Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/lKw9zMYJbw1aFVyxh2TJBecIToI.roa
File: lKw9zMYJbw1aFVyxh2TJBecIToI.roa (raw, json)
Hash identifier: QdluCit2eJj/iJd3HDjL77n7Lj2Q/y5/+4w3mWdv2WY=
Subject key identifier: 94:AC:3D:CC:C6:09:6F:0D:5A:15:5C:B1:87:64:C9:05:E7:08:4E:82
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0198C67144E6D6930B932645B7597357B399
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/lKw9zMYJbw1aFVyxh2TJBecIToI.roa
Signing time: Wed 20 Aug 2025 07:46:08 +0000
ROA not before: Wed 20 Aug 2025 07:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51878
IP address blocks: 45.151.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:71:44:e6:d6:93:0b:93:26:45:b7:59:73:57:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Aug 20 07:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94ac3dccc6096f0d5a155cb18764c905e7084e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:aa:89:60:ac:7a:27:d7:60:b4:88:22:15:
e4:cc:01:44:ef:c6:2f:eb:a0:7b:3b:ce:69:d9:b5:
9b:9f:fe:85:31:50:be:de:8b:7a:19:e1:69:81:63:
0f:2c:c9:6a:04:b2:44:95:3c:75:bd:01:98:22:70:
39:96:1b:d3:20:ad:e4:3a:56:90:af:87:bb:32:3f:
a7:0a:ed:fb:9b:95:fa:02:9d:39:07:ec:5b:87:71:
29:59:5b:f5:af:27:3d:1e:0a:92:ee:f4:b6:bd:d6:
2d:62:be:97:c0:d7:f6:b4:81:e1:97:01:41:f0:b5:
35:ba:81:b7:2a:21:f2:ba:95:9f:f9:45:2b:ee:03:
9d:f6:f8:1f:e5:f5:19:db:08:11:50:cf:a8:4a:ad:
7d:d9:53:d7:d9:b8:72:bb:66:3f:1a:0a:58:c6:f3:
7f:e3:d2:f1:06:15:32:7a:43:b2:81:97:6e:bb:54:
0f:18:0b:0e:a7:23:2e:07:d4:3c:27:7c:67:fd:48:
51:f5:33:be:55:ab:1a:8e:05:5f:9b:b4:6f:8d:bf:
00:67:f6:8e:88:bb:45:63:98:9e:e1:4b:63:c2:a7:
b2:9d:85:a9:2a:a1:ac:f8:57:5e:8d:f3:ef:24:51:
89:46:49:9f:00:47:f2:70:6d:14:0c:2c:06:d9:13:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:3D:CC:C6:09:6F:0D:5A:15:5C:B1:87:64:C9:05:E7:08:4E:82
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/lKw9zMYJbw1aFVyxh2TJBecIToI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:b0:7d:cc:f2:ee:fb:e8:27:2a:47:19:51:7f:92:a1:51:d4:
19:b4:7a:6f:35:ab:58:44:3f:76:20:30:23:a0:1d:e7:02:e5:
11:44:5e:78:c6:68:8e:09:e7:ba:7a:3d:33:99:fc:37:1d:ea:
2e:ba:19:5d:af:fb:64:92:d1:f0:f3:cf:71:d6:c7:a8:c2:56:
12:3c:7c:5d:b7:a7:fd:46:3c:ab:2d:f7:36:a8:67:cc:54:ba:
ee:5b:5a:ea:78:34:8d:8a:1e:91:86:09:74:85:18:5f:b7:d6:
8f:65:79:b6:79:76:43:38:05:41:08:38:b0:55:07:a2:79:95:
88:d1:5f:18:66:aa:21:1e:71:c9:af:a7:c6:4d:e0:f5:f4:6e:
b6:f2:35:dd:ae:b8:4c:bf:3c:6b:4c:dd:c8:f9:b7:65:90:17:
e7:bc:48:a2:db:d3:0a:06:93:66:db:cb:5c:c7:c2:1f:ea:2f:
0e:28:5e:73:fa:df:fe:2c:9b:ea:de:a9:af:e9:6b:81:31:a1:
f1:86:2e:18:73:7e:ba:b6:6a:64:4f:8f:03:6a:a0:77:15:e4:
38:4d:7d:98:ab:ad:38:40:c9:83:79:e9:4a:82:aa:4f:41:b0:
00:3d:ee:85:5f:27:74:a9:ca:45:f0:b5:3c:31:2b:63:f9:30:
1b:46:20:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjGcUTm1pMLkyZFt1lzV7OZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwODIwMDc0NjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGFjM2RjY2M2MDk2ZjBkNWExNTVjYjE4NzY0YzkwNWU3MDg0ZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPSqiWCseifXYLSIIhXkzAFE78Yv
66B7O85p2bWbn/6FMVC+3ot6GeFpgWMPLMlqBLJElTx1vQGYInA5lhvTIK3kOlaQ
r4e7Mj+nCu37m5X6Ap05B+xbh3EpWVv1ryc9HgqS7vS2vdYtYr6XwNf2tIHhlwFB
8LU1uoG3KiHyupWf+UUr7gOd9vgf5fUZ2wgRUM+oSq192VPX2bhyu2Y/GgpYxvN/
49LxBhUyekOygZduu1QPGAsOpyMuB9Q8J3xn/UhR9TO+VasajgVfm7Rvjb8AZ/aO
iLtFY5ie4UtjwqeynYWpKqGs+FdejfPvJFGJRkmfAEfycG0UDCwG2RPmEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSsPczGCW8NWhVcsYdkyQXnCE6CMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvbEt3OXpNWUpidzFhRlZ5eGgyVEpCZWNJVG9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZc0MA0G
CSqGSIb3DQEBCwUAA4IBAQA7sH3M8u776CcqRxlRf5KhUdQZtHpvNatYRD92IDAj
oB3nAuURRF54xmiOCee6ej0zmfw3Heouuhldr/tkktHw889x1seowlYSPHxdt6f9
RjyrLfc2qGfMVLruW1rqeDSNih6Rhgl0hRhft9aPZXm2eXZDOAVBCDiwVQeieZWI
0V8YZqohHnHJr6fGTeD19G628jXdrrhMvzxrTN3I+bdlkBfnvEii29MKBpNm28tc
x8If6i8OKF5z+t/+LJvq3qmv6WuBMaHxhi4Yc366tmpkT48DaqB3FeQ4TX2Yq604
QMmDeelKgqpPQbAAPe6FXyd0qcpF8LU8MStj+TAbRiBe
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:35:45 2025 by rpki-client