Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/LSwSqqfM6NE3bwsbhZVRM0BePVo.roa
File: LSwSqqfM6NE3bwsbhZVRM0BePVo.roa (raw, json)
Hash identifier: QYxJg9ZEhl4RnY/Twn9fuIOL/2nBIyTko4sjPdP5IhA=
Subject key identifier: 2D:2C:12:AA:A7:CC:E8:D1:37:6F:0B:1B:85:95:51:33:40:5E:3D:5A
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0199D88E24BA8BABA4A58C4D2C5AE2894B00
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/LSwSqqfM6NE3bwsbhZVRM0BePVo.roa
Signing time: Sun 12 Oct 2025 13:13:38 +0000
ROA not before: Sun 12 Oct 2025 13:13:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207963
IP address blocks: 91.238.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d8:8e:24:ba:8b:ab:a4:a5:8c:4d:2c:5a:e2:89:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Oct 12 13:13:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d2c12aaa7cce8d1376f0b1b85955133405e3d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:19:f2:13:62:4f:85:9c:6a:74:62:b1:84:
8e:6a:0d:20:e2:e1:e2:00:0a:a7:39:63:6e:b0:ad:
54:0b:5c:d6:5d:49:06:69:af:64:47:fb:17:3c:e1:
16:69:2b:c6:0b:a6:06:45:21:ae:43:7e:11:8e:3b:
c4:d1:ad:98:9e:bb:eb:15:d4:25:29:2d:c4:af:b0:
28:ab:5f:aa:ba:52:66:0f:f3:f0:d0:31:16:8f:1b:
c3:3e:b7:10:c5:1f:4d:dd:31:23:1b:97:5a:52:f9:
e6:61:23:9b:d2:d6:9c:2b:08:3f:59:a5:be:fe:17:
e7:1f:76:0e:11:72:75:b2:c6:c9:40:de:dc:0c:6b:
3b:8c:de:f6:b2:db:fd:98:90:3b:ea:09:08:1a:0a:
08:e0:14:bc:36:ff:40:fb:ab:a9:ab:b6:69:98:36:
9c:9d:7e:c8:06:77:19:5e:5c:40:be:88:f1:a3:2f:
54:fb:0b:b1:0c:23:10:6d:36:10:6a:8c:d0:a3:d3:
af:db:97:6b:e9:28:a4:96:7e:81:0d:11:91:ae:93:
74:6d:78:c2:91:8f:de:2a:a1:ed:e0:42:af:e3:25:
05:a7:1d:17:03:33:71:8a:24:9a:f8:74:90:4b:3b:
ca:e5:04:c2:ec:98:f0:96:72:06:f1:da:8d:5d:60:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:12:AA:A7:CC:E8:D1:37:6F:0B:1B:85:95:51:33:40:5E:3D:5A
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/LSwSqqfM6NE3bwsbhZVRM0BePVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:86:17:e4:5c:d3:00:91:f4:02:18:bb:76:82:31:84:d3:30:
74:a0:eb:f9:19:63:e8:66:45:79:5b:25:be:5a:04:64:2c:13:
82:c0:57:19:97:fa:10:8f:77:68:e0:43:45:fd:78:35:c1:f3:
42:e9:23:40:83:a6:99:d9:cc:65:62:1d:78:27:f8:f1:bb:2b:
54:ca:ab:b4:7d:39:7c:3b:2b:0b:5f:b1:a4:5e:1b:c1:a3:5f:
11:73:cf:ba:78:15:4a:23:10:7e:e3:be:d9:76:3c:e7:0c:29:
44:6e:53:c0:c3:0e:e9:40:a8:0e:d1:5c:8c:82:a5:09:b9:dd:
ce:5a:b5:71:5a:67:17:35:86:67:a8:d0:fe:e1:bc:22:52:05:
57:92:5e:4e:2b:e8:4e:a0:a3:55:50:5c:51:17:aa:5e:a7:23:
18:25:11:8c:1a:80:82:43:26:0f:01:97:a0:ca:2b:31:d8:74:
eb:b8:4c:ef:1e:76:09:04:28:91:9f:aa:4b:8c:7c:57:4b:a7:
91:c7:c2:19:89:02:7e:b4:cb:b8:63:dd:df:82:6d:72:88:29:
d1:b0:f0:e1:36:74:fe:08:75:78:b9:0d:4b:62:1a:0e:7a:d4:
7e:b7:77:34:8b:37:ae:a9:4b:a7:58:c5:47:f0:05:69:48:47:
1e:b4:d0:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnYjiS6i6ukpYxNLFriiUsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjUxMDEyMTMxMzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJjMTJhYWE3Y2NlOGQxMzc2ZjBiMWI4NTk1NTEzMzQwNWUzZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65YZ8hNiT4WcanRisYSOag0g4uHi
AAqnOWNusK1UC1zWXUkGaa9kR/sXPOEWaSvGC6YGRSGuQ34RjjvE0a2YnrvrFdQl
KS3Er7Aoq1+qulJmD/Pw0DEWjxvDPrcQxR9N3TEjG5daUvnmYSOb0tacKwg/WaW+
/hfnH3YOEXJ1ssbJQN7cDGs7jN72stv9mJA76gkIGgoI4BS8Nv9A+6upq7ZpmDac
nX7IBncZXlxAvojxoy9U+wuxDCMQbTYQaozQo9Ov25dr6Sikln6BDRGRrpN0bXjC
kY/eKqHt4EKv4yUFpx0XAzNxiiSa+HSQSzvK5QTC7JjwlnIG8dqNXWCZtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0sEqqnzOjRN28LG4WVUTNAXj1aMB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvTFN3U3FxZk02TkUzYndzYmhaVlJNMEJlUFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+61MA0G
CSqGSIb3DQEBCwUAA4IBAQBKhhfkXNMAkfQCGLt2gjGE0zB0oOv5GWPoZkV5WyW+
WgRkLBOCwFcZl/oQj3do4ENF/Xg1wfNC6SNAg6aZ2cxlYh14J/jxuytUyqu0fTl8
OysLX7GkXhvBo18Rc8+6eBVKIxB+477ZdjznDClEblPAww7pQKgO0VyMgqUJud3O
WrVxWmcXNYZnqND+4bwiUgVXkl5OK+hOoKNVUFxRF6pepyMYJRGMGoCCQyYPAZeg
yisx2HTruEzvHnYJBCiRn6pLjHxXS6eRx8IZiQJ+tMu4Y93fgm1yiCnRsPDhNnT+
CHV4uQ1LYhoOetR+t3c0izeuqUunWMVH8AVpSEcetNAo
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:11 2025 by rpki-client