Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Llp-KyUYGS0hdw_YLcPtvxsSnyk.roa
File: Llp-KyUYGS0hdw_YLcPtvxsSnyk.roa (raw, json)
Hash identifier: 1yNRwQfh3cIHbBu0EjNvuplNiS7ch6IUhFNK4JmUr6E=
Subject key identifier: 2E:5A:7E:2B:25:18:19:2D:21:77:0F:D8:2D:C3:ED:BF:1B:12:9F:29
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199706D6D95C8DC607429CF8E1341336C17
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Llp-KyUYGS0hdw_YLcPtvxsSnyk.roa
Signing time: Mon 22 Sep 2025 07:57:23 +0000
ROA not before: Mon 22 Sep 2025 07:57:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208915
IP address blocks: 194.231.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:6d:6d:95:c8:dc:60:74:29:cf:8e:13:41:33:6c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 22 07:57:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5a7e2b2518192d21770fd82dc3edbf1b129f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:38:b6:af:23:4e:2a:4b:80:a8:96:7c:3b:
61:ca:15:0e:a8:c1:a6:f2:40:d9:fb:85:92:b2:44:
e9:23:ce:ec:cb:a0:75:f6:72:3a:63:41:4d:d8:45:
3f:95:27:92:21:36:45:05:4d:a5:ae:0c:da:0a:fb:
f6:a5:bc:29:84:ed:ce:45:63:e6:2b:cd:bd:5f:52:
fb:5b:85:1d:91:fb:62:36:7a:95:59:d2:4d:d0:4b:
be:66:05:65:1c:88:f3:af:92:6f:64:ad:a2:39:eb:
d9:42:34:67:aa:59:da:23:b4:cd:87:13:ec:10:c1:
42:0f:0f:44:b8:82:f8:f8:aa:9e:d0:03:e8:9b:a5:
01:18:15:aa:95:df:3b:34:f3:75:43:00:7b:79:bd:
c1:b9:d5:e5:59:78:1d:ff:ba:a4:1f:98:b1:ca:04:
e9:88:6d:be:6c:b4:d0:f6:37:87:e1:05:43:29:00:
1b:77:21:00:60:3d:12:45:be:8e:78:28:80:a8:f5:
12:c7:c2:ec:83:e5:6e:19:3c:9d:8a:b4:d7:b2:26:
fe:c6:2d:b1:36:35:ca:61:41:13:cb:e4:6e:a0:cc:
ac:a2:23:55:58:ad:99:40:fd:5a:c0:9c:aa:7f:1f:
db:49:7e:76:5f:57:c9:c5:9b:07:84:db:d5:d5:ea:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:7E:2B:25:18:19:2D:21:77:0F:D8:2D:C3:ED:BF:1B:12:9F:29
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Llp-KyUYGS0hdw_YLcPtvxsSnyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3d:35:05:cc:90:41:d8:33:f9:78:5f:cd:4e:be:b0:8e:d2:
e5:84:77:d6:ac:e5:ac:82:6e:3a:29:82:0f:fb:23:5e:b6:91:
90:9a:83:b9:c3:6f:d4:90:4d:11:33:95:d5:33:a9:23:44:dc:
f3:f9:0d:d1:2b:40:c0:7f:b4:72:b4:48:7b:87:be:48:cd:be:
66:62:c9:62:eb:d4:03:8a:97:20:89:90:38:e6:a4:6e:22:7b:
35:ef:e8:94:92:de:cc:ba:ab:4e:70:4b:f8:6e:48:92:09:80:
e9:99:c6:88:79:b2:ee:4c:b2:47:53:07:fa:58:0b:09:d1:8e:
01:00:63:5c:69:ba:5d:2b:3f:6b:96:d6:47:77:7b:e4:1d:40:
e5:35:6b:54:99:b5:9d:9d:bc:c0:35:5c:e0:dc:8c:af:de:cf:
6d:df:bc:cd:75:cb:bc:dd:87:33:b9:1a:ce:e1:f2:86:6b:e0:
89:5a:ea:6a:40:30:9e:ca:77:b8:d0:c1:5c:28:eb:97:64:a5:
a4:4d:de:bc:a0:c4:a2:5d:57:5f:0a:07:50:27:be:e4:6a:b7:
6f:19:8b:c7:6d:19:b8:ae:e8:25:53:a3:66:a0:69:22:a6:76:
b7:7c:18:c6:6d:21:88:db:d7:9b:0e:fb:e4:ed:68:53:da:29:
4a:19:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:04 2025 by rpki-client