Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/LECXwwOJkYXSvoEkkhVQqcZQMCw.roa
File: LECXwwOJkYXSvoEkkhVQqcZQMCw.roa (raw, json)
Hash identifier: c2nAj2MsaYNhv7IXToz+zt87p0StOKZqVhSYKT3pEAI=
Subject key identifier: 2C:40:97:C3:03:89:91:85:D2:BE:81:24:92:15:50:A9:C6:50:30:2C
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01982B86B839E49173CEC5D89612C46756E8
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/LECXwwOJkYXSvoEkkhVQqcZQMCw.roa
Signing time: Mon 21 Jul 2025 05:48:25 +0000
ROA not before: Mon 21 Jul 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.9.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
88.223.16.0/24 maxlen: 24
88.223.17.0/24 maxlen: 24
88.223.18.0/24 maxlen: 24
88.223.19.0/24 maxlen: 24
88.223.20.0/24 maxlen: 24
88.223.21.0/24 maxlen: 24
88.223.22.0/24 maxlen: 24
88.223.23.0/24 maxlen: 24
88.223.170.0/24 maxlen: 24
88.223.171.0/24 maxlen: 24
88.223.174.0/24 maxlen: 24
88.223.175.0/24 maxlen: 24
95.173.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:86:b8:39:e4:91:73:ce:c5:d8:96:12:c4:67:56:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 21 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c4097c303899185d2be8124921550a9c650302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:06:b0:1f:29:a2:84:67:57:1a:79:19:af:
cf:dc:34:3a:1b:54:7f:0c:28:4a:ab:a5:86:d4:df:
de:d3:01:3b:c0:90:2f:00:a4:47:3b:c7:50:2a:11:
4c:38:4b:47:26:a7:9f:30:2c:9e:75:e4:2b:31:51:
17:cb:c4:8c:d6:c9:d2:57:7a:31:f0:28:a9:52:03:
13:d0:24:8f:36:83:6a:ef:1d:dd:55:d3:27:db:7d:
f1:82:c8:92:a1:19:a6:26:57:b3:b8:16:9a:bb:31:
e6:dc:11:f0:12:63:8d:17:88:84:6d:18:af:14:19:
6e:42:67:97:20:bc:41:98:22:95:c5:1c:65:dd:3a:
75:fc:18:26:f6:93:6d:f3:09:79:91:3b:49:7a:33:
ed:d9:1b:d3:70:97:22:4e:89:d1:71:7b:18:8f:4c:
a4:13:82:d6:2b:0d:57:08:89:36:6a:23:b5:f5:41:
c2:19:64:04:69:55:15:4a:01:d3:01:b8:fc:a9:54:
e6:09:c9:29:3b:dd:6e:3f:24:42:da:02:49:ec:bb:
a8:77:10:10:c7:18:d4:ea:64:c2:c7:91:17:42:90:
23:1d:c5:49:ee:d3:f8:e0:86:9c:c0:68:49:c6:10:
7e:d7:f2:40:8a:f9:80:a3:2a:83:d4:54:6a:dd:b6:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:97:C3:03:89:91:85:D2:BE:81:24:92:15:50:A9:C6:50:30:2C
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/LECXwwOJkYXSvoEkkhVQqcZQMCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.9.0/24
84.55.18.0/24
88.223.16.0/21
88.223.170.0/23
88.223.174.0/23
95.173.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:79:29:c4:af:44:d4:db:0c:70:30:dd:09:68:f7:e6:b8:81:
65:80:a8:28:de:46:35:f3:8d:93:a0:c6:56:cf:7c:04:9e:4b:
90:cd:fe:ab:fe:70:49:41:4b:1d:c6:7d:8e:e3:3b:23:7b:78:
85:30:7b:c2:c5:ee:02:a1:34:24:bd:83:05:96:cc:d5:2b:20:
27:af:a0:53:ac:b1:68:f6:f8:b9:5f:39:c2:69:97:50:db:27:
05:9b:30:44:e1:a5:d6:61:db:94:81:01:60:80:88:0f:5b:99:
a9:4c:cc:99:82:97:36:03:2b:c3:89:6f:ec:e8:b1:6b:ec:64:
e6:19:3e:d8:85:b6:75:99:53:9a:45:ac:d8:c5:fa:44:2b:28:
08:c6:3e:be:fa:70:d6:c6:e8:6d:50:8f:04:2e:d9:6e:96:b9:
e5:c1:1b:fa:e6:5c:9e:e0:ac:a5:46:5e:35:60:c0:9a:5e:2f:
51:8e:2d:3e:5b:af:c7:94:0f:90:21:a3:62:7a:ff:8b:58:48:
75:99:56:21:dd:cc:c0:00:93:2e:29:61:56:2a:ba:34:d3:ca:
9e:0c:81:c7:57:08:89:54:81:e6:62:83:e9:2c:4f:90:1e:66:
57:87:77:81:63:b4:80:6a:eb:23:b1:85:49:bd:f3:d4:49:36:
d7:49:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:54 2025 by rpki-client