Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/LwiqjkhCjVYDN_Uuc5pesCFRxxQ.roa
File: LwiqjkhCjVYDN_Uuc5pesCFRxxQ.roa (raw, json)
Hash identifier: XJuhY9bzTdv01ahJTRNA+zDPPR9oL2iwovPyAJa6tpU=
Subject key identifier: 2F:08:AA:8E:48:42:8D:56:03:37:F5:2E:73:9A:5E:B0:21:51:C7:14
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0199F0D1663E057C0F0B5163868A3F3D085D
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/LwiqjkhCjVYDN_Uuc5pesCFRxxQ.roa
Signing time: Fri 17 Oct 2025 06:17:58 +0000
ROA not before: Fri 17 Oct 2025 06:17:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208185
IP address blocks: 178.20.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:d1:66:3e:05:7c:0f:0b:51:63:86:8a:3f:3d:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Oct 17 06:17:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f08aa8e48428d560337f52e739a5eb02151c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:d1:11:0e:e2:53:f1:a3:c7:d1:7c:18:7c:
11:8d:26:43:5e:12:7e:33:46:a4:16:20:b5:7c:39:
ca:64:44:de:ab:d9:dd:a5:8b:b0:d8:5c:f0:f7:f0:
9d:57:ab:64:1b:89:28:b3:2b:20:5a:f9:9b:1c:50:
05:82:51:fa:70:c4:13:ab:0f:c4:ab:91:e2:ce:de:
cc:c6:b9:92:8f:48:c1:79:1e:5c:9f:62:0e:db:0e:
07:eb:a6:14:fc:c1:f0:86:19:27:9a:9b:f4:67:91:
7d:db:3d:f6:94:c0:f6:a7:30:3d:02:5a:b8:6b:3d:
d0:2d:76:da:b0:23:3f:bc:7e:bd:65:06:b2:45:6b:
b3:f7:e6:7e:40:49:e0:b1:10:19:82:bd:e8:f3:f0:
76:d4:d6:1a:8b:5d:24:89:2b:7f:87:4d:af:58:36:
9d:ff:b7:11:74:f9:63:05:37:e3:56:03:de:8e:c8:
d3:c6:38:7e:75:92:aa:16:00:a3:6d:af:d5:e3:a8:
8e:8b:30:0f:2b:87:d3:21:8d:8b:0b:89:fa:2b:15:
20:b6:a8:05:b6:2d:4b:bf:79:c0:c0:3c:a7:78:59:
e7:d8:36:cf:32:9f:ef:85:c1:71:9e:7f:d6:09:38:
d5:56:2c:d0:e8:e2:21:58:32:bc:f4:a2:84:25:8f:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:AA:8E:48:42:8D:56:03:37:F5:2E:73:9A:5E:B0:21:51:C7:14
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/LwiqjkhCjVYDN_Uuc5pesCFRxxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:cc:1a:2a:e5:22:39:69:44:f7:4a:76:31:f8:2c:c6:3d:88:
21:06:4f:84:64:c7:2b:68:23:6a:30:d5:3d:4a:c8:6e:ee:91:
76:06:24:91:45:e7:07:f4:5b:35:be:83:83:ab:a0:6c:65:fd:
33:1e:64:5f:3b:e4:0c:d2:c5:e0:1f:61:f2:7f:54:5a:0e:aa:
20:eb:ca:d5:75:19:4f:3d:76:62:36:f2:9f:b6:cc:f8:35:c6:
59:0d:6b:e9:87:ec:7a:57:04:76:30:ee:6a:79:b2:78:a7:d1:
fb:6e:50:f6:24:09:9c:da:39:01:8c:40:50:5f:bf:7c:b6:91:
13:d4:d1:a9:39:98:00:5c:04:2f:48:1e:e4:63:49:61:78:4c:
68:54:75:9b:1a:e9:5a:50:28:29:53:bd:f6:86:54:47:a9:0c:
79:15:61:88:ff:fe:2a:a6:31:53:13:e2:de:e7:89:b1:00:23:
2b:f7:ed:1d:04:b3:3e:5d:04:24:c0:a0:a7:16:3f:2a:95:18:
08:5f:f6:fe:9c:14:36:3e:61:f0:a4:5e:2e:77:e2:79:62:8d:
de:af:fd:92:51:21:3c:c0:a8:df:9f:b6:25:ab:7c:01:17:74:
e2:c2:08:d5:63:fe:12:ec:81:60:b7:e8:54:83:a6:3b:5b:0d:
20:48:b2:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnw0WY+BXwPC1Fjhoo/PQhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj
ZTNmNmUwHhcNMjUxMDE3MDYxNzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjA4YWE4ZTQ4NDI4ZDU2MDMzN2Y1MmU3MzlhNWViMDIxNTFjNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzREQ7iU/Gjx9F8GHwRjSZDXhJ+
M0akFiC1fDnKZETeq9ndpYuw2Fzw9/CdV6tkG4kosysgWvmbHFAFglH6cMQTqw/E
q5Hizt7MxrmSj0jBeR5cn2IO2w4H66YU/MHwhhknmpv0Z5F92z32lMD2pzA9Alq4
az3QLXbasCM/vH69ZQayRWuz9+Z+QEngsRAZgr3o8/B21NYai10kiSt/h02vWDad
/7cRdPljBTfjVgPejsjTxjh+dZKqFgCjba/V46iOizAPK4fTIY2LC4n6KxUgtqgF
ti1Lv3nAwDyneFnn2DbPMp/vhcFxnn/WCTjVVizQ6OIhWDK89KKEJY8NOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8Iqo5IQo1WAzf1LnOaXrAhUccUMB8GA1UdIwQY
MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt
MDVkNThmMGNiODhjLzEvTHdpcWpraENqVllETl9VdWM1cGVzQ0ZSeHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj
LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshTTMA0G
CSqGSIb3DQEBCwUAA4IBAQB8zBoq5SI5aUT3SnYx+CzGPYghBk+EZMcraCNqMNU9
Sshu7pF2BiSRRecH9Fs1voODq6BsZf0zHmRfO+QM0sXgH2Hyf1RaDqog68rVdRlP
PXZiNvKftsz4NcZZDWvph+x6VwR2MO5qebJ4p9H7blD2JAmc2jkBjEBQX798tpET
1NGpOZgAXAQvSB7kY0lheExoVHWbGulaUCgpU732hlRHqQx5FWGI//4qpjFTE+Le
54mxACMr9+0dBLM+XQQkwKCnFj8qlRgIX/b+nBQ2PmHwpF4ud+J5Yo3er/2SUSE8
wKjfn7Ylq3wBF3TiwgjVY/4S7IFgt+hUg6Y7Ww0gSLLr
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:17 2025 by rpki-client