Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/LKYEcHRv13hCEn2ITZ6Ji002NW4.roa
File: LKYEcHRv13hCEn2ITZ6Ji002NW4.roa (raw, json)
Hash identifier: XBnCCt2ig9Uvd5g1UVG/Ee+HEig1GAa0vstmiIJNytc=
Subject key identifier: 2C:A6:04:70:74:6F:D7:78:42:12:7D:88:4D:9E:89:8B:4D:36:35:6E
Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84
Certificate serial: 0199DD1F44E66409533A2DFE4C030A3E3C7F
Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/LKYEcHRv13hCEn2ITZ6Ji002NW4.roa
Signing time: Mon 13 Oct 2025 10:30:38 +0000
ROA not before: Mon 13 Oct 2025 10:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205064
IP address blocks: 138.226.224.0/21 maxlen: 21
138.226.230.0/24 maxlen: 24
2a06:4d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:1f:44:e6:64:09:53:3a:2d:fe:4c:03:0a:3e:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb62724132824e54906e240a88036419a365b84
Validity
Not Before: Oct 13 10:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ca60470746fd77842127d884d9e898b4d36356e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:b9:df:3a:48:e6:d2:bf:d5:74:4b:7e:cf:
4a:94:25:52:5e:ca:61:90:c8:ed:db:71:07:97:18:
19:ca:70:ce:07:57:33:55:e3:d4:b4:53:23:78:05:
b2:80:f2:9c:63:f5:39:12:43:48:8d:85:42:65:cc:
6f:be:8f:a8:0c:af:64:9a:ef:38:50:cc:de:65:68:
b3:a7:1e:05:b7:16:9d:1b:f9:bc:72:46:9f:51:8a:
0c:b5:17:30:a0:42:f4:42:cc:0a:40:04:b7:ce:81:
a9:03:67:60:42:de:0b:77:96:3a:f8:e2:2b:35:b3:
0d:4c:d4:19:f0:23:fb:b5:d2:59:c0:b9:a6:3a:01:
d6:a2:26:b1:21:65:dc:65:ca:8d:9b:96:8b:6a:44:
e4:39:85:77:bb:47:52:5a:91:26:72:9f:14:79:b5:
d8:8b:62:21:b1:66:fc:5f:d7:a7:01:d6:c7:9a:2e:
ac:4d:54:63:b9:a7:d9:7c:7b:a8:72:a4:e9:b4:0e:
b1:94:5e:9b:16:14:26:07:da:3c:cd:f2:a6:c4:bc:
a6:45:08:fc:6f:ae:75:7a:c0:37:8d:33:a1:0b:5e:
30:5f:dd:00:f2:3f:bc:ba:6b:36:0e:30:39:da:b0:
ec:75:01:a7:ed:8d:19:64:30:0c:f3:4b:84:c9:e5:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:04:70:74:6F:D7:78:42:12:7D:88:4D:9E:89:8B:4D:36:35:6E
X509v3 Authority Key Identifier:
keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/LKYEcHRv13hCEn2ITZ6Ji002NW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.224.0/21
IPv6:
2a06:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
73:a4:f8:c5:42:b3:03:47:2c:9d:1d:f7:d0:a1:47:4a:33:dc:
76:2f:8f:01:98:5b:93:34:57:b6:d4:83:2b:63:99:36:a0:7d:
50:b3:ad:20:a7:a8:34:87:91:35:69:5c:ea:58:79:b7:63:d7:
af:9d:1f:5c:ed:1b:28:73:59:a2:74:dd:ce:1d:cd:eb:c8:0d:
17:52:4b:33:01:7a:59:d5:da:de:b1:00:23:cd:e8:fe:41:6e:
10:4e:ce:07:7d:b7:69:13:3c:6e:18:e7:08:b7:fb:79:d7:8d:
d9:23:b4:50:f0:ba:6d:cf:ad:81:a8:89:70:d8:ac:ca:ee:cb:
92:ae:0b:ca:94:14:c4:c4:38:e3:36:b0:44:a7:e3:44:be:85:
13:44:f4:88:fa:c0:55:75:c4:82:51:2a:04:96:56:9f:87:56:
7a:64:dc:c2:e5:0b:e8:9f:27:00:24:79:41:5a:b2:95:bb:da:
f9:7f:fa:b3:c9:49:0c:64:13:63:fa:cb:28:b7:2b:ae:7d:96:
9a:bd:5e:3e:a0:ba:b6:db:f4:d7:6c:e2:5e:d1:fc:6c:c8:64:
17:79:bb:a0:ca:42:38:0e:7a:75:41:29:cd:b2:11:cf:45:27:
b1:e7:7f:40:99:c4:2d:72:97:9f:93:d9:97:86:f1:e3:f6:4a:
28:e6:b5:99
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZndH0TmZAlTOi3+TAMKPjx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjYyNzI0MTMyODI0ZTU0OTA2ZTI0MGE4ODAzNjQxOWEz
NjViODQwHhcNMjUxMDEzMTAzMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2E2MDQ3MDc0NmZkNzc4NDIxMjdkODg0ZDllODk4YjRkMzYzNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQK53zpI5tK/1XRLfs9KlCVSXsph
kMjt23EHlxgZynDOB1czVePUtFMjeAWygPKcY/U5EkNIjYVCZcxvvo+oDK9kmu84
UMzeZWizpx4FtxadG/m8ckafUYoMtRcwoEL0QswKQAS3zoGpA2dgQt4Ld5Y6+OIr
NbMNTNQZ8CP7tdJZwLmmOgHWoiaxIWXcZcqNm5aLakTkOYV3u0dSWpEmcp8UebXY
i2IhsWb8X9enAdbHmi6sTVRjuafZfHuocqTptA6xlF6bFhQmB9o8zfKmxLymRQj8
b651esA3jTOhC14wX90A8j+8ums2DjA52rDsdQGn7Y0ZZDAM80uEyeUldwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCymBHB0b9d4QhJ9iE2eiYtNNjVuMB8GA1UdIwQY
MBaAFD62JyQTKCTlSQbiQKiANkGaNluEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZTMzMjQtNmU2MC00NWE1LTk0MzMt
ZTA1N2E4YmRjZjk2LzEvTEtZRWNIUnYxM2hDRW4ySVRaNkppMDAyTlc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZTMzMjQtNmU2MC00NWE1LTk0MzMtZTA1N2E4YmRjZjk2
LzEvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDiuLgMA0E
AgACMAcDBQMqBk1AMA0GCSqGSIb3DQEBCwUAA4IBAQBzpPjFQrMDRyydHffQoUdK
M9x2L48BmFuTNFe21IMrY5k2oH1Qs60gp6g0h5E1aVzqWHm3Y9evnR9c7Rsoc1mi
dN3OHc3ryA0XUkszAXpZ1dresQAjzej+QW4QTs4HfbdpEzxuGOcIt/t5143ZI7RQ
8Lptz62BqIlw2KzK7suSrgvKlBTExDjjNrBEp+NEvoUTRPSI+sBVdcSCUSoEllaf
h1Z6ZNzC5QvonycAJHlBWrKVu9r5f/qzyUkMZBNj+ssotyuufZaavV4+oLq22/TX
bOJe0fxsyGQXebugykI4Dnp1QSnNshHPRSex539AmcQtcpefk9mXhvHj9koo5rWZ
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:25 2025 by rpki-client