Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/LghvM2HkoxwkfnMrVuGOmbXEEys.roa
File: LghvM2HkoxwkfnMrVuGOmbXEEys.roa (raw, json)
Hash identifier: 1OZRBAIe8Cgw+ndoc+DfU+Xu6V9sRaXB9Lxh1AlcmzI=
Subject key identifier: 2E:08:6F:33:61:E4:A3:1C:24:7E:73:2B:56:E1:8E:99:B5:C4:13:2B
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019942AC0B90034D53806080C61BF6E6DCC3
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/LghvM2HkoxwkfnMrVuGOmbXEEys.roa
Signing time: Sat 13 Sep 2025 10:43:15 +0000
ROA not before: Sat 13 Sep 2025 10:43:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208589
IP address blocks: 2a0e:3247:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:ac:0b:90:03:4d:53:80:60:80:c6:1b:f6:e6:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Sep 13 10:43:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e086f3361e4a31c247e732b56e18e99b5c4132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:b3:2a:66:32:56:bd:0c:c1:ec:e2:84:bb:
64:1e:8b:ce:be:3f:5d:7e:99:34:03:98:f9:89:a6:
32:38:dd:7d:bf:6e:ce:39:fc:75:56:d0:bc:13:b6:
48:2f:97:99:ab:a9:b3:a7:d5:22:67:d5:25:60:9a:
26:4b:a0:e6:56:30:de:92:da:45:b8:bd:0f:11:3b:
b6:c7:1a:20:3e:d1:ac:ed:5c:ba:82:6c:73:bb:dc:
b4:2e:28:39:db:11:87:47:82:23:16:68:5e:2e:c1:
e6:87:2a:d2:15:9c:f9:6b:43:a8:ce:73:57:87:bd:
95:f1:f7:69:29:5e:1f:33:7a:42:d8:7a:d3:00:b0:
1e:4b:31:56:9b:f1:8e:fd:4e:63:f3:af:b4:ac:65:
fd:ba:a4:31:5f:09:48:66:60:db:c7:87:56:d6:42:
05:7b:3a:b0:30:4e:ed:71:22:6a:db:5e:a4:38:cf:
74:80:c1:aa:8c:7f:0a:2f:ee:92:bc:bb:09:a9:2c:
ec:6c:9f:17:07:f6:39:89:6d:9f:9f:42:14:86:70:
88:88:d4:52:37:4c:3f:60:1e:15:6d:e9:98:ab:f8:
a0:1f:b4:14:d5:42:03:32:59:dd:aa:98:30:91:f0:
1b:27:a5:45:4f:89:28:ed:41:09:f4:aa:bb:72:a1:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:6F:33:61:E4:A3:1C:24:7E:73:2B:56:E1:8E:99:B5:C4:13:2B
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/LghvM2HkoxwkfnMrVuGOmbXEEys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3247:8000::/48
Signature Algorithm: sha256WithRSAEncryption
3a:57:1a:c8:0d:75:40:79:9f:59:8a:66:44:7f:a8:dc:54:88:
17:73:00:92:08:75:b5:b7:02:9d:be:e7:91:d0:b2:ce:ee:cb:
19:4f:6a:ed:b4:d7:c5:7d:fa:ce:dd:36:c4:f6:db:15:ff:73:
38:fd:51:66:b1:af:20:0d:84:71:11:ae:79:14:50:0f:d3:4f:
88:46:32:b8:24:07:8e:0a:3a:47:3d:46:b1:bd:50:9b:0a:03:
72:ba:f7:d4:89:0d:ec:82:4f:72:a7:6b:08:66:21:db:0c:0d:
60:15:f2:49:91:49:db:17:78:d5:5a:ee:db:48:f9:4f:81:44:
db:dc:1a:01:f2:20:90:17:20:d4:d6:91:65:b4:1f:6c:e9:48:
95:fe:77:18:29:7c:9a:b9:5f:e1:48:59:ce:88:89:1d:8b:10:
2b:fa:d0:4c:e0:98:22:21:ac:b8:2a:f6:d6:99:b4:23:96:bb:
e8:40:f9:d9:49:56:62:73:3a:4e:d8:4b:63:7b:03:50:59:0e:
25:ff:4d:39:6f:99:fe:72:e9:4c:e0:c1:27:ec:14:03:48:f3:
38:58:2c:3d:ff:3f:91:61:4c:73:a8:9a:5d:db:53:0a:5e:60:
87:d0:e2:40:86:a5:86:90:ce:cd:4b:6d:a7:92:be:07:a5:fe:
a9:92:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:42 2025 by rpki-client