Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa
File: Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa (raw, json)
Hash identifier: QyWcllmsgsfma+CXqtcPhBcL7qxdhG/KE09cbC5TDFE=
Subject key identifier: 2D:CD:2C:75:B3:93:36:8E:0F:1B:D0:1C:44:C9:C7:0F:56:5D:8D:30
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01978CB861C801BA29500092501AC7B67CAC
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa
Signing time: Fri 20 Jun 2025 09:43:03 +0000
ROA not before: Fri 20 Jun 2025 09:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 5.159.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:b8:61:c8:01:ba:29:50:00:92:50:1a:c7:b6:7c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 20 09:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dcd2c75b393368e0f1bd01c44c9c70f565d8d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:8a:52:1c:ef:1a:fd:61:40:8e:04:7a:06:
29:a4:30:cf:ec:d1:6a:bd:72:a4:70:e5:b1:52:3d:
07:02:09:64:8a:e0:c1:6c:b7:4d:e4:8c:36:02:f4:
39:b1:87:59:1d:b4:ac:f3:e3:dc:62:68:fb:15:4d:
4d:ac:03:9f:10:ba:c5:3d:06:c0:3d:96:25:90:90:
00:71:ac:0d:34:56:82:6b:1e:f9:59:b6:45:81:ee:
75:2a:fe:89:58:62:1e:c3:72:af:95:ce:aa:c7:76:
19:c6:e2:67:7a:5b:24:99:4a:a9:8d:61:d5:e2:39:
f5:7e:f3:32:4e:e1:98:d0:6f:c2:80:b4:e2:ed:db:
62:72:0d:40:d8:8f:db:91:cb:04:0b:db:25:27:54:
23:27:d7:13:70:3f:1d:02:c2:6a:e6:26:0f:f5:44:
70:1a:b8:f7:e8:8b:2c:09:55:59:e8:7c:7e:ae:52:
40:85:f1:dd:1a:5b:09:d9:e4:5e:96:55:6f:d2:04:
7f:d3:c7:78:bd:1b:b4:da:c9:67:6a:1a:50:90:00:
76:71:c2:31:18:da:d4:93:7e:ae:fb:3a:44:a3:fd:
da:8d:01:64:ce:d3:58:b6:53:f5:0c:99:e2:62:87:
6b:de:56:14:83:54:e4:35:48:77:a9:64:f6:d9:96:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CD:2C:75:B3:93:36:8E:0F:1B:D0:1C:44:C9:C7:0F:56:5D:8D:30
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.54.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:50:71:ed:d2:3f:13:6e:00:4b:29:98:8f:ca:90:03:cf:
4c:29:fd:cb:a5:d7:d4:50:1e:93:a6:4a:84:76:2d:a0:72:05:
0a:bc:7f:f5:0c:ba:b9:d9:dc:25:4c:fe:75:8f:7e:bf:7d:00:
6e:5d:83:1d:ce:db:2b:42:d9:30:f0:b8:21:5f:dc:f9:02:9a:
48:e2:8c:96:08:0b:51:90:2d:16:52:a5:51:cc:ae:30:ba:3e:
b3:b8:7d:0b:ac:14:36:cb:3c:97:e2:56:01:a6:c1:25:72:c9:
51:c0:64:58:c6:49:90:00:d5:6d:fb:a1:d1:16:10:8d:a0:34:
5f:b3:2c:c8:34:10:e4:16:0c:30:9b:43:af:a2:44:9a:3d:cd:
54:ff:e2:68:0a:5e:14:98:e6:8f:d3:f4:6c:d2:05:fa:e2:27:
ab:14:d4:15:e2:e6:ca:10:99:39:d7:82:4f:a7:dd:eb:3a:fc:
d7:92:50:38:e3:02:4c:b3:ae:40:02:d2:75:32:ee:2c:e4:e7:
ce:c1:d6:b2:34:b3:14:81:f2:61:0f:81:54:10:df:b6:82:9f:
41:b5:8b:95:3f:b9:8b:1c:18:c1:83:55:c7:fb:db:26:a8:79:
55:36:72:68:d9:dd:32:4f:b6:f5:72:37:48:dc:8e:57:ce:40:
39:0b:3e:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeMuGHIAbopUACSUBrHtnysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjUwNjIwMDk0MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGNkMmM3NWIzOTMzNjhlMGYxYmQwMWM0NGM5YzcwZjU2NWQ4ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnaKUhzvGv1hQI4EegYppDDP7NFq
vXKkcOWxUj0HAglkiuDBbLdN5Iw2AvQ5sYdZHbSs8+PcYmj7FU1NrAOfELrFPQbA
PZYlkJAAcawNNFaCax75WbZFge51Kv6JWGIew3Kvlc6qx3YZxuJnelskmUqpjWHV
4jn1fvMyTuGY0G/CgLTi7dticg1A2I/bkcsEC9slJ1QjJ9cTcD8dAsJq5iYP9URw
Grj36IssCVVZ6Hx+rlJAhfHdGlsJ2eRellVv0gR/08d4vRu02slnahpQkAB2ccIx
GNrUk36u+zpEo/3ajQFkztNYtlP1DJniYodr3lYUg1TkNUh3qWT22Zb45QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3NLHWzkzaODxvQHETJxw9WXY0wMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvTGMwc2RiT1RObzRQRzlBY1JNbkhEMVpkalRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ82MA0G
CSqGSIb3DQEBCwUAA4IBAQADzFBx7dI/E24ASymYj8qQA89MKf3LpdfUUB6TpkqE
di2gcgUKvH/1DLq52dwlTP51j36/fQBuXYMdztsrQtkw8LghX9z5AppI4oyWCAtR
kC0WUqVRzK4wuj6zuH0LrBQ2yzyX4lYBpsElcslRwGRYxkmQANVt+6HRFhCNoDRf
syzINBDkFgwwm0OvokSaPc1U/+JoCl4UmOaP0/Rs0gX64ierFNQV4ubKEJk514JP
p93rOvzXklA44wJMs65AAtJ1Mu4s5OfOwdayNLMUgfJhD4FUEN+2gp9BtYuVP7mL
HBjBg1XH+9smqHlVNnJo2d0yT7b1cjdI3I5XzkA5Cz5s
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:37:22 2025 by rpki-client