Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LlKlcAPVFheTjo0cvnN-cwqdGUw.roa
File: LlKlcAPVFheTjo0cvnN-cwqdGUw.roa (raw, json)
Hash identifier: ZgPtQPgiIgQXtHf1J4jvPc8DeZKN5/J+ht3AF0Zie+E=
Subject key identifier: 2E:52:A5:70:03:D5:16:17:93:8E:8D:1C:BE:73:7E:73:0A:9D:19:4C
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019A01FEBE27CC58477C846E02375F35EFB7
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LlKlcAPVFheTjo0cvnN-cwqdGUw.roa
Signing time: Mon 20 Oct 2025 14:21:03 +0000
ROA not before: Mon 20 Oct 2025 14:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.14.38.0/23 maxlen: 23
45.132.25.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:fe:be:27:cc:58:47:7c:84:6e:02:37:5f:35:ef:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Oct 20 14:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e52a57003d51617938e8d1cbe737e730a9d194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:16:60:41:b1:44:55:78:80:86:32:ef:2f:
11:8e:92:7e:89:b3:d1:29:e4:55:5c:df:61:ae:9d:
8b:17:7f:9f:58:5d:c6:21:ab:9c:3f:8e:83:00:99:
78:7e:ec:86:09:1c:2e:c3:b2:cf:68:64:c6:6c:eb:
bb:bf:9d:05:f8:39:03:15:f7:56:ae:e6:3b:ad:e2:
b9:02:02:9d:82:50:ff:e9:e1:ef:29:ea:f0:48:22:
f6:8b:a5:9e:af:b9:4f:31:c6:11:52:38:7e:01:b0:
81:47:16:60:b2:cc:2a:6d:00:be:79:2b:d2:b5:4f:
6b:3d:c3:01:f0:06:2b:8a:65:f3:df:78:7c:21:42:
ed:3e:5f:03:e8:3b:40:7d:8e:04:e1:1a:67:da:d7:
69:b5:a2:90:9e:54:ba:23:87:47:12:d2:97:6c:4a:
da:cd:65:b4:98:91:9b:48:dd:04:29:ed:48:48:17:
0e:c6:a8:12:b7:b1:3e:08:1c:ef:90:1e:f5:f9:8d:
d0:a0:c9:27:dc:ab:1a:72:0b:3b:e9:7e:7c:7e:fe:
f0:a3:22:96:a1:cc:e3:4f:be:6f:46:3a:23:99:a3:
76:0a:72:20:c2:70:dc:9f:52:97:14:50:00:3c:fd:
51:80:9f:60:7c:75:80:2a:b7:43:31:4e:3f:5b:16:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:A5:70:03:D5:16:17:93:8E:8D:1C:BE:73:7E:73:0A:9D:19:4C
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LlKlcAPVFheTjo0cvnN-cwqdGUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.38.0/23
45.132.25.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:a9:4d:f8:8e:8e:66:9c:85:3f:d7:9e:db:b6:99:e6:c1:12:
4d:b0:83:bb:3f:55:b5:ee:d6:6d:75:18:5d:54:e7:3d:ff:ad:
66:29:a8:1f:21:ce:a2:8d:ce:c4:b9:4a:96:5e:84:0e:9b:3d:
96:2f:9f:f0:5f:f6:c5:4f:29:87:fd:1d:c8:da:5a:ac:9d:a2:
dd:c4:21:26:68:b2:09:2e:b7:9f:38:b3:2d:bb:73:1a:ae:7f:
fe:33:bf:b0:d7:df:c9:6c:e5:0c:3e:e6:66:a9:c6:09:22:27:
0b:48:27:5e:98:78:1e:f8:ec:52:e4:ed:66:dd:ac:04:9f:d6:
ce:55:ea:84:e5:b3:c2:b7:18:b7:8f:65:8b:97:be:c0:87:3f:
31:9c:32:e4:af:f5:69:4b:af:c4:4e:e4:45:40:e4:05:d3:8d:
91:f7:4e:ec:fe:03:5e:33:32:fb:4c:83:d0:93:a1:c7:01:76:
13:69:10:3e:90:ca:41:6e:03:13:1e:c7:da:e7:bc:29:ac:17:
40:b5:78:0b:d1:90:a6:25:d7:b6:de:a9:d0:f9:5b:0c:d5:5b:
53:1c:da:31:32:3c:7e:86:e1:71:72:4a:5a:a0:21:79:ab:5c:
78:fe:c3:b0:00:1d:84:41:9b:f3:87:98:eb:d1:bb:78:1b:c8:
a0:a0:d6:e3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZoB/r4nzFhHfIRuAjdfNe+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjUxMDIwMTQyMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTUyYTU3MDAzZDUxNjE3OTM4ZThkMWNiZTczN2U3MzBhOWQxOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LUWYEGxRFV4gIYy7y8RjpJ+ibPR
KeRVXN9hrp2LF3+fWF3GIaucP46DAJl4fuyGCRwuw7LPaGTGbOu7v50F+DkDFfdW
ruY7reK5AgKdglD/6eHvKerwSCL2i6Wer7lPMcYRUjh+AbCBRxZgsswqbQC+eSvS
tU9rPcMB8AYrimXz33h8IULtPl8D6DtAfY4E4Rpn2tdptaKQnlS6I4dHEtKXbEra
zWW0mJGbSN0EKe1ISBcOxqgSt7E+CBzvkB71+Y3QoMkn3Ksacgs76X58fv7woyKW
oczjT75vRjojmaN2CnIgwnDcn1KXFFAAPP1RgJ9gfHWAKrdDMU4/Wxb5eQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC5SpXAD1RYXk46NHL5zfnMKnRlMMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvTGxLbGNBUFZGaGVUam8wY3ZuTi1jd3FkR1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHw4mAwQA
LYQZAwQBuZs2MA0GCSqGSIb3DQEBCwUAA4IBAQBMqU34jo5mnIU/157btpnmwRJN
sIO7P1W17tZtdRhdVOc9/61mKagfIc6ijc7EuUqWXoQOmz2WL5/wX/bFTymH/R3I
2lqsnaLdxCEmaLIJLrefOLMtu3Marn/+M7+w19/JbOUMPuZmqcYJIicLSCdemHge
+OxS5O1m3awEn9bOVeqE5bPCtxi3j2WLl77Ahz8xnDLkr/VpS6/ETuRFQOQF042R
907s/gNeMzL7TIPQk6HHAXYTaRA+kMpBbgMTHsfa57wprBdAtXgL0ZCmJde23qnQ
+VsM1VtTHNoxMjx+huFxckpaoCF5q1x4/sOwAB2EQZvzh5jr0bt4G8igoNbj
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:43:29 2025 by rpki-client