Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/LGPCXsstqIHfBFoiMfK-mbsBUjw.roa
File: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (raw, json)
Hash identifier: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=
Subject key identifier: 2C:63:C2:5E:CB:2D:A8:81:DF:04:5A:22:31:F2:BE:99:BB:01:52:3C
Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial: 0196B090A0941E76F70A8B8C2C2724F9AA45
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/LGPCXsstqIHfBFoiMfK-mbsBUjw.roa
Signing time: Thu 08 May 2025 15:43:10 +0000
ROA not before: Thu 08 May 2025 15:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199143
IP address blocks: 91.207.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:90:a0:94:1e:76:f7:0a:8b:8c:2c:27:24:f9:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
Validity
Not Before: May 8 15:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c63c25ecb2da881df045a2231f2be99bb01523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:58:e8:f1:2f:86:35:63:c4:69:a0:76:c4:70:
1d:76:53:20:89:2a:b1:fd:d0:6e:f9:ef:73:71:51:
6a:99:fc:b9:86:29:f6:2c:85:31:2f:45:e7:ed:81:
90:2d:f1:cd:85:82:bf:4f:b1:a9:6f:48:d3:30:f5:
58:07:ac:ef:a2:e4:51:1a:bf:6e:45:15:9d:2d:fd:
70:14:df:fe:b3:76:66:70:91:a1:64:c0:28:15:ba:
6d:a9:b4:9f:92:3a:03:46:68:39:ea:06:27:d1:46:
69:9f:1e:7a:b8:c6:37:12:0c:77:12:30:16:07:6b:
e2:61:ae:57:02:ee:b5:b6:2f:6f:38:d7:7d:36:39:
fa:20:65:b9:4c:20:52:24:d4:8f:93:b5:6c:82:2e:
43:43:ae:d8:b9:c3:10:f1:ae:e7:a8:26:a3:a2:63:
54:20:81:7d:77:d5:62:8f:b3:d9:9f:37:43:79:c1:
fe:7e:92:a1:66:c9:e4:e8:da:22:1a:a0:e6:29:e6:
51:30:c0:22:d1:7c:24:8e:18:c8:f2:8a:13:e5:6e:
46:ab:59:03:f0:ed:19:96:e0:d8:64:25:e0:61:d7:
9f:41:81:a9:ed:5d:96:e2:bb:80:fe:b2:e2:cc:5b:
41:0a:01:91:e1:6b:39:74:29:21:20:c9:7a:d6:23:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:63:C2:5E:CB:2D:A8:81:DF:04:5A:22:31:F2:BE:99:BB:01:52:3C
X509v3 Authority Key Identifier:
keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/LGPCXsstqIHfBFoiMfK-mbsBUjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.237.0/24
Signature Algorithm: sha256WithRSAEncryption
47:30:f9:a0:d6:28:5d:41:73:c5:5d:5c:d6:16:8a:f9:80:f6:
b2:2e:9e:9f:82:25:c1:93:12:b6:15:5d:c1:f5:ff:10:cd:9e:
15:c6:d9:7d:47:fb:7d:5c:be:71:15:47:4c:00:50:df:e9:f6:
82:31:16:d3:43:23:07:42:52:db:29:4f:ba:93:ee:cc:cf:42:
be:3a:56:e6:47:8e:fd:d3:44:b7:99:ad:d6:49:9d:9b:df:36:
96:49:8c:f0:0f:4f:bd:8f:9d:75:1e:1a:e9:28:b8:a6:ec:91:
d9:ff:96:2e:ce:8c:77:e3:59:c8:eb:9c:b8:a9:67:24:bf:bc:
04:66:06:d4:c3:e6:2f:67:ea:7b:3e:51:04:8b:3e:79:fc:f4:
c3:30:d5:78:31:66:cf:16:e7:a7:62:c5:63:1e:7f:d0:af:93:
b7:23:28:b4:38:08:b9:fe:c0:4e:70:69:52:ee:6f:d1:ff:74:
d1:ce:9e:88:b2:34:ce:e7:db:5f:e3:fc:72:5c:27:07:03:40:
0b:e1:24:39:b0:0a:50:37:c3:6c:05:7d:10:f4:85:b8:cc:ad:
d6:e8:90:f5:8b:a1:ee:f1:2a:b3:b1:4b:57:11:aa:1f:28:9e:
2e:85:ea:e4:48:ea:74:1f:e9:b1:5e:d7:c1:47:db:60:7f:4f:
ba:15:52:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZawkKCUHnb3CouMLCck+apFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGIxNDNjMTdmYjA1MTk0NDQyNmE3OWYyNDMzNGMyNWNk
YmMyMzQwHhcNMjUwNTA4MTU0MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzYzYzI1ZWNiMmRhODgxZGYwNDVhMjIzMWYyYmU5OWJiMDE1MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVjo8S+GNWPEaaB2xHAddlMgiSqx
/dBu+e9zcVFqmfy5hin2LIUxL0Xn7YGQLfHNhYK/T7Gpb0jTMPVYB6zvouRRGr9u
RRWdLf1wFN/+s3ZmcJGhZMAoFbptqbSfkjoDRmg56gYn0UZpnx56uMY3Egx3EjAW
B2viYa5XAu61ti9vONd9Njn6IGW5TCBSJNSPk7Vsgi5DQ67YucMQ8a7nqCajomNU
IIF9d9Vij7PZnzdDecH+fpKhZsnk6NoiGqDmKeZRMMAi0XwkjhjI8ooT5W5Gq1kD
8O0ZluDYZCXgYdefQYGp7V2W4ruA/rLizFtBCgGR4Ws5dCkhIMl61iOtpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxjwl7LLaiB3wRaIjHyvpm7AVI8MB8GA1UdIwQY
MBaAFFfbFDwX+wUZREJqefJDNMJc28I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjIt
YmRhNGY4ZWIxYWQ5LzEvTEdQQ1hzc3RxSUhmQkZvaU1mSy1tYnNCVWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjItYmRhNGY4ZWIxYWQ5
LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/tMA0G
CSqGSIb3DQEBCwUAA4IBAQBHMPmg1ihdQXPFXVzWFor5gPayLp6fgiXBkxK2FV3B
9f8QzZ4Vxtl9R/t9XL5xFUdMAFDf6faCMRbTQyMHQlLbKU+6k+7Mz0K+OlbmR479
00S3ma3WSZ2b3zaWSYzwD0+9j511HhrpKLim7JHZ/5Yuzox341nI65y4qWckv7wE
ZgbUw+YvZ+p7PlEEiz55/PTDMNV4MWbPFuenYsVjHn/Qr5O3Iyi0OAi5/sBOcGlS
7m/R/3TRzp6IsjTO59tf4/xyXCcHA0AL4SQ5sApQN8NsBX0Q9IW4zK3W6JD1i6Hu
8SqzsUtXEaofKJ4uherkSOp0H+mxXtfBR9tgf0+6FVJL
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:30 2025 by rpki-client