Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/lqHZHTtSjRTsulRT9uODOQE8lxE.roa
File: lqHZHTtSjRTsulRT9uODOQE8lxE.roa (raw, json)
Hash identifier: ps3jNh8IrB0LkmVcReSQZ1oXuY/U8lzEpr6J8ijs+08=
Subject key identifier: 96:A1:D9:1D:3B:52:8D:14:EC:BA:54:53:F6:E3:83:39:01:3C:97:11
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 0198C7CA5ADF9439AB483DF2F27B21145EAC
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/lqHZHTtSjRTsulRT9uODOQE8lxE.roa
Signing time: Wed 20 Aug 2025 14:03:04 +0000
ROA not before: Wed 20 Aug 2025 14:03:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216235
IP address blocks: 46.183.166.0/23 maxlen: 24
46.183.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:ca:5a:df:94:39:ab:48:3d:f2:f2:7b:21:14:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Aug 20 14:03:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96a1d91d3b528d14ecba5453f6e38339013c9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:ee:15:43:a5:ea:1b:47:8d:8d:9f:89:1e:
2a:dc:ca:d1:50:ea:b7:7c:bb:1f:56:b3:88:b0:53:
f9:4b:25:58:cc:ea:32:bd:06:87:bd:97:8e:95:f8:
a3:77:18:49:fe:cf:9c:9d:60:7c:17:fc:c8:f4:1c:
88:50:b6:44:b3:24:ac:27:e5:63:c9:be:12:ea:a9:
5d:8e:a3:95:c2:d6:f7:dc:35:01:ee:22:bc:74:4e:
19:4b:75:cb:aa:59:8c:1c:7a:17:57:89:05:fc:f3:
57:20:f6:e5:bd:dc:b7:d4:b1:c3:f4:f3:66:2a:20:
2f:7a:b9:54:98:70:36:44:41:65:79:ca:52:0c:cb:
bd:38:3f:61:c9:89:8d:12:02:9f:06:06:85:2e:f5:
e2:eb:42:aa:d2:9d:07:6a:1a:cc:dd:16:c8:1e:82:
da:1d:dc:0d:82:ee:22:be:1a:09:d9:c7:97:e5:2d:
a5:be:43:5d:71:fa:0d:56:40:7b:b3:85:13:e4:ca:
ae:74:90:bc:13:5a:0b:51:62:82:7d:44:94:4c:18:
76:90:c5:ba:cd:9a:a1:37:17:27:68:ef:dc:b3:44:
d7:bc:a7:78:4d:f9:46:1c:45:41:8a:f3:64:44:ee:
81:e6:f9:82:04:b7:0f:bd:62:8e:bc:27:f2:5c:83:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:D9:1D:3B:52:8D:14:EC:BA:54:53:F6:E3:83:39:01:3C:97:11
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/lqHZHTtSjRTsulRT9uODOQE8lxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.166.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:4b:41:3c:da:09:d5:7e:40:e0:45:56:17:73:b2:e8:02:d4:
8d:42:ee:f3:b2:55:35:da:d3:da:2d:f7:70:1c:44:e8:a8:67:
02:d0:1e:f4:69:11:1b:f9:58:fa:b7:5c:ad:bb:b1:eb:26:de:
8a:5d:5b:16:6f:d8:13:cf:15:b9:d3:f4:55:05:2e:3f:4b:45:
2c:c7:79:24:e5:fe:b5:72:fc:23:08:8f:e4:d5:de:d0:fc:a2:
7c:80:8c:1b:69:7a:15:08:e6:67:92:ed:88:2c:8b:37:f0:50:
3c:89:29:85:c9:ee:05:04:fb:cf:99:f3:f4:15:77:8f:5f:f9:
2b:bf:b3:0c:5c:88:74:0c:43:2e:c2:65:57:2c:74:5b:ca:62:
29:11:42:e8:2d:71:78:e3:d3:e3:9b:68:86:6d:f1:f7:6d:ef:
8d:94:8f:00:fb:6c:8a:d7:42:f2:d6:fd:a1:c6:7e:de:d9:8f:
48:36:df:7e:5e:c5:fa:75:b1:02:56:39:e1:ce:45:c9:73:fa:
03:36:8b:ae:cb:2a:6a:43:a3:86:d5:63:a6:bd:8b:e3:18:73:
15:02:fc:10:11:5f:39:93:d8:18:2f:6b:f1:78:19:74:29:e0:
ef:9c:29:ed:e1:4f:22:1f:bc:f0:b3:12:93:9a:3d:19:52:4c:
21:93:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:52 2025 by rpki-client