Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/LpKVs4tWWGz6liQasGKu-rwjBZw.roa
File: LpKVs4tWWGz6liQasGKu-rwjBZw.roa (raw, json)
Hash identifier: /a//Kqf+5VWpEQmkGE8ivCNg5qpQX6oXfVNvK+Gr7zk=
Subject key identifier: 2E:92:95:B3:8B:56:58:6C:FA:96:24:1A:B0:62:AE:FA:BC:23:05:9C
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01970CE5DC5076D2A336ADD3094F9D158338
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/LpKVs4tWWGz6liQasGKu-rwjBZw.roa
Signing time: Mon 26 May 2025 14:01:20 +0000
ROA not before: Mon 26 May 2025 14:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213960
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:e5:dc:50:76:d2:a3:36:ad:d3:09:4f:9d:15:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: May 26 14:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e9295b38b56586cfa96241ab062aefabc23059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:45:02:b8:85:c2:67:32:d4:e0:f9:59:50:
c1:e6:68:54:e7:e4:07:31:31:e7:b2:4e:2e:a7:e8:
e9:06:6a:5d:26:e8:d6:03:bf:91:66:9d:ec:a9:6b:
ff:f3:24:c8:44:3b:85:fc:96:a6:bb:ae:a4:4a:5d:
f5:45:96:de:96:c3:6b:3e:7b:96:68:2d:02:8e:74:
0e:c1:11:75:ae:ed:a7:5a:ef:9c:1e:4c:2d:13:57:
f5:14:60:93:ed:1e:d4:53:50:43:5c:09:75:5a:9b:
eb:41:2c:bd:04:04:55:65:f6:42:6b:bf:98:82:c2:
b3:85:b4:3d:3b:46:31:21:52:b2:3b:e6:76:2b:f9:
83:2f:4b:76:0e:46:b2:77:c9:ed:25:a0:19:b7:a9:
85:fa:2c:46:29:fd:ba:cc:7a:a6:20:3b:17:8f:d2:
ec:d7:b4:3b:93:ad:a6:dd:12:32:c3:41:90:1a:8b:
ce:42:2c:01:8f:bd:b0:97:3c:5f:85:3a:43:05:52:
ed:9a:ea:fa:1a:e2:4e:06:67:36:fb:19:12:87:38:
22:19:34:59:4d:24:9e:e0:6c:60:7e:e7:35:3d:6d:
c1:41:22:e5:65:73:0e:f6:1b:d3:24:77:64:4e:8f:
e6:83:11:89:e4:ca:07:52:17:d9:e9:23:e4:3f:fe:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:95:B3:8B:56:58:6C:FA:96:24:1A:B0:62:AE:FA:BC:23:05:9C
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/LpKVs4tWWGz6liQasGKu-rwjBZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ca:3f:38:2f:88:80:b5:50:b1:15:12:63:99:f9:07:f0:7f:
88:a6:40:68:52:ad:31:7d:00:a8:5e:0e:91:7f:08:2a:5b:5e:
9a:12:9d:86:7b:7e:8f:09:6b:3d:a9:0d:34:0b:e0:89:be:6b:
13:92:c5:b0:c0:93:37:2f:02:95:6b:56:51:13:19:e7:c7:af:
3d:89:9e:c2:da:9a:80:d5:d4:a5:c5:84:32:ac:f9:16:b4:52:
32:e4:b1:4b:b7:c4:4b:a5:e5:31:03:88:97:b0:ca:b6:75:88:
0e:69:ae:f1:05:4b:fa:f1:1e:9a:14:c7:19:7b:a0:81:22:33:
44:21:5a:80:1a:29:b5:ab:2a:9f:51:ed:ce:39:68:5a:59:1e:
12:07:66:09:3e:4d:a2:2b:5c:65:ae:ab:2f:df:a7:ec:42:43:
3f:2e:bb:2f:29:58:30:a0:6e:f4:99:7d:3d:1f:53:d1:d0:05:
8b:55:1e:fb:64:ba:0d:1c:54:2e:23:c2:00:b4:87:90:98:71:
40:ec:e9:4b:da:3f:46:70:2b:5b:c7:14:44:83:f8:ae:fb:5b:
0f:9d:50:7b:34:cf:d6:07:2f:6d:8e:bd:08:92:c4:dc:1a:2b:
47:21:cd:06:7f:81:e3:ea:7d:5b:47:65:8b:ea:aa:7d:d0:c6:
b5:ac:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:42:45 2025 by rpki-client