Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lbrau2JtA8X2hjF2eNSVcaTnVhs.roa
File: Lbrau2JtA8X2hjF2eNSVcaTnVhs.roa (raw, json)
Hash identifier: 9vgazVe2hcxjkrUuynadkj0f3LSVorQWTYc4+Nl6NZw=
Subject key identifier: 2D:BA:DA:BB:62:6D:03:C5:F6:86:31:76:78:D4:95:71:A4:E7:56:1B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01994BDBE8F3641DEA39D05D5C5C130E4DBE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lbrau2JtA8X2hjF2eNSVcaTnVhs.roa
Signing time: Mon 15 Sep 2025 05:32:07 +0000
ROA not before: Mon 15 Sep 2025 05:32:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4b:db:e8:f3:64:1d:ea:39:d0:5d:5c:5c:13:0e:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 05:32:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dbadabb626d03c5f686317678d49571a4e7561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:ef:f7:a6:c9:2a:ce:25:e9:b3:2d:b6:56:
85:e2:24:80:e9:2f:bf:42:80:68:d0:8c:d2:54:84:
71:06:e7:b5:c3:5a:07:4c:a6:e7:f5:a2:b5:87:22:
2b:f9:d6:14:50:02:78:f4:83:77:0a:18:ab:74:33:
14:fd:80:de:e6:e4:51:60:5a:54:fc:85:8e:d0:21:
27:5b:f3:e1:03:e8:b2:bb:f5:62:17:ba:93:21:26:
65:61:06:77:35:68:fb:d6:02:03:90:d4:37:11:4d:
bf:2d:83:a2:4c:c3:2a:fb:30:c3:17:19:de:29:e0:
55:dd:0b:49:b4:ab:0e:e7:60:89:8f:30:f4:3f:52:
e6:aa:a3:22:af:20:0c:a0:cc:8d:11:eb:0a:58:26:
30:62:29:31:74:86:f6:8e:34:a4:93:25:d8:34:9f:
c4:6f:bb:0f:df:f1:bc:94:b5:ea:65:42:a0:6e:6a:
a0:65:88:6a:1d:2a:4b:32:8d:23:e1:82:29:a1:c5:
c6:27:34:a7:c3:92:f7:ca:69:54:25:23:00:8f:9c:
f0:e9:ad:aa:11:dd:ec:3c:99:fb:ab:ea:b5:25:fa:
9f:6c:92:15:96:a6:d3:2d:25:41:1f:fb:99:b8:32:
90:7d:0e:fa:59:d9:7b:e6:bb:1b:93:5f:1e:13:ce:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BA:DA:BB:62:6D:03:C5:F6:86:31:76:78:D4:95:71:A4:E7:56:1B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lbrau2JtA8X2hjF2eNSVcaTnVhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
20:6e:cf:6f:00:27:b9:28:05:03:4d:02:47:05:47:99:8e:74:
61:45:20:36:2f:54:e8:c3:14:ef:92:39:85:81:8d:98:7d:1f:
f4:44:66:fe:54:fe:5a:9e:f3:78:c6:3b:aa:ef:12:a0:34:af:
7e:f0:4a:d7:55:7a:ba:18:d5:5e:1c:30:f0:d5:4e:f5:29:30:
d8:d9:cd:5f:51:8c:c6:37:c3:e7:67:78:3c:7a:25:a4:5f:e8:
d1:9a:92:15:89:02:9f:26:f4:ff:c7:32:fc:e2:1b:fe:d6:81:
91:c1:47:59:14:ee:72:10:e1:71:eb:8a:4a:a7:15:ab:66:39:
8d:25:59:0c:c9:35:0b:b7:ae:92:2a:c1:48:19:57:cb:83:0d:
c9:86:d9:04:26:72:f2:71:4e:38:d2:a5:06:21:7f:39:bf:80:
41:02:e9:ee:3a:6e:3d:a0:19:dd:b6:76:c3:cb:78:c9:be:87:
8d:9c:4c:cb:5c:31:42:75:9d:04:6d:5a:1c:56:e8:f3:d7:60:
38:c5:9d:ad:d6:48:d1:2d:3b:e7:42:9c:59:11:64:55:a8:26:
c0:0e:58:1e:56:59:3d:2a:09:c9:55:31:10:9c:08:d0:1e:eb:
f9:5d:0b:b4:5f:6e:fa:07:be:0c:53:9c:c8:46:2d:ec:a0:db:
dc:20:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:38:02 2025 by rpki-client