Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/LkQH73Bzans-M67Dt9wB0Aug-Rs.roa
File: LkQH73Bzans-M67Dt9wB0Aug-Rs.roa (raw, json)
Hash identifier: uDymSYsDDXNNxioYQBFNlhb25yiDu6U4/lOCsHx2B3Q=
Subject key identifier: 2E:44:07:EF:70:73:6A:7B:3E:33:AE:C3:B7:DC:01:D0:0B:A0:F9:1B
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197A785E8943869132164EF67B8B75D4150
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/LkQH73Bzans-M67Dt9wB0Aug-Rs.roa
Signing time: Wed 25 Jun 2025 14:37:40 +0000
ROA not before: Wed 25 Jun 2025 14:37:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
109.122.241.0/24 maxlen: 24
109.122.247.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.254.0/23 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:85:e8:94:38:69:13:21:64:ef:67:b8:b7:5d:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 25 14:37:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e4407ef70736a7b3e33aec3b7dc01d00ba0f91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:d2:78:23:01:3a:bc:cf:5f:23:07:bf:e1:
18:86:48:78:a4:13:5b:90:a4:70:6c:77:69:a4:65:
e9:65:94:81:d8:64:ae:08:c3:17:c6:9f:f2:75:56:
04:90:65:c3:a2:4f:9f:02:87:2e:06:d4:98:ca:22:
50:13:83:d4:9f:32:4f:77:5d:3d:3c:e3:fc:dc:0d:
2d:f8:09:e0:37:1b:a4:d1:93:9a:69:f5:95:ae:69:
b4:15:19:1d:58:00:c1:2c:37:ad:ac:3e:fa:69:f5:
82:b6:57:28:8a:d1:2c:30:31:06:d2:98:80:21:c2:
2a:9d:74:df:5c:0c:ca:6c:15:53:81:19:23:35:c6:
b6:8f:0d:ea:91:1d:77:21:05:1c:2c:37:09:94:1e:
c4:0d:20:ca:cc:46:29:8e:87:8d:de:b3:41:60:77:
fe:7e:e9:0c:d1:01:3a:19:c8:5b:8f:8b:2b:95:6c:
f0:23:b4:f4:4c:59:6b:62:87:45:54:8a:87:a2:ae:
a8:33:66:7a:72:e8:4b:4d:8b:24:c7:2d:15:bf:10:
1a:10:4a:2a:9e:43:16:79:ae:be:2e:e8:3e:79:40:
d5:6c:98:1c:cf:02:d8:22:d7:db:80:0d:29:ec:75:
e1:04:28:d7:73:39:f1:27:8b:60:03:bd:ac:25:9d:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:44:07:EF:70:73:6A:7B:3E:33:AE:C3:B7:DC:01:D0:0B:A0:F9:1B
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/LkQH73Bzans-M67Dt9wB0Aug-Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
109.122.241.0/24
109.122.247.0/24
109.122.249.0/24
109.122.254.0/23
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b4:53:26:cc:22:fb:11:a8:ad:25:f3:7c:67:c3:4d:79:63:
08:01:4d:75:60:5d:82:1d:3b:c2:0d:dc:9b:d2:5d:7e:3b:25:
66:d2:9b:6e:73:fc:61:97:26:46:59:65:2c:d6:0b:04:94:4d:
d4:1a:8d:0f:ef:5b:d6:a1:99:00:92:d2:50:1b:c4:f2:14:9e:
60:45:69:d2:da:87:e1:a6:db:41:63:89:b7:5d:b6:4c:f3:58:
bf:bb:ed:cc:17:49:76:b9:7f:dc:b9:cf:d2:3a:62:91:7d:1f:
46:28:27:05:db:e7:fc:73:4f:48:75:25:ce:c5:32:93:95:1b:
6f:b9:2f:6f:e2:b6:a7:8b:9a:f6:4d:de:8f:af:db:fd:72:66:
1c:97:d5:f1:16:2c:25:a2:2e:df:f0:ef:fe:a7:e5:ed:2c:bf:
60:2e:a8:f3:0e:a4:37:86:2f:d7:4b:f5:ee:40:b1:7f:4a:51:
4a:6d:42:6f:db:7e:50:a1:f7:a3:ef:e9:53:f1:d6:c8:32:d0:
54:b9:f2:57:f0:66:5d:a0:44:12:e4:6b:25:05:82:55:7c:f3:
e6:39:e0:99:99:96:70:b0:62:36:23:70:7a:aa:05:d6:57:de:
de:1c:17:03:0a:a6:b1:1b:7e:b6:06:58:9f:4d:fc:d9:d4:04:
35:63:04:95
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZenheiUOGkTIWTvZ7i3XUFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjUwNjI1MTQzNzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTQ0MDdlZjcwNzM2YTdiM2UzM2FlYzNiN2RjMDFkMDBiYTBmOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BfSeCMBOrzPXyMHv+EYhkh4pBNb
kKRwbHdppGXpZZSB2GSuCMMXxp/ydVYEkGXDok+fAocuBtSYyiJQE4PUnzJPd109
POP83A0t+AngNxuk0ZOaafWVrmm0FRkdWADBLDetrD76afWCtlcoitEsMDEG0piA
IcIqnXTfXAzKbBVTgRkjNca2jw3qkR13IQUcLDcJlB7EDSDKzEYpjoeN3rNBYHf+
fukM0QE6Gchbj4srlWzwI7T0TFlrYodFVIqHoq6oM2Z6cuhLTYskxy0VvxAaEEoq
nkMWea6+Lug+eUDVbJgczwLYItfbgA0p7HXhBCjXcznxJ4tgA72sJZ2mTwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFC5EB+9wc2p7PjOuw7fcAdALoPkbMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvTGtRSDczQnphbnMtTTY3RHQ5d0IwQXVnLVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWSzyAwQA
WS7ZAwQAbXrxAwQAbXr3AwQAbXr5AwQBbXr+AwQAvNRjMA0GCSqGSIb3DQEBCwUA
A4IBAQATtFMmzCL7EaitJfN8Z8NNeWMIAU11YF2CHTvCDdyb0l1+OyVm0ptuc/xh
lyZGWWUs1gsElE3UGo0P71vWoZkAktJQG8TyFJ5gRWnS2ofhpttBY4m3XbZM81i/
u+3MF0l2uX/cuc/SOmKRfR9GKCcF2+f8c09IdSXOxTKTlRtvuS9v4rani5r2Td6P
r9v9cmYcl9XxFiwloi7f8O/+p+XtLL9gLqjzDqQ3hi/XS/XuQLF/SlFKbUJv235Q
ofej7+lT8dbIMtBUufJX8GZdoEQS5GslBYJVfPPmOeCZmZZwsGI2I3B6qgXWV97e
HBcDCqaxG362BlifTfzZ1AQ1YwSV
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:14:19 2025 by rpki-client