Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lKwvLc8Za28GqQzBhO2ngs6CwdI.roa
File: lKwvLc8Za28GqQzBhO2ngs6CwdI.roa (raw, json)
Hash identifier: rA3x+QSTGmYnYY4nFcOein7qphgEi7A5vrT2SbQJhB0=
Subject key identifier: 94:AC:2F:2D:CF:19:6B:6F:06:A9:0C:C1:84:ED:A7:82:CE:82:C1:D2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198C25AC37EA2C43A4A70F6B273DA90F2A1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lKwvLc8Za28GqQzBhO2ngs6CwdI.roa
Signing time: Tue 19 Aug 2025 12:43:04 +0000
ROA not before: Tue 19 Aug 2025 12:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:5a:c3:7e:a2:c4:3a:4a:70:f6:b2:73:da:90:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 19 12:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94ac2f2dcf196b6f06a90cc184eda782ce82c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:53:03:87:44:f9:8d:77:ba:a6:4c:01:16:
63:75:c4:30:9a:ed:c0:64:26:c4:36:74:c3:72:15:
0b:61:cc:22:80:81:a8:23:df:05:f3:ef:71:f6:45:
51:85:9e:78:d2:8f:e9:87:34:35:4d:dc:71:32:a7:
85:b0:a0:29:d6:3b:ac:b7:55:3f:df:9f:11:a0:8d:
2f:ff:b1:6f:f0:60:af:a5:b1:5a:77:4f:b1:d5:ea:
35:ea:05:1a:5b:f7:2e:c3:36:d6:04:d3:16:8d:a3:
d2:e8:ae:a8:8e:60:e4:a1:0e:1b:58:3f:cb:22:81:
06:5d:6a:e2:8a:38:1c:72:d4:b7:57:f3:3b:37:b0:
77:d6:28:48:43:55:0d:33:24:4c:e9:69:2c:a4:ea:
bf:f2:02:a7:3f:b0:5d:95:90:5b:89:b0:53:38:a0:
6b:c4:0f:7e:b1:90:09:4a:b4:89:92:ff:5c:61:cb:
f3:95:1a:0d:67:de:be:c5:8e:9f:1e:8e:8c:a7:cf:
75:87:a6:2a:b9:9f:1f:ff:b4:fe:51:8c:51:2d:3a:
8d:6a:09:95:29:94:24:36:75:1d:d8:45:12:3c:e1:
cd:02:56:93:98:24:79:30:73:b6:2d:65:d5:91:ea:
d0:4d:19:1e:ee:95:06:6f:55:68:81:b3:43:62:dc:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:2F:2D:CF:19:6B:6F:06:A9:0C:C1:84:ED:A7:82:CE:82:C1:D2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lKwvLc8Za28GqQzBhO2ngs6CwdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.231.30.0/24
77.90.54.0/24
85.118.162.0/24
87.239.131.0/24
89.106.90.0/24
89.144.47.0/24
94.249.233.0/24
95.215.32.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
38:85:b7:7c:b9:ef:11:93:1f:6c:55:bc:74:0d:b3:1b:23:99:
61:ae:ec:61:9e:64:55:81:7c:bc:82:85:c3:56:0f:31:ee:16:
f1:a5:de:bd:60:91:2a:3b:e6:fe:bc:ae:24:02:e9:22:87:38:
a5:ff:79:9d:db:b8:5b:79:a0:d6:d4:73:78:6a:21:60:1b:66:
d4:d8:db:ad:f8:7d:2c:4b:f7:fa:cf:c6:5e:22:1c:8e:59:3a:
de:d2:ae:74:15:6c:d7:65:e5:d5:01:0d:47:3d:36:86:cc:2d:
27:38:b0:84:4b:99:18:25:65:36:72:76:1a:78:fb:13:99:14:
66:1b:e8:2f:81:8b:d6:20:76:ea:84:1e:6b:d1:f1:0e:56:e2:
f1:58:7b:34:01:57:42:95:80:59:e7:17:69:4e:36:4d:a7:dc:
1e:98:65:3e:7a:0a:03:34:ba:a1:e8:43:19:19:53:a5:dd:14:
b2:a5:c4:c1:b9:ee:98:60:60:e3:85:f8:1d:f8:36:ac:d9:17:
a2:42:df:39:c1:b0:bc:7a:18:6a:a5:37:3a:e8:d2:ab:e0:cd:
6f:eb:5f:6a:66:6e:7f:7b:a8:49:43:ec:8c:9e:ed:48:f3:f3:
98:8f:d3:fd:8f:be:0b:a6:bc:cb:74:43:01:03:eb:7d:a4:7d:
36:cf:3a:06
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZjCWsN+osQ6SnD2snPakPKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODE5MTI0MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGFjMmYyZGNmMTk2YjZmMDZhOTBjYzE4NGVkYTc4MmNlODJjMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoVTA4dE+Y13uqZMARZjdcQwmu3A
ZCbENnTDchULYcwigIGoI98F8+9x9kVRhZ540o/phzQ1TdxxMqeFsKAp1just1U/
358RoI0v/7Fv8GCvpbFad0+x1eo16gUaW/cuwzbWBNMWjaPS6K6ojmDkoQ4bWD/L
IoEGXWriijgcctS3V/M7N7B31ihIQ1UNMyRM6WkspOq/8gKnP7BdlZBbibBTOKBr
xA9+sZAJSrSJkv9cYcvzlRoNZ96+xY6fHo6Mp891h6YquZ8f/7T+UYxRLTqNagmV
KZQkNnUd2EUSPOHNAlaTmCR5MHO2LWXVkerQTRke7pUGb1VogbNDYtwZcQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFJSsLy3PGWtvBqkMwYTtp4LOgsHSMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbEt3dkxjOFphMjhHcVF6QmhPMm5nczZDd2RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABVOBAwQA
BeceAwQATVo2AwQAVXaiAwQAV++DAwQAWWpaAwQAWZAvAwQAXvnpAwQAX9cgAwQA
2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQA4hbd8ue8Rkx9sVbx0DbMbI5lhruxhnmRV
gXy8goXDVg8x7hbxpd69YJEqO+b+vK4kAukihzil/3md27hbeaDW1HN4aiFgG2bU
2Nut+H0sS/f6z8ZeIhyOWTre0q50FWzXZeXVAQ1HPTaGzC0nOLCES5kYJWU2cnYa
ePsTmRRmG+gvgYvWIHbqhB5r0fEOVuLxWHs0AVdClYBZ5xdpTjZNp9wemGU+egoD
NLqh6EMZGVOl3RSypcTBue6YYGDjhfgd+Das2ReiQt85wbC8ehhqpTc66NKr4M1v
619qZm5/e6hJQ+yMnu1I8/OYj9P9j74LprzLdEMBA+t9pH02zzoG
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:22 2025 by rpki-client