Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/LiReZTb5eM73wM_EtDaxcTNj4Uc.roa
File: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (raw, json)
Hash identifier: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=
Subject key identifier: 2E:24:5E:65:36:F9:78:CE:F7:C0:CF:C4:B4:36:B1:71:33:63:E1:47
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F4484EFF48E4FF84901CA21106697C5F
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/LiReZTb5eM73wM_EtDaxcTNj4Uc.roa
Signing time: Thu 10 Jul 2025 12:21:08 +0000
ROA not before: Thu 10 Jul 2025 12:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 95.164.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:48:4e:ff:48:e4:ff:84:90:1c:a2:11:06:69:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e245e6536f978cef7c0cfc4b436b1713363e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:26:b7:6d:2b:5c:1f:29:43:26:f2:3b:10:
02:16:3b:9c:25:f9:33:04:ec:05:5c:d1:4f:56:b0:
52:20:6c:a9:6f:5a:f4:3d:3d:a0:3e:00:6e:bf:d0:
f9:4e:9f:d6:e5:3f:50:82:c1:5a:ab:54:57:e4:ae:
9f:e2:4c:25:96:9d:48:9e:6b:3a:c8:98:05:0a:95:
4f:d8:8f:92:f2:94:a2:3b:8b:b3:49:de:9d:c9:a7:
7f:81:35:10:f6:d7:ee:df:16:57:5e:5d:fe:63:f5:
58:a7:76:04:94:91:80:48:e4:dc:74:94:e6:9a:ea:
52:01:22:b2:72:4d:27:0a:5c:97:84:eb:fc:b9:33:
d7:74:59:ed:93:27:13:52:49:c4:5b:8b:81:9f:0d:
f0:c4:e1:da:f6:a1:a5:29:3f:fe:90:c6:e9:71:d6:
27:b7:aa:d4:01:b7:9f:db:fa:25:58:97:a5:c6:18:
09:df:3e:9f:12:8b:99:01:eb:74:3c:fb:d1:67:3d:
0a:7c:ab:08:7e:8c:f3:ac:4d:58:c3:11:6c:b5:0e:
28:ee:25:44:dc:0a:85:52:89:c5:97:0d:26:4b:1d:
7f:84:5f:b0:4f:b6:6c:d8:a3:fe:9b:96:ca:b0:04:
a0:f9:1f:73:11:7c:18:4c:38:d8:35:18:0e:ae:7c:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:5E:65:36:F9:78:CE:F7:C0:CF:C4:B4:36:B1:71:33:63:E1:47
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/LiReZTb5eM73wM_EtDaxcTNj4Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
15:58:1a:d8:ad:96:66:bf:86:24:a3:8e:01:a4:46:bd:18:16:
05:16:f9:b6:5a:6c:fb:6e:c2:35:34:54:88:7b:5b:d2:37:8a:
57:d0:ff:56:94:00:98:e8:c1:0b:d0:d0:32:b4:c6:e4:27:e7:
6c:55:dd:d9:a8:dd:06:e5:a7:ed:3a:3a:24:d0:c4:55:9c:66:
ca:4f:e0:c5:89:dd:e3:dd:6b:06:c1:0a:d7:d6:14:7e:a8:27:
11:69:9f:c4:a4:dd:46:9e:1a:db:fa:36:d6:69:fe:f8:ed:75:
f6:9c:3c:0b:df:6d:f5:a7:96:1a:38:bc:0f:09:62:7a:42:f1:
95:f3:5c:15:b0:4a:36:af:50:3b:94:ac:21:c8:e0:a4:54:58:
bc:71:fc:32:aa:b3:f6:42:a8:65:ae:ba:13:b8:98:ae:38:ae:
d3:8c:4f:c9:f5:7e:af:c9:cf:3f:89:f0:5a:23:12:86:de:0d:
d7:56:27:14:88:c5:32:53:e8:f9:b1:2f:d3:9a:d6:71:85:22:
e8:db:c2:86:fb:68:49:74:f8:08:88:bd:28:ae:81:ac:be:14:
c5:2b:f1:70:ec:35:63:5d:52:34:ba:22:38:e4:6d:dc:82:d0:
bd:25:24:d9:b8:1b:1a:97:a5:c2:5c:13:15:fb:e5:07:c8:5b:
d9:da:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:17:41 2025 by rpki-client