Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lazousuJWcmC2QmZ1wtRve-TlP4.roa
File: lazousuJWcmC2QmZ1wtRve-TlP4.roa (raw, json)
Hash identifier: MP4E4RFgot7TCGMqYLUEw7zAEdW24mr36UfN+pUVMhs=
Subject key identifier: 95:AC:E8:BA:CB:89:59:C9:82:D9:09:99:D7:0B:51:BD:EF:93:94:FE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199062B79C48944E109027FCA02BB80BDFE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lazousuJWcmC2QmZ1wtRve-TlP4.roa
Signing time: Mon 01 Sep 2025 16:45:36 +0000
ROA not before: Mon 01 Sep 2025 16:45:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 2a0e:15c7:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:2b:79:c4:89:44:e1:09:02:7f:ca:02:bb:80:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 16:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95ace8bacb8959c982d90999d70b51bdef9394fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:fa:15:72:10:04:49:6a:30:16:0f:ea:9b:
b4:88:4b:b6:a5:cd:c9:75:47:e0:af:1e:6f:1c:24:
a3:d6:ad:69:e6:a5:b1:05:4a:49:e2:dc:96:b0:a9:
c3:cb:0d:fc:45:22:f9:30:13:88:ea:da:49:22:c2:
30:cb:f0:db:01:68:d5:dc:20:2c:13:66:b9:e0:5a:
9a:16:81:3f:a3:f4:dc:a3:f4:5d:75:ba:e3:eb:b6:
6b:38:75:b4:2e:62:f9:1c:4e:28:f0:56:4e:d1:20:
14:94:1d:7e:b6:29:4b:b1:fd:50:3d:7b:a0:6c:2d:
a8:14:d2:96:51:4e:31:24:12:87:9d:45:97:6d:24:
6b:19:ba:65:cc:ce:c2:30:fd:d7:e3:7f:f5:ba:f7:
dc:43:d1:67:d0:59:60:6e:6f:fd:4e:b5:d0:65:cf:
26:cb:c7:3d:ee:2f:e4:c0:cb:18:63:91:d0:ec:76:
33:80:96:0f:ae:66:5a:ef:c1:c7:e7:c5:f2:08:f8:
57:a9:f9:a7:48:0f:6c:16:ab:3b:08:1a:4b:42:1d:
9a:58:9b:3d:71:2b:e3:a1:94:cf:1d:9b:3e:95:0b:
04:da:7f:b8:dc:11:30:d6:24:c2:04:e6:0e:38:82:
df:35:f2:2d:db:9d:79:6a:4f:e0:3d:f2:0c:26:2c:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:E8:BA:CB:89:59:C9:82:D9:09:99:D7:0B:51:BD:EF:93:94:FE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lazousuJWcmC2QmZ1wtRve-TlP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c7:102::/48
Signature Algorithm: sha256WithRSAEncryption
b7:e3:4e:d9:df:4f:44:06:b1:82:89:4a:f5:4c:06:3c:bf:ff:
f7:f0:9c:16:12:c4:1e:44:ca:2c:89:fb:16:c8:f0:1e:d0:51:
e3:7c:20:73:14:a8:8d:34:4c:53:ea:93:41:16:d6:4d:32:d7:
58:5e:1f:48:68:61:4b:78:f6:bb:26:c4:95:ff:0b:72:f0:be:
ae:0b:6d:13:9e:e7:8d:d1:0e:64:c0:f8:7b:e1:3e:73:2c:e5:
33:51:1d:49:0a:03:2c:2f:e1:06:57:85:87:74:96:82:01:d5:
90:af:d4:36:e4:b5:31:5e:b5:bb:d3:d7:f2:26:0e:54:11:e5:
17:12:3d:3f:5a:b6:ce:b0:50:05:dc:68:a2:b1:18:41:18:16:
b7:ee:d4:bf:4c:c6:cf:1f:53:8f:e2:c0:78:64:26:b6:67:60:
2c:b9:0f:d6:97:0a:d4:20:97:83:ad:a8:1b:2a:bd:94:f1:89:
6c:eb:dd:ac:20:da:b7:10:cb:3d:01:4d:7c:4e:b7:f2:02:b0:
9f:16:01:9b:36:6e:c8:09:47:f8:f5:a4:20:3b:c9:91:5f:92:
63:32:0b:d7:d3:e0:7d:89:3c:b1:c1:23:45:26:48:15:88:f8:
6f:99:1f:af:05:4b:87:5f:ce:78:28:b7:0f:5b:a8:7f:33:9c:
5a:1f:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:46:22 2025 by rpki-client