Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa
File: M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa (raw, json)
Hash identifier: Cn1wdpfKE6warGKgEQa4o30Ra7TF3raQ0MpI76McIbU=
Subject key identifier: 33:AE:DB:4A:C9:6E:E2:2E:06:CB:8A:75:66:51:1F:0E:3E:5C:D7:C4
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01994C4CA5E9F45DEA93DD48D503824EC772
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa
Signing time: Mon 15 Sep 2025 07:35:15 +0000
ROA not before: Mon 15 Sep 2025 07:35:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 5.249.176.0/22 maxlen: 24
37.19.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:4c:a5:e9:f4:5d:ea:93:dd:48:d5:03:82:4e:c7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Sep 15 07:35:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33aedb4ac96ee22e06cb8a7566511f0e3e5cd7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:be:b0:4b:8e:11:92:4c:83:46:f8:e0:4c:
e1:b8:b8:4e:de:fc:23:23:47:be:6e:75:57:74:2d:
c4:aa:ca:49:e2:c8:51:a3:45:1f:35:2c:79:31:9a:
7e:d7:69:e5:ce:65:dd:62:87:e1:b0:d5:f9:ce:a1:
2f:7d:f8:6a:11:0c:83:b6:33:32:95:dc:67:a1:8d:
22:30:3e:f4:01:f2:73:81:3b:02:dd:f7:ab:2f:f2:
3d:54:e3:0b:0d:7c:de:a1:30:ce:ad:bd:b6:3a:e2:
fc:a5:1a:9e:e3:01:12:5f:0c:77:5f:e4:48:55:db:
17:58:96:2e:ea:e6:f4:cf:1a:d4:fc:85:0c:bb:f3:
25:f4:50:aa:9a:1e:81:f6:03:01:1f:3b:47:10:4f:
45:c5:8d:e2:fe:83:a6:3a:55:16:f4:c0:1e:f1:6d:
29:5b:40:a8:71:5a:60:7e:83:c2:7d:c4:57:d6:9f:
eb:3e:60:45:93:33:33:3e:56:98:64:ba:5f:54:9f:
64:4b:06:22:7c:db:7e:72:f4:61:12:f1:09:12:3f:
d4:59:bc:2a:1d:c8:6d:f3:07:79:b0:c0:0a:77:b3:
88:44:52:fe:c0:32:5a:63:06:c8:58:de:bf:97:09:
45:2f:00:3c:ac:70:35:ed:ee:49:7d:b7:44:30:bb:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:DB:4A:C9:6E:E2:2E:06:CB:8A:75:66:51:1F:0E:3E:5C:D7:C4
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
37.19.64.0/22
Signature Algorithm: sha256WithRSAEncryption
db:75:c2:12:ed:20:54:be:6a:3b:70:44:aa:27:a5:70:ac:bd:
e5:b5:b4:8c:7c:12:36:c4:7b:88:58:4a:db:21:71:81:f9:66:
3c:8c:40:b0:41:ae:9e:c2:17:5a:e8:db:25:bc:0f:1b:b5:bf:
85:ed:11:ff:8e:0a:55:2c:d3:e0:f0:d9:c0:7c:e1:b8:cf:38:
f9:79:02:ea:52:17:86:40:a0:0a:dc:10:27:3b:90:30:a0:fc:
17:9b:26:ab:36:c2:44:1a:52:51:75:a6:0f:f6:1c:5a:89:cd:
93:9d:8c:d4:67:47:b0:67:f5:c5:3e:fb:72:c0:a7:a7:60:36:
bb:97:23:3c:4a:54:ce:e7:8e:59:32:ec:02:29:55:3a:6e:68:
a4:83:84:e5:2c:d0:f0:1a:85:11:a1:b2:e3:33:07:da:bf:09:
49:ab:38:46:6b:b3:ba:68:4e:15:03:53:58:ab:38:ee:d2:54:
2c:fb:63:b0:05:55:7d:aa:12:61:64:ab:95:92:cd:c7:4a:ff:
b9:ab:6c:3a:f1:70:be:63:27:c0:e0:f3:b3:b8:7b:87:b4:5f:
04:23:52:7c:80:34:7d:46:e7:80:b5:ce:e6:d5:dc:1e:92:61:
16:33:ac:be:46:39:f4:b6:b8:06:5f:b1:32:b1:34:c2:2f:b6:
89:a3:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:20:38 2025 by rpki-client