Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa
File: LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa (raw, json)
Hash identifier: e1xccoiOvs2L5dWiIhyAcjjVHRB1nFtrLWnpfffBP84=
Subject key identifier: 2D:35:21:42:38:A5:CC:55:FE:93:B0:60:CB:DC:AC:CB:11:0E:3D:BE
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01999A22E846C163EDC4E281501931519516
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa
Signing time: Tue 30 Sep 2025 10:20:02 +0000
ROA not before: Tue 30 Sep 2025 10:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:22:e8:46:c1:63:ed:c4:e2:81:50:19:31:51:95:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 30 10:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d35214238a5cc55fe93b060cbdcaccb110e3dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:fe:6e:1a:97:2d:7c:0e:ee:d6:55:46:bc:
e1:29:98:12:ee:d2:c7:23:87:da:0c:fd:4d:7a:72:
7e:6f:8e:60:30:57:4f:e2:d0:de:50:6b:3a:75:40:
cf:9d:e0:1c:34:de:ac:36:62:44:03:a7:32:2e:b6:
9b:a8:53:1b:d1:0d:78:24:ca:48:c6:f7:ee:9f:2a:
a6:38:7f:3c:f7:5f:0e:0d:3b:b2:b0:19:5f:32:8f:
03:d4:7c:c4:22:b7:d3:57:5f:8c:6c:c1:39:07:b9:
ad:4d:f4:d9:ec:06:a3:1b:06:c1:75:31:e4:10:97:
7a:6c:9f:67:48:70:f8:f7:ca:0b:e4:df:9a:d5:a1:
f8:ac:3d:2a:68:72:27:7f:21:e0:aa:b4:63:37:31:
e9:0d:d8:fb:bb:d6:07:b3:da:2c:51:8a:b7:6a:38:
6f:90:e9:89:75:af:48:52:8a:29:1b:cb:ea:55:0f:
a5:3b:96:e3:46:95:6a:ee:37:c7:e5:31:09:80:02:
c1:e3:3f:6d:8d:f2:4a:5b:90:9c:7f:a0:17:56:42:
dd:5a:59:b5:e9:15:44:37:00:ed:dd:00:e6:35:8c:
2a:62:be:81:33:9e:a7:a3:ae:5b:e2:f0:83:9e:cf:
56:bc:82:85:c1:40:ea:7c:48:4d:6f:2b:92:63:bb:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:21:42:38:A5:CC:55:FE:93:B0:60:CB:DC:AC:CB:11:0E:3D:BE
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a0:26:b4:c5:3e:05:58:d6:5b:c0:fd:f2:ff:4a:6a:75:88:
4f:f3:59:96:9c:2b:31:03:a7:ba:3d:95:34:52:63:2e:0d:58:
33:c1:d8:20:f7:d3:42:c5:e9:20:08:7d:a9:f2:a7:e4:d1:bb:
d7:cd:50:d0:cd:fc:c0:c4:78:ef:58:4f:8e:6d:8e:71:5f:91:
96:aa:71:78:19:39:8d:3a:57:b2:cf:d7:03:96:90:20:63:15:
c1:8d:aa:5e:88:58:b8:72:f6:99:5b:ee:81:45:84:a7:47:df:
76:6d:b3:ae:71:ba:c3:28:67:9a:15:3b:f0:38:3a:6d:ea:07:
ed:34:bc:68:d5:b7:5c:59:22:dc:bf:b7:58:98:2d:89:dc:df:
a4:e5:f4:3c:43:b9:9c:b4:7c:96:2c:5a:c8:f2:6b:d2:fa:76:
db:95:dd:c3:60:2c:7a:7d:d2:ce:98:12:af:11:96:dd:c4:01:
7f:ca:aa:69:21:8d:15:09:bb:ef:0a:26:09:4b:77:54:86:b8:
25:ad:94:01:d1:e8:80:65:4d:a8:d7:4b:5c:a6:98:52:2b:5f:
74:ef:2a:cc:8b:1b:f8:df:f8:cf:6f:e1:0b:59:78:3a:12:f7:
fa:06:7b:8d:15:e3:67:c7:ec:be:c6:47:a6:bb:56:20:d3:16:
0d:8f:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:34 2025 by rpki-client