Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/lzA4-fHICE8lJshhrwrF-KF6gbE.roa
File: lzA4-fHICE8lJshhrwrF-KF6gbE.roa (raw, json)
Hash identifier: sxWalH+Sk7VB2aXGHSTahDJglhmxFSvXRWQz6+9TR6M=
Subject key identifier: 97:30:38:F9:F1:C8:08:4F:25:26:C8:61:AF:0A:C5:F8:A1:7A:81:B1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0198CCA5A548A0435252C8015BBCD1A30A3C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/lzA4-fHICE8lJshhrwrF-KF6gbE.roa
Signing time: Thu 21 Aug 2025 12:41:04 +0000
ROA not before: Thu 21 Aug 2025 12:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211687
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:a5:a5:48:a0:43:52:52:c8:01:5b:bc:d1:a3:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 12:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=973038f9f1c8084f2526c861af0ac5f8a17a81b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:92:f3:0d:5d:4d:29:be:61:7e:80:4f:cc:
bb:a1:d5:93:21:01:9e:a5:0b:c3:07:ba:55:bb:6e:
27:57:7b:90:9a:2d:86:2a:c3:35:0a:75:08:fd:e7:
7d:d2:70:b5:d6:b1:45:91:4b:b0:e5:32:2d:aa:09:
0e:11:f9:3c:ab:cf:8a:4a:bd:f0:da:9d:db:93:e5:
1a:f1:79:9c:34:fb:9a:e0:e6:0d:6a:38:c8:23:87:
12:7a:fe:9c:e1:de:47:c5:40:d1:3e:80:28:be:e9:
5e:87:4f:cd:36:4e:cb:25:f7:69:64:0e:b9:ba:70:
dc:3d:d5:fe:5b:eb:77:bc:e7:a1:c1:94:22:7e:ed:
df:01:99:a7:61:aa:cf:80:26:45:cf:6d:17:9e:51:
fa:73:bc:66:aa:ed:ee:bc:78:3c:10:1e:1d:31:3d:
fa:2d:4b:ce:73:04:af:00:a2:7b:55:71:63:79:1d:
44:55:f3:c7:11:96:5a:5f:92:20:f9:5a:e5:b8:11:
7b:62:b2:99:c4:38:9b:a5:47:32:1a:e1:5e:bf:51:
3f:26:b0:ff:77:c7:cc:e7:ad:f1:84:39:09:13:f7:
6c:d3:41:43:5a:c4:02:07:13:cb:ca:fa:f6:50:8d:
66:2e:a7:8a:14:4a:b7:ad:a8:b2:3c:08:e0:09:90:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:38:F9:F1:C8:08:4F:25:26:C8:61:AF:0A:C5:F8:A1:7A:81:B1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/lzA4-fHICE8lJshhrwrF-KF6gbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3f:71:af:e4:8a:65:4e:04:3d:83:4e:d5:d3:9e:a0:55:15:
d6:29:1b:1b:1d:52:8c:7c:9e:97:1b:eb:73:3b:f9:43:1a:77:
2d:73:cc:62:81:ba:27:c9:8e:02:8c:25:6d:c8:c4:5f:bc:b7:
fc:13:c7:65:54:fc:40:46:bc:f9:33:ac:b0:da:f2:04:22:db:
b7:25:13:7e:2d:47:e2:ef:7b:c4:8f:88:e2:6b:a4:14:01:fd:
0d:5b:4a:0a:f3:85:2b:3f:3a:14:a5:0a:1a:9e:28:ed:f1:d2:
c1:51:1b:eb:95:5c:59:56:47:13:65:3d:a7:8c:75:af:dc:ae:
04:8d:52:74:df:a0:bc:e6:c0:d7:9c:d2:fe:3a:cc:3d:c0:fd:
1f:52:7f:4e:af:fa:55:34:30:df:2a:eb:91:eb:0d:64:63:5e:
47:ba:e9:3f:ad:6e:dd:77:c3:67:a6:38:f8:fe:12:70:43:7c:
64:86:6e:5f:38:d0:fa:11:51:35:7a:9d:fb:36:7f:3a:d7:67:
f5:3d:19:41:ea:71:50:99:5c:fe:73:99:59:f9:18:04:c2:66:
00:09:c3:be:5b:03:4d:b8:7f:97:a1:12:e9:06:08:8c:87:69:
ad:4c:73:8f:97:df:56:f9:41:98:8d:a0:c8:4a:52:4f:0a:82:
ce:f8:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:17 2025 by rpki-client