Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/LSEzmCf-9pbHLodIwWO9dZ-9S4g.roa
File: LSEzmCf-9pbHLodIwWO9dZ-9S4g.roa (raw, json)
Hash identifier: ylScjAYsZUas0Y33cFez+5LTZoSIJYAsPJd4C0C6L2Y=
Subject key identifier: 2D:21:33:98:27:FE:F6:96:C7:2E:87:48:C1:63:BD:75:9F:BD:4B:88
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0199D9FB6FCC599B294D8D23DB2DF32475F3
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/LSEzmCf-9pbHLodIwWO9dZ-9S4g.roa
Signing time: Sun 12 Oct 2025 19:52:38 +0000
ROA not before: Sun 12 Oct 2025 19:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d9:fb:6f:cc:59:9b:29:4d:8d:23:db:2d:f3:24:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Oct 12 19:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d21339827fef696c72e8748c163bd759fbd4b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:4e:32:a9:dc:5e:e4:e5:69:d7:41:8e:fd:
44:2f:e4:0c:7f:98:36:82:fe:c7:03:9b:44:99:dc:
8d:3f:5d:b3:f3:fb:ae:8f:a9:e2:10:86:68:b1:51:
ba:20:45:b3:32:23:c2:5a:52:4c:c8:f4:54:46:c0:
77:20:ed:61:ad:e2:56:16:e9:63:12:1f:dc:66:f8:
84:a1:f8:ea:ce:89:1c:f9:80:e5:48:44:47:d5:2c:
8c:6e:c3:f5:c8:e0:9c:3a:29:fd:14:8b:17:f8:0b:
fc:ff:5e:e7:87:91:25:18:e4:de:b9:c3:55:df:ab:
07:db:48:23:fb:b6:4f:3d:f3:94:1a:0d:bc:59:77:
25:15:5b:b2:74:ad:1a:33:32:84:a3:eb:99:78:c5:
e4:cc:28:d4:51:78:3b:fa:10:99:bd:7a:7a:fa:e0:
97:01:90:c4:b6:71:74:b0:4c:fc:14:95:a8:f1:dc:
85:c1:ba:0e:16:b2:9f:99:24:03:4a:03:86:5e:d2:
20:67:2c:d1:87:bd:54:9c:4f:13:7b:11:2e:ec:cf:
67:c6:05:7f:f1:6d:92:fe:c8:11:00:e1:9c:7c:7f:
b0:07:01:90:08:bf:f8:47:fe:61:f2:b0:1a:55:6d:
f2:e6:e8:e0:3e:ce:6a:eb:ee:94:c2:40:87:d4:ff:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:33:98:27:FE:F6:96:C7:2E:87:48:C1:63:BD:75:9F:BD:4B:88
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/LSEzmCf-9pbHLodIwWO9dZ-9S4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2a:c5:36:17:6c:08:c1:32:64:c2:a4:6a:67:14:3e:25:10:
44:8e:59:36:65:fb:4c:71:43:52:1a:92:73:57:19:ff:0e:ed:
8a:30:5e:a6:aa:92:79:f6:df:9a:69:e2:80:58:24:d7:89:5f:
71:67:83:bf:15:19:5a:e5:ea:1f:cb:9d:25:c1:c7:60:ef:78:
59:c9:6e:1f:84:24:e0:8c:b1:b8:99:d4:c6:02:76:f0:e8:53:
89:f5:81:29:48:50:e4:62:00:87:da:2f:a8:a4:20:fd:e7:6d:
3f:75:f1:28:fc:f3:bb:21:15:fe:20:fe:4b:5f:6d:35:e1:5d:
be:34:be:0c:ff:c3:a2:d0:85:f8:cb:01:00:1a:ed:90:59:8c:
74:85:f8:6f:b2:77:c7:4d:4b:d5:80:32:2d:e7:f7:42:e9:7c:
8e:a0:4f:b0:6e:26:f4:f4:20:ca:04:36:93:cf:c3:43:44:53:
7f:48:f3:ce:d3:bf:58:d5:c8:89:76:9e:e8:42:04:7e:eb:43:
81:1a:20:99:5c:32:e2:41:2f:14:7c:55:d5:c1:d4:9d:ee:c7:
74:b2:50:c1:e0:50:8f:e2:73:c0:30:e1:e1:28:a3:2f:f2:f1:
71:1d:ae:b7:89:cf:20:34:f7:77:72:92:fc:e2:09:41:09:54:
6b:5a:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:15 2025 by rpki-client