Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/LMxG4l0eF9eJnp89vxztiAbfpWQ.roa
File: LMxG4l0eF9eJnp89vxztiAbfpWQ.roa (raw, json)
Hash identifier: pvqnV3wqhGmX8KDOv1jOvLMFpSWPvUzeNMWmPHFAIwc=
Subject key identifier: 2C:CC:46:E2:5D:1E:17:D7:89:9E:9F:3D:BF:1C:ED:88:06:DF:A5:64
Certificate issuer: /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Certificate serial: 0199E76C4F15B8BDC971F7D2CE8492C11B07
Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/LMxG4l0eF9eJnp89vxztiAbfpWQ.roa
Signing time: Wed 15 Oct 2025 10:30:58 +0000
ROA not before: Wed 15 Oct 2025 10:30:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213410
IP address blocks: 45.147.93.0/24 maxlen: 24
194.117.94.0/24 maxlen: 24
2a10:b140:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:6c:4f:15:b8:bd:c9:71:f7:d2:ce:84:92:c1:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Validity
Not Before: Oct 15 10:30:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ccc46e25d1e17d7899e9f3dbf1ced8806dfa564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:31:c1:7a:89:da:a1:82:0f:46:1f:c1:ce:
6a:e7:38:dd:99:3b:da:e8:14:e6:06:19:d2:d2:bf:
2d:02:05:31:94:48:17:58:e6:0e:07:42:07:cf:12:
b0:56:f9:a3:cb:39:0a:25:28:ac:bc:48:c6:17:6c:
11:32:1c:e8:9b:f5:6c:92:61:1e:69:94:19:79:60:
a2:3e:dc:c6:c0:c2:30:9c:15:a1:e9:b9:8e:ab:c6:
21:fc:92:00:95:03:8c:4b:5f:ec:06:91:f7:c3:c5:
45:68:86:e5:a9:0e:06:90:3b:fc:ea:1b:79:77:04:
46:9f:1d:10:05:76:10:7b:4a:4b:f6:c0:e2:c5:10:
9f:67:e6:7b:d4:57:39:92:f4:52:f4:ab:a6:f3:21:
35:75:6f:bb:14:0f:96:35:b1:1a:5d:4b:4f:b2:22:
e2:2d:b6:53:58:1c:c8:59:de:d2:c3:da:35:c3:c6:
2d:77:15:59:0c:92:d7:67:6f:76:fc:90:05:27:df:
df:8e:67:1c:fc:78:cb:0c:80:68:52:b9:a6:04:c5:
fc:07:86:99:f6:d3:39:85:1d:48:51:c5:2b:13:5a:
67:95:92:32:03:75:c1:58:06:0c:26:c5:0d:51:4f:
9c:dc:ea:f4:83:e7:54:e3:6d:ee:ae:ca:02:09:9c:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:46:E2:5D:1E:17:D7:89:9E:9F:3D:BF:1C:ED:88:06:DF:A5:64
X509v3 Authority Key Identifier:
keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/LMxG4l0eF9eJnp89vxztiAbfpWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.93.0/24
194.117.94.0/24
IPv6:
2a10:b140:1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d8:9e:52:88:4c:49:72:d7:30:e8:fd:cc:f2:bd:38:93:e6:
ae:bd:01:04:4e:81:08:3c:e1:82:0f:c4:d7:08:5c:6d:cc:4c:
34:7e:11:e7:8e:b1:9f:b4:05:c7:1e:ca:1f:9b:f4:43:b6:eb:
c6:64:a4:b2:c1:e6:79:fa:bb:01:4d:19:03:36:e5:fb:36:9b:
26:09:8d:17:dd:6b:42:e3:14:30:f8:e3:47:be:64:d6:32:80:
e6:1a:b0:61:e3:81:af:d6:69:49:91:2c:2e:fa:e9:50:95:f9:
0e:37:be:c0:58:70:d7:15:12:1a:a4:ed:16:00:64:76:d8:ca:
12:d3:99:11:9e:f7:05:1b:2d:14:10:22:b6:49:d1:2f:0e:3d:
d5:b4:47:e0:5d:0c:f7:71:f3:7b:ce:59:d7:ac:6f:48:ad:19:
04:f1:66:9c:dc:65:ba:de:f8:af:ff:1c:90:a9:b6:d6:16:f4:
c8:fc:59:43:39:b0:5e:9f:db:4b:bb:8a:de:9c:a1:f2:72:d7:
88:d4:f4:36:82:68:89:91:32:a0:f1:33:ee:99:c9:a6:b0:c5:
d7:ae:e2:3b:96:2a:2a:bb:05:66:dc:9a:48:d9:bd:97:12:2a:
53:75:69:7a:3c:c3:5e:4c:fb:5f:03:bf:f1:bb:3a:b7:7c:66:
e5:bb:9e:cd
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZnnbE8VuL3JcffSzoSSwRsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGQ4NWIyZTFlYzFmMjFkY2FjNWQ1ODc5ZTY5Y2IzNDJm
ZDE0NzkwHhcNMjUxMDE1MTAzMDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2NjNDZlMjVkMWUxN2Q3ODk5ZTlmM2RiZjFjZWQ4ODA2ZGZhNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5QxwXqJ2qGCD0Yfwc5q5zjdmTva
6BTmBhnS0r8tAgUxlEgXWOYOB0IHzxKwVvmjyzkKJSisvEjGF2wRMhzom/VskmEe
aZQZeWCiPtzGwMIwnBWh6bmOq8Yh/JIAlQOMS1/sBpH3w8VFaIblqQ4GkDv86ht5
dwRGnx0QBXYQe0pL9sDixRCfZ+Z71Fc5kvRS9Kum8yE1dW+7FA+WNbEaXUtPsiLi
LbZTWBzIWd7Sw9o1w8YtdxVZDJLXZ292/JAFJ9/fjmcc/HjLDIBoUrmmBMX8B4aZ
9tM5hR1IUcUrE1pnlZIyA3XBWAYMJsUNUU+c3Or0g+dU423ursoCCZxGHwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCzMRuJdHhfXiZ6fPb8c7YgG36VkMB8GA1UdIwQY
MBaAFFqNhbLh7B8h3KxdWHnmnLNC/RR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGIt
MmI2ZjI0YmRkMDYxLzEvTE14RzRsMGVGOWVKbnA4OXZ4enRpQWJmcFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGItMmI2ZjI0YmRkMDYx
LzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALZNdAwQA
wnVeMA8EAgACMAkDBwAqELFAAAEwDQYJKoZIhvcNAQELBQADggEBAH/YnlKITEly
1zDo/czyvTiT5q69AQROgQg84YIPxNcIXG3MTDR+EeeOsZ+0Bcceyh+b9EO268Zk
pLLB5nn6uwFNGQM25fs2myYJjRfda0LjFDD440e+ZNYygOYasGHjga/WaUmRLC76
6VCV+Q43vsBYcNcVEhqk7RYAZHbYyhLTmRGe9wUbLRQQIrZJ0S8OPdW0R+BdDPdx
83vOWdesb0itGQTxZpzcZbre+K//HJCpttYW9Mj8WUM5sF6f20u7it6cofJy14jU
9DaCaImRMqDxM+6Zyaawxdeu4juWKiq7BWbcmkjZvZcSKlN1aXo8w15M+18Dv/G7
Ord8ZuW7ns0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:26 2025 by rpki-client