Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/La2OHk40xT9jVzdbL8VM1zaNhwM.roa
File: La2OHk40xT9jVzdbL8VM1zaNhwM.roa (raw, json)
Hash identifier: L4NT7hhkbemzTZ1h36oxCLeAgJ9PnHHf7M9ufVdCkYE=
Subject key identifier: 2D:AD:8E:1E:4E:34:C5:3F:63:57:37:5B:2F:C5:4C:D7:36:8D:87:03
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 0198C2728E7CEEA7A3C58AE754A17B8BCC86
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/La2OHk40xT9jVzdbL8VM1zaNhwM.roa
Signing time: Tue 19 Aug 2025 13:09:04 +0000
ROA not before: Tue 19 Aug 2025 13:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44780
IP address blocks: 195.149.92.0/23 maxlen: 24
2a02:790:4::/48 maxlen: 48
2a02:790:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:72:8e:7c:ee:a7:a3:c5:8a:e7:54:a1:7b:8b:cc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Aug 19 13:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dad8e1e4e34c53f6357375b2fc54cd7368d8703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:2f:04:3c:29:78:8e:2f:2e:2b:17:11:1f:
84:1b:d0:f5:fd:90:8b:38:e0:e1:b7:b9:c4:e4:52:
a7:e9:09:23:e1:77:1e:d9:26:09:99:8f:e6:cb:84:
db:d0:c3:4f:7b:c5:1b:da:ea:92:22:1e:7a:24:df:
02:c0:5f:ae:85:09:09:88:f9:f8:9b:c6:05:06:14:
91:71:22:6d:e0:7c:c0:a5:c3:cf:04:a6:b0:50:04:
2b:e9:f0:ea:39:de:97:a5:f5:19:9c:a5:c2:62:80:
b4:f9:65:24:b9:10:d5:68:cb:82:93:70:cc:37:18:
47:48:d5:1f:6d:a1:02:92:1b:3b:42:8d:30:24:f2:
32:c8:53:91:59:9b:c4:3b:f9:75:b6:75:0a:f6:28:
98:f1:0f:82:7f:a9:e4:10:ce:a9:c4:32:70:93:2f:
26:eb:69:9a:34:3b:77:f5:c1:56:1f:83:74:8b:04:
94:48:b5:17:19:bd:d3:a3:db:de:ce:5d:75:36:1e:
f4:ca:e7:12:21:f1:85:bc:6b:f2:f0:71:1e:27:a7:
af:d0:bc:ce:1e:ce:6a:9f:51:ef:b6:ee:85:25:30:
13:b0:fc:8c:d3:7c:51:d5:d3:a6:dc:1f:17:d1:7d:
70:a3:6d:56:da:ba:1a:f0:12:46:83:38:b1:cd:72:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:8E:1E:4E:34:C5:3F:63:57:37:5B:2F:C5:4C:D7:36:8D:87:03
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/La2OHk40xT9jVzdbL8VM1zaNhwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.92.0/23
IPv6:
2a02:790:4::/48
2a02:790:6::/48
Signature Algorithm: sha256WithRSAEncryption
3a:c8:b8:47:fb:93:55:84:d9:7e:4c:07:dc:42:55:2c:57:d4:
2d:33:8d:26:e7:a3:33:10:04:f9:d5:c9:32:9a:9f:02:e3:23:
ca:41:98:e1:7c:79:7a:63:32:fe:dc:54:6b:4a:2f:c1:a0:15:
39:13:78:b7:f3:42:3e:b0:7f:b1:86:e6:7a:68:35:78:ae:59:
ad:3b:8f:42:9d:ec:fe:a3:c0:a4:54:32:fa:f5:8e:05:4c:9b:
ed:c6:b0:57:af:02:06:6c:d0:90:fd:a6:09:58:94:68:9b:bc:
58:69:3b:47:fe:65:f4:46:20:da:59:58:fe:ce:1e:b7:7b:a6:
fc:5a:14:0f:2f:d7:fd:42:16:d1:f5:02:48:1a:7a:ec:f5:d6:
ba:4b:5b:d0:39:d9:ad:e1:b1:6e:5a:e6:95:31:f0:e5:1b:7b:
cb:70:c7:92:66:ba:f0:12:0e:f6:06:cc:60:42:55:3d:3a:89:
28:26:0d:c8:5b:50:60:09:1f:dc:19:07:a8:ee:22:24:fb:39:
25:b1:b2:bd:48:49:5c:b3:c9:09:1a:ab:b3:80:bc:5b:6f:93:
67:6f:57:bd:a4:e8:3e:33:ec:8f:c1:d5:06:cb:8e:a4:3c:58:
79:d4:5a:37:b3:ca:83:2c:eb:43:c4:68:80:c1:7f:d4:80:3f:
11:6a:95:61
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZjCco587qejxYrnVKF7i8yGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjUwODE5MTMwOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGFkOGUxZTRlMzRjNTNmNjM1NzM3NWIyZmM1NGNkNzM2OGQ4NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYMvBDwpeI4vLisXER+EG9D1/ZCL
OODht7nE5FKn6Qkj4Xce2SYJmY/my4Tb0MNPe8Ub2uqSIh56JN8CwF+uhQkJiPn4
m8YFBhSRcSJt4HzApcPPBKawUAQr6fDqOd6XpfUZnKXCYoC0+WUkuRDVaMuCk3DM
NxhHSNUfbaECkhs7Qo0wJPIyyFORWZvEO/l1tnUK9iiY8Q+Cf6nkEM6pxDJwky8m
62maNDt39cFWH4N0iwSUSLUXGb3To9vezl11Nh70yucSIfGFvGvy8HEeJ6ev0LzO
Hs5qn1Hvtu6FJTATsPyM03xR1dOm3B8X0X1wo21W2roa8BJGgzixzXI6IQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFC2tjh5ONMU/Y1c3Wy/FTNc2jYcDMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvTGEyT0hrNDB4VDlqVnpkYkw4Vk0xemFOaHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBw5VcMBgE
AgACMBIDBwAqAgeQAAQDBwAqAgeQAAYwDQYJKoZIhvcNAQELBQADggEBADrIuEf7
k1WE2X5MB9xCVSxX1C0zjSbnozMQBPnVyTKanwLjI8pBmOF8eXpjMv7cVGtKL8Gg
FTkTeLfzQj6wf7GG5npoNXiuWa07j0Kd7P6jwKRUMvr1jgVMm+3GsFevAgZs0JD9
pglYlGibvFhpO0f+ZfRGINpZWP7OHrd7pvxaFA8v1/1CFtH1Akgaeuz11rpLW9A5
2a3hsW5a5pUx8OUbe8twx5JmuvASDvYGzGBCVT06iSgmDchbUGAJH9wZB6juIiT7
OSWxsr1ISVyzyQkaq7OAvFtvk2dvV72k6D4z7I/B1QbLjqQ8WHnUWjezyoMs60PE
aIDBf9SAPxFqlWE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:51 2025 by rpki-client