Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa
File: LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa (raw, json)
Hash identifier: I7tPfrwHzB0UAJOseFDltlGuyXCQ69zHCcehJNGrXZI=
Subject key identifier: 2D:97:0D:83:28:05:04:AC:76:22:E2:ED:0F:69:2D:42:95:D6:E0:FB
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019882DFC532A3C52DD2F7F9710BA061327D
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa
Signing time: Thu 07 Aug 2025 04:52:39 +0000
ROA not before: Thu 07 Aug 2025 04:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 185.219.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:df:c5:32:a3:c5:2d:d2:f7:f9:71:0b:a0:61:32:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Aug 7 04:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d970d83280504ac7622e2ed0f692d4295d6e0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:9b:41:90:40:08:7c:c1:1f:76:3d:be:24:
89:a9:a4:11:00:d1:40:7b:27:91:6d:3d:1a:68:fd:
bb:ae:85:fe:f5:84:66:49:bc:6f:3e:de:33:ed:82:
9f:0e:75:ee:cb:2b:11:04:b2:26:58:d6:73:cd:b0:
ad:59:c8:a4:63:37:d4:4d:f1:eb:e7:0a:19:62:f9:
71:72:d2:c0:ad:c2:e2:0b:7c:a0:a5:54:9b:7b:a4:
37:20:73:9a:b0:7e:fc:ca:88:e1:9e:d3:9d:52:d4:
52:30:fe:1d:17:cf:ce:e9:62:a6:2f:ab:b8:5b:6b:
83:cd:11:c1:cc:5a:67:5a:fa:a1:68:8b:fa:33:d5:
4a:2e:b6:32:bd:11:be:60:5c:e5:f1:5b:47:f5:b8:
26:24:5a:e7:eb:d1:d7:b6:19:8a:c3:12:fc:6d:44:
b7:e5:a5:77:b6:44:f6:7d:9e:cc:2a:2e:c9:5d:ea:
63:98:fe:64:ad:48:be:8d:34:70:26:b5:6e:da:37:
43:86:3e:2c:21:a9:2e:eb:ec:0a:54:12:e0:0e:4b:
43:77:ce:95:6e:72:bc:25:21:5c:15:04:f3:36:a3:
90:20:7a:65:c8:c5:8a:ae:b6:b0:59:4e:da:a9:6f:
d8:54:87:26:e0:f2:cd:dd:3c:06:3c:b3:e5:82:27:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:97:0D:83:28:05:04:AC:76:22:E2:ED:0F:69:2D:42:95:D6:E0:FB
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.189.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d0:6a:de:74:48:b2:f0:a2:de:34:0d:7d:83:51:12:92:1e:
99:a5:ed:ec:eb:2f:90:ce:26:ec:b9:12:f5:fc:df:32:32:ba:
90:73:bb:d0:4f:b3:67:db:56:43:81:85:5c:e4:c7:06:92:ae:
bf:0b:47:36:46:60:0c:a0:f6:5d:19:e2:40:e6:c9:a9:74:45:
d2:77:64:41:10:2c:c3:9e:d8:95:a7:56:ce:37:94:9c:5c:e4:
55:14:29:3d:5a:83:30:e3:cd:77:36:05:cf:02:cb:a3:e3:e7:
bf:c5:a9:4b:1f:d8:bf:ec:9c:44:af:2c:d8:47:b7:e3:30:4f:
81:59:e8:b2:14:c6:3e:6d:ef:be:19:9d:69:7b:c3:a1:b6:d7:
68:01:39:51:e8:93:9d:32:f4:51:3a:b3:b4:d4:0a:c1:2e:fc:
02:52:ae:17:3c:c7:9a:69:4e:0d:30:68:10:38:3d:bf:92:c4:
24:89:f1:e7:47:5d:86:c9:10:da:a4:79:b0:26:22:65:8d:74:
78:b5:8f:f3:27:f2:5c:61:ad:4f:d3:7f:93:6e:e9:8b:ec:f9:
65:9a:1f:0e:b8:fd:83:4f:d1:bb:a8:1a:d7:ce:42:7b:f7:58:
01:90:77:35:1f:59:a4:51:6b:58:07:b5:00:12:11:d1:c7:6e:
37:e6:ae:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiC38Uyo8Ut0vf5cQugYTJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjUwODA3MDQ1MjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDk3MGQ4MzI4MDUwNGFjNzYyMmUyZWQwZjY5MmQ0Mjk1ZDZlMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sibQZBACHzBH3Y9viSJqaQRANFA
eyeRbT0aaP27roX+9YRmSbxvPt4z7YKfDnXuyysRBLImWNZzzbCtWcikYzfUTfHr
5woZYvlxctLArcLiC3ygpVSbe6Q3IHOasH78yojhntOdUtRSMP4dF8/O6WKmL6u4
W2uDzRHBzFpnWvqhaIv6M9VKLrYyvRG+YFzl8VtH9bgmJFrn69HXthmKwxL8bUS3
5aV3tkT2fZ7MKi7JXepjmP5krUi+jTRwJrVu2jdDhj4sIaku6+wKVBLgDktDd86V
bnK8JSFcFQTzNqOQIHplyMWKrrawWU7aqW/YVIcm4PLN3TwGPLPlgieTBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2XDYMoBQSsdiLi7Q9pLUKV1uD7MB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvTFpjTmd5Z0ZCS3gySXVMdEQya3RRcFhXNFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudu9MA0G
CSqGSIb3DQEBCwUAA4IBAQBT0GredEiy8KLeNA19g1ESkh6Zpe3s6y+QzibsuRL1
/N8yMrqQc7vQT7Nn21ZDgYVc5McGkq6/C0c2RmAMoPZdGeJA5smpdEXSd2RBECzD
ntiVp1bON5ScXORVFCk9WoMw4813NgXPAsuj4+e/xalLH9i/7JxEryzYR7fjME+B
WeiyFMY+be++GZ1pe8OhttdoATlR6JOdMvRROrO01ArBLvwCUq4XPMeaaU4NMGgQ
OD2/ksQkifHnR12GyRDapHmwJiJljXR4tY/zJ/JcYa1P03+TbumL7Pllmh8OuP2D
T9G7qBrXzkJ791gBkHc1H1mkUWtYB7UAEhHRx2435q6u
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:03 2025 by rpki-client