Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LChJCjYTp7k_v-5k2BAu7BZJhF0.roa
File: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (raw, json)
Hash identifier: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=
Subject key identifier: 2C:28:49:0A:36:13:A7:B9:3F:BF:EE:64:D8:10:2E:EC:16:49:84:5D
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0198C804F332D352BB4B95C13B1470721AC4
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LChJCjYTp7k_v-5k2BAu7BZJhF0.roa
Signing time: Wed 20 Aug 2025 15:07:04 +0000
ROA not before: Wed 20 Aug 2025 15:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.141.234.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:04:f3:32:d3:52:bb:4b:95:c1:3b:14:70:72:1a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 20 15:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c28490a3613a7b93fbfee64d8102eec1649845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:6d:58:b6:59:79:52:1b:f3:62:88:b1:46:
5b:d5:1b:3c:4d:ad:d7:2f:e8:1d:5f:e7:e6:4d:ab:
a9:db:eb:96:3f:44:89:b4:c3:4b:d9:64:86:d6:97:
7d:8e:8f:97:85:75:9e:bf:24:bf:c9:0d:83:ad:99:
b9:1e:18:5a:f2:08:50:be:74:a5:7a:a4:6d:bf:70:
0e:b2:3b:4f:9a:d5:0e:2b:f9:d5:f6:02:5d:58:bf:
d2:ba:4d:df:76:5c:c9:2f:61:a3:66:91:da:59:94:
bc:6e:e8:6f:af:1a:b9:1d:4c:e6:fe:41:89:48:a6:
16:b0:56:e8:f0:b3:e9:4a:e3:77:2d:85:63:02:ea:
fc:4f:28:45:f2:62:32:08:d2:51:bd:0a:d6:49:40:
a0:88:36:0a:49:57:2e:b8:8c:91:6c:7f:38:b6:ab:
22:10:b6:9b:e8:9d:2b:ab:fe:c3:70:5b:b8:7a:32:
bd:fd:f2:93:03:76:03:c3:bc:81:f7:f2:b2:93:6c:
6f:fc:01:25:ea:37:21:18:ee:35:6e:18:40:73:bd:
59:92:5a:dd:29:27:26:13:84:03:f8:f5:17:f6:74:
f6:35:ab:74:70:60:47:a5:74:b2:f3:16:07:5a:2a:
39:70:e7:d9:2d:f1:fd:b0:54:3d:ee:a6:65:12:bf:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:49:0A:36:13:A7:B9:3F:BF:EE:64:D8:10:2E:EC:16:49:84:5D
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LChJCjYTp7k_v-5k2BAu7BZJhF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
78.159.131.0/24
93.152.207.0/24
93.152.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b3:34:86:1c:5b:5f:68:b8:69:db:3b:03:fe:5e:4e:b7:67:
84:f9:2a:8c:09:86:fc:a3:60:1d:57:55:62:11:fd:50:06:71:
5e:62:5d:61:12:29:d8:52:11:bd:72:68:37:07:b0:cb:d9:e9:
9b:3c:a0:ef:d7:36:d6:03:3c:25:38:12:a2:a6:e5:03:47:15:
4f:4e:12:7f:ec:28:0e:48:e8:04:b4:4e:a8:61:b5:c7:f5:82:
9e:93:9b:2c:fc:4b:da:b6:c2:5c:ae:81:eb:d6:0f:d6:3a:39:
f5:6e:25:5d:9f:9d:0c:a4:6f:73:a0:85:4a:c1:a9:2f:95:71:
4d:7d:26:5f:a2:44:77:f2:3e:8b:77:b6:8b:34:c3:a8:37:07:
65:22:89:23:ca:f1:34:a5:71:7d:ff:98:b8:6c:ac:61:cd:52:
38:ff:22:63:85:b5:e1:2f:3b:a2:39:96:ef:78:6f:77:06:2f:
47:cb:51:0a:1e:e0:41:0f:40:00:b1:1a:c7:6e:b3:74:3f:b0:
b6:46:07:7d:b2:21:a7:7a:cf:7d:4e:85:35:9d:2d:4f:a4:d8:
f7:2b:8e:bc:60:62:38:25:5a:55:64:b9:0f:66:9f:33:85:82:
fe:da:d7:3e:63:6d:b6:e6:e5:80:b2:1b:cd:97:16:0a:26:c9:
25:e7:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 02:40:32 2025 by rpki-client