Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Lf4gvpbZNpq9vGXuabjC7UF7gkg.roa
File: Lf4gvpbZNpq9vGXuabjC7UF7gkg.roa (raw, json)
Hash identifier: I3pOLcB0odeNVDeUad1FUQhzFrPf55VKvJtMBSLMikM=
Subject key identifier: 2D:FE:20:BE:96:D9:36:9A:BD:BC:65:EE:69:B8:C2:ED:41:7B:82:48
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0199A8AE5B77577513D428A2F42B947F7CFD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Lf4gvpbZNpq9vGXuabjC7UF7gkg.roa
Signing time: Fri 03 Oct 2025 06:07:02 +0000
ROA not before: Fri 03 Oct 2025 06:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.171.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a8:ae:5b:77:57:75:13:d4:28:a2:f4:2b:94:7f:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 3 06:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dfe20be96d9369abdbc65ee69b8c2ed417b8248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:52:01:ac:c8:6e:19:d0:d6:04:38:1c:a2:
9f:97:1a:c7:f6:05:42:32:1b:03:5f:8c:24:6d:45:
e6:6c:d4:74:02:fe:44:b0:1f:a1:d5:87:ec:ca:78:
36:ed:81:0b:e6:54:14:28:68:62:f5:ef:af:fb:8e:
fe:78:0b:cb:3a:2b:f2:4f:ea:a8:75:09:2c:37:c8:
ea:5c:36:85:29:47:f4:4d:55:be:84:75:cc:b2:b4:
b2:4c:3a:fc:d0:40:eb:45:f1:5c:49:4d:78:2f:ae:
66:d0:5e:ff:e0:75:c5:3c:dc:a8:21:14:71:08:2c:
bf:14:97:51:06:ad:9f:f7:91:86:b8:ed:7c:e9:34:
2c:2e:ce:e5:de:64:af:17:c7:d4:ee:58:29:6d:01:
7d:82:97:c1:c0:4f:fa:20:f6:c5:32:93:76:4f:41:
05:7a:bf:a8:a6:2c:31:65:27:99:4b:57:b2:b1:6e:
b3:3a:ca:93:0d:99:28:98:7b:df:a9:40:87:63:a4:
a8:b1:e0:16:cd:e9:8b:4c:a8:3a:55:b7:55:f9:3e:
85:01:04:c3:74:f4:c7:ac:4e:45:c1:fd:df:26:30:
25:c5:ab:56:f1:b4:a0:69:86:ef:d6:12:8f:f0:e9:
9c:0f:ec:74:50:50:8c:35:49:9d:86:d8:46:60:24:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:20:BE:96:D9:36:9A:BD:BC:65:EE:69:B8:C2:ED:41:7B:82:48
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Lf4gvpbZNpq9vGXuabjC7UF7gkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.151.61.0/24
88.209.192.0/24
88.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2a:a5:a9:e5:14:ad:09:f8:f7:6b:6e:3b:8e:a3:7b:a6:c1:
d3:f6:48:c6:47:0f:23:84:47:e3:8c:c4:63:85:18:63:ee:5c:
47:fe:f7:17:27:fd:ca:0c:24:e3:5d:ad:fe:89:48:18:a2:d3:
0b:37:b7:54:42:9e:56:d1:6f:d8:c7:4d:a2:60:e9:64:c3:d5:
17:af:49:4e:b9:9d:83:46:bb:26:77:37:f6:f5:ba:8c:e8:4f:
07:fd:6d:9b:89:cf:de:69:0f:8b:09:ec:56:dd:4c:7e:a2:28:
05:2a:78:fc:ee:6e:09:27:19:24:8b:f9:d6:dd:f9:9f:b2:7b:
46:79:d2:1c:a9:b8:a5:5a:c0:1e:b6:ff:5d:3c:55:ce:1e:c8:
6d:40:7b:51:2a:64:71:53:ea:fb:e6:f1:aa:36:44:a5:d1:38:
15:dd:7d:86:47:68:8a:e4:dc:13:74:a8:15:08:51:c9:b3:b2:
98:64:f2:a7:6d:37:15:68:97:d2:77:bb:0e:76:f3:bc:31:b2:
f4:09:3d:31:05:0a:99:95:bd:9c:c1:1d:a9:32:2d:b1:6d:8a:
c4:bb:e6:f9:a4:82:95:b7:cd:1d:bf:fe:04:df:ef:1a:c4:df:
ad:41:07:49:a6:22:bb:7f:89:e0:5e:00:9f:da:e8:ec:08:b9:
cd:df:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:45:45 2025 by rpki-client