Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LTzdSoW7ZlTBW46UQhRvOYEs_xc.roa
File: LTzdSoW7ZlTBW46UQhRvOYEs_xc.roa (raw, json)
Hash identifier: sv0NKRUEnGG7D1pvD1HdyBQU0fj1zSGMGXbnIlX7Yz4=
Subject key identifier: 2D:3C:DD:4A:85:BB:66:54:C1:5B:8E:94:42:14:6F:39:81:2C:FF:17
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019788064CC331BE7D24C8A82AA5368142DE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LTzdSoW7ZlTBW46UQhRvOYEs_xc.roa
Signing time: Thu 19 Jun 2025 11:50:03 +0000
ROA not before: Thu 19 Jun 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209671
IP address blocks: 163.5.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:06:4c:c3:31:be:7d:24:c8:a8:2a:a5:36:81:42:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 19 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d3cdd4a85bb6654c15b8e9442146f39812cff17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:4c:9b:94:79:4d:39:7c:cd:a1:73:d2:1a:
df:79:03:87:28:42:de:9e:c4:b3:1d:33:78:18:83:
9d:5a:86:d7:a7:f4:5e:c9:93:f9:c1:5e:26:4e:fa:
04:eb:24:f3:97:a0:e2:d4:7a:34:90:0f:51:80:3f:
41:28:1c:8f:06:a6:88:07:e7:ee:54:2b:88:d8:c4:
e7:41:7d:45:7f:04:69:f4:92:d5:70:8d:b3:a5:00:
95:62:40:47:6b:91:08:df:d8:41:ab:d6:5a:c3:d1:
6a:dc:12:7c:2a:7d:f7:d1:f4:7e:0c:54:b2:1a:72:
5e:7b:91:a9:3c:8b:f0:77:9e:bf:73:65:4e:4e:23:
08:9f:0c:9d:9f:2b:05:cf:1d:28:11:75:57:9b:25:
e3:c5:ec:5d:34:b8:9a:0c:57:7a:78:0f:1b:bb:11:
3e:d8:91:75:d5:1b:39:76:2c:e9:c7:85:5e:17:e2:
79:6d:10:99:96:3f:3d:37:91:1f:e5:fb:c6:63:c6:
13:0b:d2:a7:13:7a:ce:05:17:97:32:33:79:1d:7a:
94:1b:a9:dd:b7:83:46:5a:bd:ab:3c:a6:dd:b2:60:
1b:ff:13:2f:d7:63:97:52:98:8a:38:61:45:8d:84:
c6:4d:a5:81:cb:cd:fc:a0:97:c1:0c:d6:00:1a:82:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:DD:4A:85:BB:66:54:C1:5B:8E:94:42:14:6F:39:81:2C:FF:17
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LTzdSoW7ZlTBW46UQhRvOYEs_xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:66:81:1a:57:9b:ae:aa:48:0f:2d:88:4f:cf:8b:68:bc:7e:
5d:4e:68:6f:98:a1:c6:e0:b1:1e:01:64:8c:95:4d:c8:d2:2c:
5f:a5:79:cc:e9:61:48:7f:fe:dd:b4:d0:4b:1d:70:1c:8d:1b:
2a:86:60:6b:9f:03:7e:f8:65:7a:a3:f7:9d:48:06:a5:39:bc:
fb:94:04:13:9e:eb:bd:66:65:82:5e:34:a5:47:49:78:ca:db:
c5:b1:d3:ca:3f:c5:13:36:3d:9e:cd:3c:78:d7:03:11:f2:c6:
74:c8:c5:e8:ad:89:ef:b3:d0:8d:be:ac:40:ca:e9:3c:52:b8:
d4:48:d9:66:67:db:39:17:ca:3a:10:9c:4e:13:f0:30:d7:1c:
61:2b:0e:cb:a4:51:20:25:6b:43:bf:13:d9:57:3f:28:db:89:
5a:9e:cd:7f:31:48:e7:63:02:1a:60:16:bf:62:e5:85:e7:7c:
ea:f1:ce:02:be:ee:c1:91:ae:97:00:bd:83:b6:b4:a0:11:fc:
6f:d8:a4:35:10:d3:2b:22:cb:e3:fd:a7:c0:a2:40:6e:77:9e:
83:b3:01:94:84:8e:7c:4f:7e:03:51:53:6a:3c:10:1b:b1:cf:
88:88:54:59:86:f3:58:9b:eb:c9:a9:96:31:9f:22:4b:f7:e6:
03:cf:49:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeIBkzDMb59JMioKqU2gULeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNjE5MTE1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDNjZGQ0YTg1YmI2NjU0YzE1YjhlOTQ0MjE0NmYzOTgxMmNmZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlFMm5R5TTl8zaFz0hrfeQOHKELe
nsSzHTN4GIOdWobXp/ReyZP5wV4mTvoE6yTzl6Di1Ho0kA9RgD9BKByPBqaIB+fu
VCuI2MTnQX1FfwRp9JLVcI2zpQCVYkBHa5EI39hBq9Zaw9Fq3BJ8Kn330fR+DFSy
GnJee5GpPIvwd56/c2VOTiMInwydnysFzx0oEXVXmyXjxexdNLiaDFd6eA8buxE+
2JF11Rs5dizpx4VeF+J5bRCZlj89N5Ef5fvGY8YTC9KnE3rOBReXMjN5HXqUG6nd
t4NGWr2rPKbdsmAb/xMv12OXUpiKOGFFjYTGTaWBy838oJfBDNYAGoJKTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC083UqFu2ZUwVuOlEIUbzmBLP8XMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTFR6ZFNvVzdabFRCVzQ2VVFoUnZPWUVzX3hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWFMA0G
CSqGSIb3DQEBCwUAA4IBAQAbZoEaV5uuqkgPLYhPz4tovH5dTmhvmKHG4LEeAWSM
lU3I0ixfpXnM6WFIf/7dtNBLHXAcjRsqhmBrnwN++GV6o/edSAalObz7lAQTnuu9
ZmWCXjSlR0l4ytvFsdPKP8UTNj2ezTx41wMR8sZ0yMXorYnvs9CNvqxAyuk8UrjU
SNlmZ9s5F8o6EJxOE/Aw1xxhKw7LpFEgJWtDvxPZVz8o24lans1/MUjnYwIaYBa/
YuWF53zq8c4Cvu7Bka6XAL2DtrSgEfxv2KQ1ENMrIsvj/afAokBud56DswGUhI58
T34DUVNqPBAbsc+IiFRZhvNYm+vJqZYxnyJL9+YDz0kH
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:04:28 2025 by rpki-client