Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mll4rTtrUdS49oNy9TXy47duZkU.roa
File: mll4rTtrUdS49oNy9TXy47duZkU.roa (raw, json)
Hash identifier: zt/IH5lAQiU9R9DC31GhwrOzct751ez6ym+faJYcz0E=
Subject key identifier: 9A:59:78:AD:3B:6B:51:D4:B8:F6:83:72:F5:35:F2:E3:B7:6E:66:45
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199098E7A9697805676DB97561248A34660
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mll4rTtrUdS49oNy9TXy47duZkU.roa
Signing time: Tue 02 Sep 2025 08:32:36 +0000
ROA not before: Tue 02 Sep 2025 08:32:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 170.168.28.0/24 maxlen: 24
170.168.29.0/24 maxlen: 24
170.168.30.0/24 maxlen: 24
170.168.31.0/24 maxlen: 24
170.168.96.0/24 maxlen: 24
170.168.97.0/24 maxlen: 24
170.168.98.0/24 maxlen: 24
170.168.99.0/24 maxlen: 24
170.168.172.0/24 maxlen: 24
170.168.173.0/24 maxlen: 24
170.168.174.0/24 maxlen: 24
170.168.175.0/24 maxlen: 24
170.168.240.0/24 maxlen: 24
170.168.241.0/24 maxlen: 24
170.168.242.0/24 maxlen: 24
170.168.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:8e:7a:96:97:80:56:76:db:97:56:12:48:a3:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 2 08:32:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5978ad3b6b51d4b8f68372f535f2e3b76e6645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:f3:8b:4e:6d:41:0e:ff:9b:d0:df:df:41:
ee:e7:5f:71:26:84:d4:bf:4d:7d:78:b0:35:58:4b:
c1:7b:86:8d:c8:7d:0c:fd:0f:67:db:9a:a4:5f:9d:
6a:0f:0c:a9:34:c5:23:8e:28:a0:59:1b:23:b4:1f:
e7:07:68:5d:4b:a3:c0:ba:c2:ad:f4:74:ec:81:d2:
5f:27:70:e6:45:6c:d4:99:f1:70:2b:8e:f0:dd:c0:
09:c9:a9:a9:b0:be:40:88:63:f9:4e:38:4a:cf:81:
19:9b:34:72:8d:8a:b9:ba:27:4a:3c:ba:7e:30:4d:
b4:7f:0d:4d:fc:51:4f:2a:f4:52:93:93:c2:e1:f9:
c8:c5:45:4c:b6:77:44:88:d4:ff:6e:4b:4d:86:6a:
cc:1a:6f:d5:af:38:09:92:ad:59:0a:5f:2e:c6:aa:
7a:f2:3a:c0:2b:76:e0:b9:92:43:bc:9c:7b:da:3c:
86:61:85:38:3c:55:48:d6:c7:8c:75:34:77:37:c5:
c9:63:01:3e:08:e6:84:62:bf:92:31:bd:13:27:53:
55:17:e6:56:2a:33:97:cf:79:a4:d1:42:89:6f:95:
4d:2d:dd:44:ae:97:8e:0e:f6:d6:90:91:73:2a:a2:
bb:0b:b1:ee:49:ec:51:80:28:62:b2:d3:21:8b:87:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:78:AD:3B:6B:51:D4:B8:F6:83:72:F5:35:F2:E3:B7:6E:66:45
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mll4rTtrUdS49oNy9TXy47duZkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.28.0/22
170.168.96.0/22
170.168.172.0/22
170.168.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f7:00:6b:db:07:b4:14:94:bc:c2:df:1f:59:c1:c4:7b:7c:
f8:5c:0b:b3:13:08:be:5a:32:41:be:34:e8:85:6a:ac:6f:08:
6d:8f:6f:8f:c0:a9:03:d5:c2:38:04:07:59:25:69:f4:59:aa:
15:1e:11:ae:b0:62:f9:f3:40:35:85:5a:05:28:89:2f:d9:59:
e8:46:c2:5a:3e:bd:7a:a8:fe:e7:98:e6:69:55:33:78:76:ee:
51:2d:63:90:b3:40:b1:cd:4e:3d:06:2a:47:27:37:f3:12:cf:
b7:b9:15:b3:8b:e3:c7:4a:9f:73:9e:c8:34:65:ef:4f:20:be:
49:97:74:5f:fc:5c:28:da:0c:12:31:a1:3f:25:d4:5f:2a:3f:
96:d9:0e:ef:9d:40:a3:26:77:e5:1c:e5:90:c2:54:1a:10:8b:
dc:c9:cf:30:62:a9:c5:0b:cf:a6:b4:97:e3:e8:23:39:c3:6a:
84:e9:53:0c:5e:bd:3f:39:49:3b:58:5d:70:01:c1:d2:fd:15:
c8:3c:65:ce:c5:2d:6a:b6:22:b7:01:fd:a8:bf:e7:f7:80:50:
1b:c9:d3:69:e3:04:0e:19:78:ae:07:eb:ae:88:87:ac:a9:3c:
d3:14:ad:ba:3c:96:58:c9:4a:3d:b9:a9:7b:af:be:53:9a:73:
f4:19:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:52:54 2025 by rpki-client