Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/LS-HothqHRCTuBvSVWWtxn5KyKw.roa
File: LS-HothqHRCTuBvSVWWtxn5KyKw.roa (raw, json)
Hash identifier: zR/tQekUL1A1uk0QT0EdSKoyCKZ/CYUa+IvE8FHcE34=
Subject key identifier: 2D:2F:87:A2:D8:6A:1D:10:93:B8:1B:D2:55:65:AD:C6:7E:4A:C8:AC
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 0199C2D7FBA555630E8593C4F47EC938FA75
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/LS-HothqHRCTuBvSVWWtxn5KyKw.roa
Signing time: Wed 08 Oct 2025 08:02:38 +0000
ROA not before: Wed 08 Oct 2025 08:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58261
IP address blocks: 178.210.164.0/24 maxlen: 24
185.218.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d7:fb:a5:55:63:0e:85:93:c4:f4:7e:c9:38:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Oct 8 08:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d2f87a2d86a1d1093b81bd25565adc67e4ac8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:69:e1:4b:50:b1:84:64:78:84:16:b5:5c:
83:84:4e:87:18:1f:61:c2:03:66:a3:67:e7:cf:bb:
16:33:43:8f:96:a4:fd:37:be:1b:dc:4f:c1:e9:a3:
91:7e:02:60:2f:45:c8:d3:f2:e8:82:aa:cb:bf:7d:
77:d6:1b:bf:aa:22:a8:4f:74:1f:12:f1:ba:31:d7:
b9:e5:a7:21:8e:d1:cd:de:8a:1c:83:52:61:62:03:
a7:9e:40:67:48:1e:28:e0:5f:5f:51:2d:23:b5:83:
ed:cf:cb:55:33:b6:57:7c:9d:e1:98:b5:18:cc:e4:
8e:28:66:15:06:82:dc:88:39:20:99:62:f3:06:d9:
e3:d0:a6:68:92:bd:9f:51:ee:25:a9:5b:4d:90:ad:
cc:90:b8:94:29:ef:37:6d:4e:7b:71:bb:f3:b2:01:
1a:45:b4:89:d2:ce:9f:01:26:a8:d6:b9:ac:40:98:
84:0b:57:f4:de:bf:a2:0f:f9:1e:fe:79:c2:16:cf:
7b:40:a8:03:97:3e:5e:46:21:08:21:b8:ac:e6:43:
e1:0e:c5:b2:ba:53:db:4c:0c:8e:0f:bc:bb:ae:5e:
fa:92:8c:32:02:4c:70:7a:b1:ec:1e:a2:1b:f0:9d:
19:44:29:b0:54:96:4e:2e:a1:e6:b2:bf:a8:a8:ee:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:87:A2:D8:6A:1D:10:93:B8:1B:D2:55:65:AD:C6:7E:4A:C8:AC
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/LS-HothqHRCTuBvSVWWtxn5KyKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.164.0/24
185.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0d:90:5c:69:09:d0:a2:be:64:19:cb:59:c4:a7:ce:bc:9e:
22:61:be:c9:2b:b6:aa:e1:c3:e1:4f:ee:34:ca:02:9a:6f:15:
2c:26:a9:0f:0a:21:ed:62:b3:ac:41:a7:23:60:13:b8:f1:02:
52:ee:8b:79:c0:46:88:28:d8:59:f4:c3:92:f6:67:3f:ca:66:
a7:46:a5:33:26:af:2c:81:34:b2:fb:31:d7:12:d5:9c:e6:c5:
17:98:28:52:ca:c9:f0:ed:0c:2a:9e:8c:bf:2e:f0:12:80:f6:
c7:af:5c:d7:6c:e4:87:0d:77:0b:e5:3c:8d:8a:71:d8:1d:e3:
ea:46:d9:38:94:11:f7:f4:f4:b9:d8:1f:5f:20:da:9f:f9:47:
79:16:f4:30:e1:2a:5c:90:c1:5e:b7:e7:52:63:52:f3:04:88:
9e:d2:7b:1e:a7:9d:ea:58:56:b2:1e:20:69:87:ba:0a:06:66:
75:b3:96:f2:6f:1d:31:33:6f:25:b7:e6:46:e6:b9:7e:1a:fb:
b3:48:11:1a:da:a8:82:2e:3f:12:fd:a2:be:9d:e9:79:e2:87:
bd:ba:16:b9:6a:2e:ae:94:0b:20:f6:f6:7f:c1:c8:97:09:86:
fe:f9:2c:e1:e7:1a:54:29:6b:15:0b:b4:58:7c:58:83:e3:3c:
31:9c:54:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnC1/ulVWMOhZPE9H7JOPp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDI0ZjgyYzdjODJmYzU0OTk1MzJlNWE2NjUxYTc0ZjYy
OWM1YWEwHhcNMjUxMDA4MDgwMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJmODdhMmQ4NmExZDEwOTNiODFiZDI1NTY1YWRjNjdlNGFjOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiolp4UtQsYRkeIQWtVyDhE6HGB9h
wgNmo2fnz7sWM0OPlqT9N74b3E/B6aORfgJgL0XI0/LogqrLv3131hu/qiKoT3Qf
EvG6Mde55achjtHN3oocg1JhYgOnnkBnSB4o4F9fUS0jtYPtz8tVM7ZXfJ3hmLUY
zOSOKGYVBoLciDkgmWLzBtnj0KZokr2fUe4lqVtNkK3MkLiUKe83bU57cbvzsgEa
RbSJ0s6fASao1rmsQJiEC1f03r+iD/ke/nnCFs97QKgDlz5eRiEIIbis5kPhDsWy
ulPbTAyOD7y7rl76kowyAkxwerHsHqIb8J0ZRCmwVJZOLqHmsr+oqO7RhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC0vh6LYah0Qk7gb0lVlrcZ+SsisMB8GA1UdIwQY
MBaAFClCT4LHyC/FSZUy5aZlGnT2KcWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VKUGdzZklMOFZKbFRMbHBtVWFkUFlweGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yZjY2NTItNzQ2Ni00YTE2LTgzZGEt
YzFmMWEwZTQ5N2NjLzEvTFMtSG90aHFIUkNUdUJ2U1ZXV3R4bjVLeUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yZjY2NTItNzQ2Ni00YTE2LTgzZGEtYzFmMWEwZTQ5N2Nj
LzEvS1VKUGdzZklMOFZKbFRMbHBtVWFkUFlweGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstKkAwQA
udqNMA0GCSqGSIb3DQEBCwUAA4IBAQCJDZBcaQnQor5kGctZxKfOvJ4iYb7JK7aq
4cPhT+40ygKabxUsJqkPCiHtYrOsQacjYBO48QJS7ot5wEaIKNhZ9MOS9mc/yman
RqUzJq8sgTSy+zHXEtWc5sUXmChSysnw7Qwqnoy/LvASgPbHr1zXbOSHDXcL5TyN
inHYHePqRtk4lBH39PS52B9fINqf+Ud5FvQw4SpckMFet+dSY1LzBIie0nsep53q
WFayHiBph7oKBmZ1s5bybx0xM28lt+ZG5rl+GvuzSBEa2qiCLj8S/aK+nel54oe9
uha5ai6ulAsg9vZ/wciXCYb++Szh5xpUKWsVC7RYfFiD4zwxnFSw
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:11 2025 by rpki-client