Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LvPIfQH4UyYCcRXi6sJn7kjH7Ps.roa
File: LvPIfQH4UyYCcRXi6sJn7kjH7Ps.roa (raw, json)
Hash identifier: 7q/4Vu5LntYltY8o4YhRrCR5LQnENsLSxQfNUweAMqs=
Subject key identifier: 2E:F3:C8:7D:01:F8:53:26:02:71:15:E2:EA:C2:67:EE:48:C7:EC:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01991858039ABA8658009CE20C8E2F630717
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LvPIfQH4UyYCcRXi6sJn7kjH7Ps.roa
Signing time: Fri 05 Sep 2025 05:27:25 +0000
ROA not before: Fri 05 Sep 2025 05:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215804
IP address blocks: 94.156.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:58:03:9a:ba:86:58:00:9c:e2:0c:8e:2f:63:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 05:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef3c87d01f85326027115e2eac267ee48c7ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:a8:72:3e:a3:4c:18:bf:24:40:34:37:06:
63:18:2c:68:e6:8e:50:a2:2b:b7:11:ee:76:05:4a:
eb:2d:1d:50:fc:51:dd:dd:9e:93:c4:1e:db:0d:27:
db:ff:46:1e:7e:af:5e:d7:27:60:1b:95:e8:30:48:
17:f0:77:7f:4c:e9:06:2a:48:5a:01:98:45:02:86:
b3:a2:fe:3c:88:45:25:0e:7a:c0:f0:3b:ab:57:89:
6a:d6:0e:95:10:69:70:5d:d0:f4:4b:d8:b0:dc:94:
4a:70:81:f3:a7:7d:9e:62:a0:22:6d:9e:18:7a:0d:
de:34:e0:89:57:32:b6:9b:60:78:fa:ea:27:d5:a7:
73:35:86:94:9e:a7:c7:82:70:fb:09:bc:a1:57:cb:
6a:43:1b:a9:f3:2c:79:6e:91:d0:85:75:c0:a8:d9:
7a:04:e3:b6:3a:30:ac:88:28:cf:8c:96:f5:63:60:
d8:ec:12:5c:fb:d7:fe:57:78:d9:a7:ea:0f:dd:4d:
02:ba:4c:4e:7f:06:2c:bc:7e:9f:f4:bf:b0:39:78:
ed:7c:aa:bf:49:92:96:9f:d4:f1:fb:6d:1c:09:25:
b6:a8:55:9d:1e:d6:30:a9:5d:c6:d8:34:c3:9e:71:
49:d7:63:5c:b5:33:bd:ec:8f:98:8f:5c:db:f1:af:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:C8:7D:01:F8:53:26:02:71:15:E2:EA:C2:67:EE:48:C7:EC:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LvPIfQH4UyYCcRXi6sJn7kjH7Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3d:54:e8:9a:0c:f2:10:bf:1e:c2:93:57:69:72:53:fe:f5:
00:70:65:11:fc:98:6c:de:41:5d:ec:bb:d0:ac:4b:57:06:f2:
fb:e0:d5:3d:77:0a:17:39:58:92:01:4e:66:59:c8:50:5a:51:
36:32:c0:f0:60:98:e8:e3:c8:6a:9f:e3:2e:f3:e1:c1:6f:58:
18:58:6e:21:33:57:65:22:ad:37:63:8a:22:66:1e:90:25:c5:
12:6d:6f:5f:57:46:57:0e:0e:11:f9:93:d9:c5:02:14:6a:13:
07:78:34:a7:11:e6:93:5b:69:17:7d:0f:95:ef:e0:8d:bb:1c:
5d:42:9f:d7:9b:39:0f:d2:fb:77:5d:de:bd:7a:45:e4:7f:54:
7f:eb:0e:c4:7c:a6:e9:e6:c7:61:0c:65:ec:4c:62:2a:4c:a0:
e0:dd:1d:e7:e2:16:87:bf:11:c9:66:83:f6:56:84:4e:bf:c3:
37:79:64:eb:5b:04:ce:9e:0c:cb:c5:4a:a9:ee:f0:a8:4a:d2:
54:c4:c2:fb:d1:70:6b:f2:1e:5a:cc:25:0b:12:40:35:5a:a2:
4e:ef:50:f7:6c:0c:ac:20:e3:02:df:72:70:9d:9b:ce:fa:ea:
1c:db:5c:fb:51:37:d0:fe:92:0e:8e:a2:53:59:2d:4d:6f:a0:
ba:78:35:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkYWAOauoZYAJziDI4vYwcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwOTA1MDUyNzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWYzYzg3ZDAxZjg1MzI2MDI3MTE1ZTJlYWMyNjdlZTQ4YzdlY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKqocj6jTBi/JEA0NwZjGCxo5o5Q
oiu3Ee52BUrrLR1Q/FHd3Z6TxB7bDSfb/0Yefq9e1ydgG5XoMEgX8Hd/TOkGKkha
AZhFAoazov48iEUlDnrA8DurV4lq1g6VEGlwXdD0S9iw3JRKcIHzp32eYqAibZ4Y
eg3eNOCJVzK2m2B4+uon1adzNYaUnqfHgnD7CbyhV8tqQxup8yx5bpHQhXXAqNl6
BOO2OjCsiCjPjJb1Y2DY7BJc+9f+V3jZp+oP3U0CukxOfwYsvH6f9L+wOXjtfKq/
SZKWn9Tx+20cCSW2qFWdHtYwqV3G2DTDnnFJ12NctTO97I+Yj1zb8a9UdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7zyH0B+FMmAnEV4urCZ+5Ix+z7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTHZQSWZRSDRVeVlDY1JYaTZzSm43a2pIN1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpxDMA0G
CSqGSIb3DQEBCwUAA4IBAQCyPVTomgzyEL8ewpNXaXJT/vUAcGUR/Jhs3kFd7LvQ
rEtXBvL74NU9dwoXOViSAU5mWchQWlE2MsDwYJjo48hqn+Mu8+HBb1gYWG4hM1dl
Iq03Y4oiZh6QJcUSbW9fV0ZXDg4R+ZPZxQIUahMHeDSnEeaTW2kXfQ+V7+CNuxxd
Qp/XmzkP0vt3Xd69ekXkf1R/6w7EfKbp5sdhDGXsTGIqTKDg3R3n4haHvxHJZoP2
VoROv8M3eWTrWwTOngzLxUqp7vCoStJUxML70XBr8h5azCULEkA1WqJO71D3bAys
IOMC33JwnZvO+uoc21z7UTfQ/pIOjqJTWS1Nb6C6eDWp
-----END CERTIFICATE-----
Generated at Sat Sep 6 10:47:32 2025 by rpki-client