Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LMZXraVDMA88KgRQbysR-ZW6qVA.roa
File: LMZXraVDMA88KgRQbysR-ZW6qVA.roa (raw, json)
Hash identifier: hOdEGfzRTbLlQUmTXxXz57+pjyhbRKstBdCtAlY9bd4=
Subject key identifier: 2C:C6:57:AD:A5:43:30:0F:3C:2A:04:50:6F:2B:11:F9:95:BA:A9:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198C29905AE52846EE2E134C064C2830F59
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LMZXraVDMA88KgRQbysR-ZW6qVA.roa
Signing time: Tue 19 Aug 2025 13:51:05 +0000
ROA not before: Tue 19 Aug 2025 13:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133495
IP address blocks: 45.9.157.0/24 maxlen: 24
81.31.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:99:05:ae:52:84:6e:e2:e1:34:c0:64:c2:83:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 13:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc657ada543300f3c2a04506f2b11f995baa950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:a4:8d:a2:cf:3f:0c:86:22:87:59:79:42:
97:7f:de:93:f3:46:5b:65:e1:61:fd:aa:5a:3f:13:
6c:0e:17:28:7e:4b:67:bb:36:23:7d:7c:89:49:c4:
aa:fa:a8:71:d1:13:af:bb:22:f6:63:7c:38:cc:08:
40:46:88:f6:34:32:4d:6f:29:f8:c7:68:69:b5:f6:
fb:c5:9a:10:42:ba:cb:93:56:57:23:9e:8b:28:5b:
54:8d:a7:83:af:35:b3:2b:ee:aa:b6:1a:16:a1:d8:
1a:6e:c5:f9:0b:25:60:aa:fa:87:ba:0f:3b:9f:53:
c1:a5:c2:59:10:08:f7:2d:c4:85:24:a8:4b:b2:9f:
7c:9c:20:f4:c7:a7:22:29:93:99:52:d4:85:a0:bf:
67:04:39:c8:02:34:61:df:ca:f9:53:3d:93:0a:84:
02:85:8b:f4:80:4a:65:bb:53:3a:64:cb:2b:60:50:
f9:f0:35:5c:eb:8c:02:a9:37:40:e3:d7:a5:06:e5:
9d:4a:cd:9c:c4:de:6f:36:86:85:5e:40:ee:dc:57:
a7:f7:8e:9a:fb:d7:8a:a4:6d:c2:0d:74:16:8e:b2:
61:2f:d5:ca:a5:ff:a8:bc:62:e4:80:b1:94:83:85:
02:e3:bf:f7:e9:51:90:c5:e5:6c:9c:a1:a2:0f:f8:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:57:AD:A5:43:30:0F:3C:2A:04:50:6F:2B:11:F9:95:BA:A9:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LMZXraVDMA88KgRQbysR-ZW6qVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
81.31.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:78:7a:8f:c2:eb:15:8e:a0:78:00:ce:d1:03:46:33:c3:c6:
29:4e:0f:22:e4:df:9e:e0:60:bc:6c:d1:72:42:a7:84:18:b8:
ae:eb:53:ac:55:6f:f3:50:8e:d2:cb:ef:7c:42:f8:8b:49:ff:
05:7f:ab:f4:1a:b1:63:8f:6a:3c:6e:5e:2b:36:8d:d0:15:b7:
6c:85:c1:85:11:81:3a:ac:2f:8e:25:36:43:c1:3e:b4:36:4a:
70:02:ab:97:12:23:f3:93:4a:6f:b9:2a:38:ce:54:b7:56:19:
40:09:9a:76:d5:e5:81:2f:30:6f:29:99:a5:ab:c8:e1:35:9a:
6e:b7:e8:b5:87:de:4c:ea:85:8b:8a:cc:e7:db:bf:55:4d:e3:
5c:fb:ba:23:dd:7d:41:8f:ca:1d:1b:4d:c1:76:a5:74:5f:ff:
17:f7:fd:77:e3:7c:6d:31:34:49:14:82:90:19:73:e5:20:86:
7e:0d:f2:10:c5:3d:ea:4f:ba:b9:24:3f:5b:87:d3:f2:cf:0b:
df:aa:38:2e:ae:67:1e:90:ea:a1:31:da:18:f8:fd:ab:24:27:
c2:5c:0d:bd:24:74:bf:e6:fc:d1:c2:d4:e8:1c:6e:b2:ca:15:
2e:51:6e:5e:69:da:21:c2:7d:3e:a7:80:82:87:1c:d5:20:6c:
cd:33:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:18 2025 by rpki-client