eBSI+MImG8yWajNOI9GtcMRP6d4MtGKoHQ1aA5xL
gqSOz0wVcQshfl4gkBUyVE1nq2AKkmGCbIDc9pjcxullJ7CvGQHVL90=
-----END CERTIFICATE-----
Generated at Mon Jul 21 09:05:16 2025 by rpki-client