Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/lwCru9me1TEk96n3Zqc5h_ymafA.roa
File: lwCru9me1TEk96n3Zqc5h_ymafA.roa (raw, json)
Hash identifier: fWMSyv+1a9SuJ5qWGTGvkVRu+ziP2guA5Z0MH9wBZLA=
Subject key identifier: 97:00:AB:BB:D9:9E:D5:31:24:F7:A9:F7:66:A7:39:87:FC:A6:69:F0
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01985A8B34769AAF4BF172A041316A8C295F
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/lwCru9me1TEk96n3Zqc5h_ymafA.roa
Signing time: Wed 30 Jul 2025 08:55:29 +0000
ROA not before: Wed 30 Jul 2025 08:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.102.120.0/22 maxlen: 24
31.186.180.0/22 maxlen: 24
46.20.210.0/23 maxlen: 24
82.163.52.0/23 maxlen: 24
82.163.56.0/22 maxlen: 24
82.163.64.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
92.114.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:8b:34:76:9a:af:4b:f1:72:a0:41:31:6a:8c:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 30 08:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9700abbbd99ed53124f7a9f766a73987fca669f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:18:22:de:98:11:0f:e9:80:fd:b2:5d:a0:
22:f6:85:b3:98:0d:06:8d:0b:5c:4e:d2:dc:66:3e:
50:82:9d:95:d8:cc:24:94:0d:82:d1:d3:db:25:5d:
62:67:80:ed:ef:26:22:7a:e3:15:cb:01:94:d3:5f:
f6:a4:ef:0b:9e:5f:b2:0d:32:73:c7:c3:80:15:78:
74:b7:11:23:9c:8b:9f:84:b5:7a:1f:6c:bb:0e:6c:
0c:87:6a:6a:8a:0d:cb:32:75:7f:8c:bf:2b:23:9d:
09:17:6a:55:e3:50:8b:8d:12:7e:43:00:05:dd:24:
a7:72:e6:55:c4:d2:85:b8:50:81:7e:82:a7:4c:06:
b3:5a:1e:a8:27:4d:1a:91:c1:ce:21:a4:f4:2e:c5:
e6:0a:50:03:80:57:88:95:a0:35:84:41:aa:ea:da:
12:1d:e8:3e:e6:9c:aa:6c:bc:bf:7d:ff:0b:ae:76:
b2:a3:60:4e:93:29:f6:a0:d3:8d:fb:9a:9b:87:13:
5a:8e:8c:6f:58:6d:07:35:4a:95:32:7f:fa:18:8a:
92:1b:a7:19:d2:f0:4f:38:b6:99:1d:64:56:02:61:
ad:46:a1:cf:93:e9:3d:75:e1:6f:53:eb:57:ca:73:
ae:6b:92:54:e2:0b:f9:72:e7:1c:5d:0d:9f:81:6b:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:AB:BB:D9:9E:D5:31:24:F7:A9:F7:66:A7:39:87:FC:A6:69:F0
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/lwCru9me1TEk96n3Zqc5h_ymafA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.120.0/22
31.186.180.0/22
46.20.210.0/23
82.163.52.0/23
82.163.56.0/22
82.163.64.0/22
82.163.168.0/22
82.163.224.0/22
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
86:34:95:f7:3f:41:c8:aa:07:37:6e:9d:16:75:a6:c7:77:ad:
f7:d1:24:ad:46:70:70:7d:db:7d:12:89:a1:51:52:47:a5:53:
ac:68:94:de:67:cd:13:1d:e1:94:99:34:54:c8:1a:24:b0:aa:
4e:08:4b:60:ba:af:d7:88:69:8d:82:4e:22:fd:a2:22:68:e5:
92:5e:5c:98:53:22:d5:67:e2:74:6e:cb:c7:24:06:e2:40:73:
d8:96:79:79:19:20:23:f3:2f:bc:0e:cc:ef:88:ca:6b:a5:ff:
b2:c0:41:71:c3:65:08:68:04:3e:91:cc:37:40:dc:f5:ee:8d:
d7:98:59:ee:57:be:b9:33:33:cc:fb:7b:86:e1:04:19:ab:47:
ee:71:02:73:62:b2:72:da:bf:2d:eb:9d:de:fa:ec:fe:e4:21:
41:d9:bc:f3:e8:a9:4d:e2:50:a3:f8:3d:df:04:89:2b:3a:3c:
df:9d:33:43:b1:be:db:cc:27:ae:08:22:a2:66:36:f4:cf:d0:
65:25:03:11:8e:1f:40:b6:a2:ca:ab:de:65:ef:fc:8d:84:ab:
04:af:1f:41:c7:b4:8d:e2:47:38:99:31:9f:99:a2:75:0a:dd:
74:25:4a:36:24:bd:30:df:d9:12:28:a8:14:6d:69:cd:1e:55:
4a:8b:60:71
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZhaizR2mq9L8XKgQTFqjClfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwNzMwMDg1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzAwYWJiYmQ5OWVkNTMxMjRmN2E5Zjc2NmE3Mzk4N2ZjYTY2OWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEYIt6YEQ/pgP2yXaAi9oWzmA0G
jQtcTtLcZj5Qgp2V2MwklA2C0dPbJV1iZ4Dt7yYieuMVywGU01/2pO8Lnl+yDTJz
x8OAFXh0txEjnIufhLV6H2y7DmwMh2pqig3LMnV/jL8rI50JF2pV41CLjRJ+QwAF
3SSncuZVxNKFuFCBfoKnTAazWh6oJ00akcHOIaT0LsXmClADgFeIlaA1hEGq6toS
Heg+5pyqbLy/ff8Lrnayo2BOkyn2oNON+5qbhxNajoxvWG0HNUqVMn/6GIqSG6cZ
0vBPOLaZHWRWAmGtRqHPk+k9deFvU+tXynOua5JU4gv5cuccXQ2fgWtm7QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJcAq7vZntUxJPep92anOYf8pmnwMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvbHdDcnU5bWUxVEVrOTZuM1pxYzVoX3ltYWZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCBWZ4AwQC
H7q0AwQBLhTSAwQBUqM0AwQCUqM4AwQCUqNAAwQCUqOoAwQCUqPgAwQCXHIoMA0G
CSqGSIb3DQEBCwUAA4IBAQCGNJX3P0HIqgc3bp0WdabHd6330SStRnBwfdt9Eomh
UVJHpVOsaJTeZ80THeGUmTRUyBoksKpOCEtguq/XiGmNgk4i/aIiaOWSXlyYUyLV
Z+J0bsvHJAbiQHPYlnl5GSAj8y+8DszviMprpf+ywEFxw2UIaAQ+kcw3QNz17o3X
mFnuV765MzPM+3uG4QQZq0fucQJzYrJy2r8t653e+uz+5CFB2bzz6KlN4lCj+D3f
BIkrOjzfnTNDsb7bzCeuCCKiZjb0z9BlJQMRjh9AtqLKq95l7/yNhKsErx9Bx7SN
4kc4mTGfmaJ1Ct10JUo2JL0w39kSKKgUbWnNHlVKi2Bx
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:27 2025 by rpki-client