Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/lnK6iGp_rX8PMUKSiljxpWHcznE.roa
File: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (raw, json)
Hash identifier: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=
Subject key identifier: 96:72:BA:88:6A:7F:AD:7F:0F:31:42:92:8A:58:F1:A5:61:DC:CE:71
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 0197E99D2D3A251FD7D3B19120D8BDE9F9D1
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/lnK6iGp_rX8PMUKSiljxpWHcznE.roa
Signing time: Tue 08 Jul 2025 10:38:01 +0000
ROA not before: Tue 08 Jul 2025 10:38:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209825
IP address blocks: 46.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:9d:2d:3a:25:1f:d7:d3:b1:91:20:d8:bd:e9:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jul 8 10:38:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9672ba886a7fad7f0f3142928a58f1a561dcce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:19:51:9a:85:8a:51:00:e1:6b:89:59:fc:
c0:5f:20:68:0e:80:af:18:3e:be:92:22:17:ab:09:
88:28:c2:67:18:cb:35:ca:47:af:b9:e1:3e:55:6a:
5f:0e:50:2d:d1:5d:c2:73:01:4f:14:28:f2:44:ab:
92:10:8b:51:30:58:35:71:bc:36:69:1b:b0:41:53:
5e:e1:51:05:c0:fd:b3:e6:38:d1:74:d5:da:b0:e7:
30:68:92:1f:0c:27:96:e4:7b:75:f9:64:32:aa:0c:
5f:e4:62:42:ff:fe:4a:87:39:ae:ab:1e:06:d8:43:
b7:c7:a6:fc:38:6c:53:bf:d0:9f:3b:ff:a2:cd:0b:
3f:3c:31:6e:a2:fd:0c:ac:5e:ea:75:81:7b:76:c9:
f5:4e:78:88:fc:6a:aa:41:2e:9e:62:4e:6f:a4:46:
75:f2:c8:ff:30:1b:7d:21:fc:dc:37:d7:d2:8d:13:
d3:68:c1:ad:4d:68:de:0b:45:e5:55:5b:b9:c5:d9:
25:b7:4e:09:65:4f:be:bd:e5:d6:3c:b5:f9:36:8f:
4d:93:13:72:9d:01:19:14:bc:ba:0f:4c:6c:02:92:
dd:de:87:5d:62:fa:19:82:d8:46:9d:44:56:b4:52:
b3:40:e2:c2:de:77:2a:09:12:8c:83:ba:b3:24:d9:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:BA:88:6A:7F:AD:7F:0F:31:42:92:8A:58:F1:A5:61:DC:CE:71
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/lnK6iGp_rX8PMUKSiljxpWHcznE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
24:54:09:09:b4:a0:93:6d:a7:ca:4d:00:bd:8f:51:b6:eb:f8:
22:71:ba:cd:9e:16:12:16:b1:a5:c9:6e:c9:9a:53:8b:53:19:
a2:3d:15:87:a5:a0:c4:d3:73:10:f7:53:0f:14:d3:6e:5f:68:
f9:35:67:90:e2:30:26:dd:f6:5a:ec:a8:80:c1:74:da:54:c7:
78:b7:4e:16:cf:bc:07:bf:3e:b9:c1:ce:07:c6:a8:a9:8a:0d:
b7:e6:fc:6b:4b:38:17:54:8a:0c:2d:83:9c:e9:88:a3:10:72:
6b:ac:1a:54:6d:3d:64:33:ec:80:52:27:fb:66:4c:ce:d7:3b:
d4:8b:f6:de:20:d2:8a:d0:bb:03:31:bb:35:9c:bd:bb:c4:a4:
5c:2d:f7:d8:7a:c0:97:b4:15:1a:85:39:a5:7f:d0:15:1b:5d:
50:08:81:e6:86:cb:cf:18:10:99:cb:b6:1d:da:65:f1:10:99:
28:e5:1a:57:94:2e:36:87:6c:85:c4:0e:06:7b:08:ac:2b:4a:
0e:8d:34:4e:17:9b:6a:9e:51:2d:71:9f:85:72:14:ea:05:d8:
98:4c:5f:37:3b:f3:6c:ae:55:54:1b:42:0a:ae:ae:c5:f2:26:
00:f4:38:8f:14:a7:a4:2c:08:0f:14:4c:1f:21:c6:9f:c6:a5:
0f:64:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:00:48 2025 by rpki-client