Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LPBevX9rEFF0PWZXn4FS5DSCdMs.roa
File: LPBevX9rEFF0PWZXn4FS5DSCdMs.roa (raw, json)
Hash identifier: 9N72UhDoCdJqrqnaoeAiZsewdrL0jpbXD5JGa/vuqqA=
Subject key identifier: 2C:F0:5E:BD:7F:6B:10:51:74:3D:66:57:9F:81:52:E4:34:82:74:CB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199A505C9A684173B8980FD929692924DC7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LPBevX9rEFF0PWZXn4FS5DSCdMs.roa
Signing time: Thu 02 Oct 2025 13:04:03 +0000
ROA not before: Thu 02 Oct 2025 13:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215925
IP address blocks: 87.120.191.0/24 maxlen: 24
87.121.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:05:c9:a6:84:17:3b:89:80:fd:92:96:92:92:4d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 2 13:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf05ebd7f6b1051743d66579f8152e4348274cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:22:1a:86:ff:d6:15:95:65:73:9e:42:60:
45:d3:f1:af:92:d6:38:6b:d3:94:67:d5:bd:ed:fb:
7e:89:e4:ca:bf:fe:20:64:59:34:aa:db:34:61:44:
7d:31:1d:99:5a:cd:c0:2c:b0:2e:fb:54:41:60:2a:
5e:52:d2:09:d7:d8:5a:03:0b:32:0d:88:c3:4d:26:
7b:ae:13:5b:e6:89:1d:46:8d:c8:76:98:7b:b5:44:
3f:0c:80:a0:c6:2c:0e:79:bc:05:da:43:a7:03:53:
8d:f1:96:9c:6a:95:d1:0a:f4:d2:3f:8c:7f:f0:82:
06:1c:83:e3:13:84:0f:c7:0b:1d:14:de:e2:92:a1:
07:14:f2:6a:9b:70:24:ec:30:d2:0a:0a:94:85:d1:
4f:90:d3:01:eb:30:60:66:0a:a0:fb:e6:31:e6:07:
5d:2e:df:eb:54:77:57:2c:dd:fc:5d:a0:20:22:57:
cb:cc:6f:e9:22:fd:e0:04:11:d9:02:13:24:54:a5:
8b:f0:69:03:8a:4b:b9:73:ac:4c:c9:7f:40:45:de:
6b:72:1c:e9:99:cd:1a:46:1e:63:d7:10:b0:af:42:
06:5a:00:04:83:1d:eb:46:46:00:8c:f7:20:9a:97:
7e:65:f8:f6:a7:a0:5d:ee:55:c5:74:6f:e8:d6:e2:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:5E:BD:7F:6B:10:51:74:3D:66:57:9F:81:52:E4:34:82:74:CB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LPBevX9rEFF0PWZXn4FS5DSCdMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.191.0/24
87.121.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5b:99:32:1f:4d:49:9a:40:53:83:bb:2a:d9:8b:f2:85:60:
82:ce:75:2a:02:b6:c9:10:7d:65:32:c4:d3:06:3f:18:9b:b8:
7d:fe:d5:3f:1d:a6:13:2e:20:45:c6:0f:41:86:bb:3d:e8:bb:
51:7a:03:42:1b:24:0c:81:98:d3:ee:3c:9b:e6:d2:eb:a6:f8:
34:1d:a8:7c:04:97:98:89:b5:d4:17:e5:2b:6f:41:69:11:8f:
61:d9:fb:cc:c8:80:ad:e3:5e:d9:a3:e8:70:66:42:32:a4:ba:
bb:e4:90:9e:be:64:8d:86:b6:1f:d1:97:93:22:6d:38:69:43:
46:1e:ca:c9:e2:1d:77:b6:09:8d:11:73:e5:ac:01:80:32:9b:
35:ef:64:d1:41:36:ed:1f:7c:d2:63:be:1b:c4:12:a8:32:5b:
77:ad:7e:07:5d:52:47:9e:db:0d:62:4e:4c:e3:72:69:18:ad:
42:1c:0e:76:76:b2:f6:19:ef:73:ac:73:ad:e7:0c:81:2e:50:
75:56:ec:fd:fa:dd:1e:64:f6:54:2b:4f:45:84:c4:d8:dd:c6:
9b:0e:bf:31:04:b7:13:49:fb:70:6a:68:9c:84:71:43:c2:96:
0c:d5:d2:23:4a:1a:79:7b:9e:a3:5e:2b:27:74:9f:c7:17:40:
c2:e6:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:31 2025 by rpki-client