
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LNJWCsS_CVIDaWnceN3GvzrPJms.roa
File: LNJWCsS_CVIDaWnceN3GvzrPJms.roa (raw, json)
Hash identifier: kMGEwrbv2wJCZFsQ7MAvj2Tq4vdI15077vrkJwZ59u0=
Subject key identifier: 2C:D2:56:0A:C4:BF:09:52:03:69:69:DC:78:DD:C6:BF:3A:CF:26:6B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01999B0C5D3C098E8F5FA6137485CFFA788C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LNJWCsS_CVIDaWnceN3GvzrPJms.roa
Signing time: Tue 30 Sep 2025 14:35:02 +0000
ROA not before: Tue 30 Sep 2025 14:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215242
IP address blocks: 2.56.111.0/24 maxlen: 24
45.94.169.0/24 maxlen: 24
45.132.183.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:0c:5d:3c:09:8e:8f:5f:a6:13:74:85:cf:fa:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 30 14:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd2560ac4bf0952036969dc78ddc6bf3acf266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:fe:00:d4:44:e6:e8:ac:54:ae:55:60:bd:
b2:9a:a6:52:47:b5:02:8d:3f:70:9a:3f:3f:7e:81:
b5:86:83:e8:64:42:a7:51:bf:4a:99:ea:d9:f8:5e:
cd:a8:78:17:69:4f:9a:74:b2:a1:ca:55:70:2e:90:
fe:a4:13:d9:43:34:dd:db:2d:b5:96:61:8b:be:eb:
5f:9d:be:6f:f7:6e:90:dc:ad:db:fd:8e:d1:73:03:
c0:fc:b5:2e:67:df:bd:d1:10:cc:f5:40:86:f1:29:
b0:2c:2f:07:75:eb:55:20:b1:84:49:89:35:18:6e:
93:69:30:e2:79:2e:d9:35:86:e0:b9:6b:a9:58:e6:
21:77:60:7c:83:e2:d9:ef:58:36:0a:0b:1c:bd:c5:
6a:6d:9f:48:c8:dc:db:67:7f:8e:a7:77:33:a3:b3:
9b:62:60:91:ae:f4:5d:58:68:34:04:0a:7e:97:0e:
f3:1c:8b:fb:ba:15:be:30:c2:85:70:9f:55:26:6b:
33:7d:72:f2:d9:38:03:c1:bf:05:d5:c3:8f:5b:a6:
b2:65:c1:9c:45:6e:d8:69:e6:c0:a1:d7:ee:5e:c9:
fd:c1:31:04:a5:37:ba:87:69:d9:4b:73:de:83:28:
48:14:ca:81:20:f6:71:04:e7:80:25:86:74:f8:0f:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:56:0A:C4:BF:09:52:03:69:69:DC:78:DD:C6:BF:3A:CF:26:6B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LNJWCsS_CVIDaWnceN3GvzrPJms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
45.94.169.0/24
45.132.183.0/24
45.138.180.0/24
45.151.3.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
be:29:51:2e:93:06:03:be:ec:5d:18:9d:87:68:70:54:fb:87:
e8:9f:dd:c3:55:aa:39:a8:3b:c1:cf:47:aa:e5:d0:8c:ea:83:
4c:93:6e:05:af:63:f8:26:bc:05:11:4e:f6:dd:58:0a:08:bb:
f2:04:05:62:53:f7:ac:d4:b8:fe:56:d5:f7:06:26:79:8b:8a:
a7:f8:97:c1:c7:d6:bb:1d:6a:4d:71:e6:17:4d:11:18:e4:91:
22:35:fe:eb:2a:64:69:34:b2:be:b4:32:a3:4b:70:fb:09:9e:
0b:36:7d:4a:cb:44:e2:a7:2b:4d:9f:95:b1:01:3a:d0:e5:cd:
2e:e6:2c:77:74:cd:42:cf:b9:0b:c8:18:dd:3c:57:1e:fc:80:
b8:65:d6:41:da:90:3c:42:42:27:49:98:85:49:56:23:42:93:
fd:d7:8a:b4:76:d9:d8:53:46:44:41:9d:e4:90:ea:de:b7:c8:
25:95:ad:14:35:45:94:6d:b3:37:17:20:15:54:83:b9:f6:07:
48:f0:4c:30:b3:2e:f4:0c:71:39:2b:fb:d8:b9:77:74:f9:4b:
92:3a:78:57:39:7e:d7:20:95:ef:24:f0:24:34:b4:25:47:62:
df:48:84:a6:30:4a:ee:e5:42:58:bc:77:84:31:d1:93:f5:d1:
b6:d0:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:32:43 2025 by rpki-client