Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/Ru_LP_twvYXVFkKuCpXxa_DASTU.roa
File: Ru_LP_twvYXVFkKuCpXxa_DASTU.roa (raw, json)
Hash identifier: TtTvcvdwb+ixxoHN5Y5PknKt4qH43MaPLrBOSoUuNtM=
Subject key identifier: 46:EF:CB:3F:FB:70:BD:85:D5:16:42:AE:0A:95:F1:6B:F0:C0:49:35
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 0199F125A1229D5E79F4A58CE7D33609F447
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/Ru_LP_twvYXVFkKuCpXxa_DASTU.roa
Signing time: Fri 17 Oct 2025 07:49:59 +0000
ROA not before: Fri 17 Oct 2025 07:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49798
IP address blocks: 91.219.132.0/22 maxlen: 22
91.221.4.0/24 maxlen: 24
91.221.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:25:a1:22:9d:5e:79:f4:a5:8c:e7:d3:36:09:f4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Oct 17 07:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46efcb3ffb70bd85d51642ae0a95f16bf0c04935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:64:b9:62:86:1d:33:e8:04:3f:c4:f3:cf:
60:24:ec:52:3f:76:2d:28:2e:70:e0:42:05:b3:46:
3f:57:a4:52:32:f8:c1:8c:eb:05:9a:39:92:b6:15:
cc:22:5a:5d:6c:69:82:e8:43:9b:9b:d2:d8:9f:41:
b2:ce:29:b9:fd:09:ae:e4:31:0c:f8:6e:6b:6c:ee:
b3:14:bd:8f:31:ae:45:94:91:59:fc:ab:6d:b3:d3:
5b:c4:08:53:28:bf:00:55:40:83:3a:d5:85:4b:29:
e0:f5:d5:64:ff:9c:c1:af:7c:e7:31:10:4c:8c:42:
b5:61:00:c6:54:2d:e3:1e:e6:d5:c7:8a:88:01:6e:
ae:f0:06:bc:73:a8:99:69:aa:c1:6b:b2:db:7e:55:
e2:8e:0c:50:da:1f:a0:3b:c9:0c:98:87:26:ea:6b:
79:04:92:d2:de:ad:50:05:f3:d1:a6:b4:26:d9:2a:
4b:6e:86:69:8a:78:41:2a:81:c4:55:cb:81:24:d4:
63:23:08:ba:72:6c:ec:03:b9:69:09:a6:6e:6f:a9:
f5:1a:d2:07:2f:0e:1f:1c:6f:82:9b:8c:dd:b1:77:
42:0b:69:ef:14:61:9d:f5:4d:aa:76:43:b6:2c:a4:
c6:3c:69:f5:49:46:6b:57:4d:02:2c:a0:67:8e:1d:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:CB:3F:FB:70:BD:85:D5:16:42:AE:0A:95:F1:6B:F0:C0:49:35
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/Ru_LP_twvYXVFkKuCpXxa_DASTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.132.0/22
91.221.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:c3:a1:5a:92:fa:a3:6f:0e:02:e4:91:a8:0f:b4:b3:cc:b1:
2d:c4:ef:1e:7f:75:ad:5c:f3:e2:f4:e4:51:4b:3b:15:10:0e:
b7:fc:df:1f:7f:96:bd:c9:1f:a7:08:86:eb:d4:c3:ea:b2:5c:
21:81:5d:ed:94:5e:26:0c:7c:cb:5e:60:24:62:97:96:5c:11:
c7:a7:81:27:50:b7:e4:37:5d:01:58:41:a8:19:72:a2:f4:11:
fb:17:e8:ab:a7:b7:03:56:08:69:36:7f:c7:42:9e:54:33:e0:
6b:2c:88:b1:f7:fb:84:54:fb:75:28:b5:3c:2c:34:12:58:0e:
e0:6d:b4:4d:59:16:d7:8d:37:09:4b:ad:13:b6:11:85:a7:2e:
5a:94:14:8a:af:54:c0:16:1d:d8:f3:f6:d1:bb:5b:a5:48:a3:
a9:94:52:e5:45:6b:82:78:ca:81:0a:fc:11:60:a4:55:48:bc:
34:63:90:9d:43:11:bc:1b:6d:c0:ea:b7:e4:73:14:e9:bf:e2:
ca:a1:33:13:97:7d:37:97:20:f8:68:53:d4:f4:b1:8d:51:ef:
a6:02:f3:a6:ee:ca:9d:ee:90:bf:91:e5:42:25:ed:9f:06:ad:
0a:ae:cb:24:e9:a0:de:4a:29:86:bd:3d:0c:97:5a:24:ba:5c:
8b:29:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:43 2025 by rpki-client