Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Lig58Y_6EqUbEZxvSWu8Fu6Z-ME.roa
File: Lig58Y_6EqUbEZxvSWu8Fu6Z-ME.roa (raw, json)
Hash identifier: D/zXopJeVtj3229mIo+xNFq5tGgLVIxUMgm9JcaW09Q=
Subject key identifier: 2E:28:39:F1:8F:FA:12:A5:1B:11:9C:6F:49:6B:BC:16:EE:99:F8:C1
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0199288E411CE1189A43A4668211EE2B6FB2
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Lig58Y_6EqUbEZxvSWu8Fu6Z-ME.roa
Signing time: Mon 08 Sep 2025 09:00:35 +0000
ROA not before: Mon 08 Sep 2025 09:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204968
IP address blocks: 2a00:e460::/29 maxlen: 29
2a03:f7c0::/29 maxlen: 29
2a0c:5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:41:1c:e1:18:9a:43:a4:66:82:11:ee:2b:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 8 09:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2839f18ffa12a51b119c6f496bbc16ee99f8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:34:17:19:4c:45:d2:d0:0b:3f:2e:7a:5b:
7a:22:83:74:5d:a5:d3:db:ed:81:6e:3d:1a:0b:59:
0f:2c:06:5c:b0:31:2d:71:92:0b:b7:2d:7d:6b:83:
f4:31:d5:9f:69:b7:a9:f5:e5:66:2b:97:18:71:8c:
f0:4a:2d:df:b2:00:ec:f2:74:70:3b:db:75:6f:ec:
95:4e:28:4c:13:e8:1b:56:ea:77:7f:72:c3:39:05:
4c:12:54:3f:6d:11:e7:0d:79:c9:40:8c:bf:d8:c4:
8c:1c:31:90:46:91:dd:6b:9d:7a:5b:de:12:8d:37:
a9:08:cf:5e:7e:6e:67:07:07:2e:e4:f7:9c:d2:46:
ec:b0:f6:37:80:46:52:07:b8:ec:9b:aa:d1:42:a2:
41:b7:88:5d:9b:9a:99:cc:75:ab:ae:9d:7e:1f:27:
a0:c4:b4:1c:9d:ee:4f:de:a3:a7:3a:e8:a6:97:f8:
8c:8d:48:1c:93:68:73:30:69:42:b4:a0:c7:4e:40:
dc:2a:6c:e0:39:90:14:8b:dd:2d:80:af:ee:e4:cc:
48:6b:05:58:c4:5f:dc:81:48:fe:cf:95:c4:5b:b6:
3a:97:23:aa:52:55:a7:9a:d1:77:ba:6a:66:ab:a1:
28:86:5f:b4:57:09:a8:01:49:f7:48:57:d3:c3:19:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:39:F1:8F:FA:12:A5:1B:11:9C:6F:49:6B:BC:16:EE:99:F8:C1
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Lig58Y_6EqUbEZxvSWu8Fu6Z-ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:e460::/29
2a03:f7c0::/29
2a0c:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:ec:bc:a7:f2:97:8d:e4:6a:97:6e:72:17:94:f4:13:37:97:
17:e0:12:8e:6e:38:b3:2a:36:36:63:40:5e:24:d4:c2:8f:98:
d3:10:06:d3:d7:fb:c8:aa:c0:46:c6:96:39:10:73:2e:af:01:
50:4f:87:f0:5e:cc:b5:92:2a:18:a8:ab:b6:e4:a0:e5:39:1b:
35:a5:f9:8d:5c:47:ed:33:ab:2e:4f:ae:f2:41:a9:13:b4:8e:
07:99:1e:86:ee:e6:70:6a:24:68:9c:6c:b1:46:8a:ec:65:6a:
15:5a:a6:ac:e9:15:a9:6c:11:a0:a7:bb:c1:bd:94:3a:4e:b3:
7a:58:57:ed:f3:03:ba:7f:cf:ec:61:20:b8:c7:94:20:cc:12:
a1:88:af:e6:34:4c:a7:5b:63:74:60:7d:04:ea:d8:9a:49:cc:
83:08:62:b2:03:5a:c4:96:ba:8b:87:13:18:87:87:fe:7c:c6:
e2:10:56:d5:9a:28:35:22:22:ec:77:44:69:7d:b0:a0:d9:3d:
59:0f:80:02:b1:a0:95:26:89:33:21:48:5b:60:b3:b3:1d:78:
44:8e:d6:d2:29:bc:59:64:e0:e3:ac:88:a8:ef:71:42:12:47:
b1:88:b2:94:a3:e2:af:6a:bd:67:05:a8:32:cf:28:5f:5d:68:
6a:80:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:56:00 2025 by rpki-client