Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/Llrtrof0_CXG6g_18Oyw968ZWEI.roa
File: Llrtrof0_CXG6g_18Oyw968ZWEI.roa (raw, json)
Hash identifier: X1zaGRl51EQ/u9kK0U1WmdFcDajifODFmk55LESlUmM=
Subject key identifier: 2E:5A:ED:AE:87:F4:FC:25:C6:EA:0F:F5:F0:EC:B0:F7:AF:19:58:42
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 0198A9AE877A1EC06BB7C596C5FA3B7AEE6A
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/Llrtrof0_CXG6g_18Oyw968ZWEI.roa
Signing time: Thu 14 Aug 2025 17:44:04 +0000
ROA not before: Thu 14 Aug 2025 17:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204996
IP address blocks: 45.67.8.0/22 maxlen: 22
45.67.8.0/24 maxlen: 24
45.67.9.0/24 maxlen: 24
185.170.248.0/22 maxlen: 24
185.170.248.0/23 maxlen: 23
185.170.248.0/24 maxlen: 24
185.170.249.0/24 maxlen: 24
185.170.250.0/23 maxlen: 23
185.170.250.0/24 maxlen: 24
185.170.251.0/24 maxlen: 24
193.30.134.0/24 maxlen: 24
193.30.162.0/24 maxlen: 24
193.30.165.0/24 maxlen: 24
193.30.166.0/24 maxlen: 24
2a0a:ed00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:ae:87:7a:1e:c0:6b:b7:c5:96:c5:fa:3b:7a:ee:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Aug 14 17:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5aedae87f4fc25c6ea0ff5f0ecb0f7af195842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:87:51:e7:7a:f8:8b:df:00:72:cf:a7:36:
97:10:aa:da:87:d9:15:2b:b6:d0:8e:13:eb:7e:ec:
86:8d:a6:e2:e2:9f:cb:77:df:13:1c:d7:fb:e5:0a:
d2:ff:b0:5c:08:ae:3b:dd:ba:7d:1d:20:29:ef:b9:
c1:03:ae:e9:12:9f:42:5a:b9:cb:53:bb:a6:c9:4a:
09:58:fc:a9:73:4a:44:2a:00:6c:66:3b:61:c0:0d:
67:e9:7d:6c:d6:53:a1:b5:01:fc:fe:55:9c:71:3c:
b4:13:b7:94:38:6a:31:8d:55:6d:74:ac:d9:fc:6c:
1c:36:4d:f2:94:ce:76:70:06:8f:e6:cd:93:6c:30:
a7:61:5f:c7:af:4d:de:e1:24:53:1b:92:58:a4:37:
b5:c0:33:8c:02:6e:dc:7e:6c:7c:b4:00:48:aa:96:
aa:a0:bc:34:d8:20:9b:03:6c:05:e3:b1:c2:55:b7:
a9:e1:07:fa:1f:50:0d:8c:c0:35:cf:b6:9d:7d:c4:
f9:e9:22:f3:fe:98:30:da:35:1f:6a:12:cf:50:56:
83:f5:d0:db:37:5d:ff:1a:ba:16:51:ee:08:4d:d4:
45:32:00:24:9d:09:b7:81:c1:c0:21:d2:a5:1d:94:
88:54:c8:5d:b1:85:3f:6b:9f:88:fb:ff:9b:2e:a5:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:ED:AE:87:F4:FC:25:C6:EA:0F:F5:F0:EC:B0:F7:AF:19:58:42
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/Llrtrof0_CXG6g_18Oyw968ZWEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.8.0/22
185.170.248.0/22
193.30.134.0/24
193.30.162.0/24
193.30.165.0-193.30.166.255
IPv6:
2a0a:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
b5:fb:64:cc:90:22:02:ca:91:1b:6e:97:5c:c6:80:2e:23:d8:
0e:1c:7c:2b:4e:66:e6:f0:99:1b:8c:b6:5f:ee:dc:7f:6e:26:
7d:4c:92:ea:7c:10:05:57:15:9f:79:70:a4:c2:59:f6:74:c2:
c6:6a:56:08:86:b2:f3:e3:47:50:33:44:bc:eb:b3:b7:68:40:
71:11:50:72:e8:17:46:49:5e:8a:00:56:4a:65:04:48:fd:18:
81:ab:e8:75:90:93:0f:40:0d:11:7a:77:1e:85:c4:2f:63:a9:
36:6e:7a:7a:44:7b:01:f3:37:ad:f5:05:9e:c4:e5:8f:b9:e7:
13:af:51:1b:b3:c0:cb:c2:c9:a5:17:e3:4b:92:47:e0:26:2c:
fb:97:40:c0:39:a0:9d:38:a3:54:ab:be:a6:68:f4:42:6d:68:
ec:89:9b:2a:37:2d:2f:c3:9b:44:b2:b7:83:3b:be:13:9c:94:
1e:3a:54:c0:a3:59:a2:3e:af:a0:93:b0:a9:d8:58:85:d3:11:
5e:48:c2:6b:eb:63:e5:e3:c4:04:58:cc:21:d2:6a:41:72:b6:
91:84:fe:83:21:ef:65:80:c1:d2:6b:66:35:e5:1c:64:27:cc:
df:ff:bf:c8:e3:34:43:39:12:e7:4a:67:eb:61:c7:51:75:43:
e4:cb:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:57:43 2025 by rpki-client