Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/LHhc_a5ROGSUtw6wcT-sPhDhr1M.roa
File: LHhc_a5ROGSUtw6wcT-sPhDhr1M.roa (raw, json)
Hash identifier: p/vM2J4TZw167L9VNt16GhD88WXBue8q+Ndc+jHHLFs=
Subject key identifier: 2C:78:5C:FD:AE:51:38:64:94:B7:0E:B0:71:3F:AC:3E:10:E1:AF:53
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0198CE646B736D415E854A51C27F8D293B8C
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/LHhc_a5ROGSUtw6wcT-sPhDhr1M.roa
Signing time: Thu 21 Aug 2025 20:49:04 +0000
ROA not before: Thu 21 Aug 2025 20:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 213.182.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:64:6b:73:6d:41:5e:85:4a:51:c2:7f:8d:29:3b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 21 20:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c785cfdae51386494b70eb0713fac3e10e1af53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:2e:6e:0c:af:6a:f3:0e:cb:03:1c:85:c7:
64:c9:e0:8d:61:67:05:06:91:2c:7a:35:8c:91:e4:
90:b4:31:72:dd:88:05:f9:7f:90:92:3e:39:1c:8b:
da:7e:5d:6d:e6:37:ec:2f:29:00:c1:62:4c:5d:48:
80:19:8f:17:72:15:85:79:2f:49:76:de:ae:df:31:
b9:5b:c9:ea:38:ee:5a:cc:cf:b4:53:48:88:aa:92:
3f:a1:d4:94:45:ec:a9:bc:1e:a4:6e:07:1a:c9:90:
22:be:0a:86:9f:1f:1e:48:43:f5:14:f7:78:f6:fa:
06:a7:e7:40:1e:34:7f:90:25:e7:05:00:ad:7d:d0:
a9:61:e0:e2:49:34:f2:99:70:26:24:76:b9:0f:33:
91:c8:cb:af:a7:b4:bd:f9:43:ae:15:01:92:fc:31:
8a:61:45:d4:3e:bb:89:09:2e:d3:81:30:b9:e9:9f:
57:a7:95:b7:42:d5:b6:49:12:08:a9:ec:f7:05:62:
01:10:dc:ea:7a:26:3e:cd:96:c5:10:5c:80:a8:f3:
0a:13:ba:f6:cb:6d:e2:ae:d2:a3:2a:e2:db:c1:e3:
fb:51:21:0b:67:49:c6:54:bf:c7:7a:87:fe:ef:df:
44:60:ef:94:a1:7b:5b:92:d0:f0:ef:b1:91:a0:17:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:5C:FD:AE:51:38:64:94:B7:0E:B0:71:3F:AC:3E:10:E1:AF:53
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/LHhc_a5ROGSUtw6wcT-sPhDhr1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2c:5c:48:14:ad:d1:74:fb:ef:b7:ee:76:65:d2:05:97:aa:
d8:38:91:f3:96:ad:b9:f1:32:c3:04:01:7f:df:b3:4d:d0:e9:
e6:af:81:11:1f:1c:d8:59:a8:56:ac:5e:f8:79:e8:08:a7:97:
9f:93:a3:d5:97:a0:21:d4:22:33:f2:dc:47:39:e6:5d:ca:bf:
da:20:4c:d9:0d:d5:39:0d:91:13:ef:99:a4:44:24:f0:59:8b:
c9:34:7e:a6:f6:58:49:e5:0f:23:c5:29:ff:19:da:ae:a5:70:
4a:d6:41:d7:05:cf:0b:cf:60:bb:1f:3a:f8:b8:b6:ec:64:89:
86:a8:bc:36:3c:05:0d:c1:6b:28:17:94:cb:f9:ec:15:1f:df:
e5:28:7c:65:00:bf:97:b8:f1:6e:94:28:2b:05:a9:9f:d4:96:
0d:cb:9b:f6:52:b6:d1:51:99:3b:57:2d:c7:8c:01:30:cb:94:
0b:ac:96:f3:62:47:a1:b7:79:13:47:5e:00:18:f9:d0:1d:bb:
24:d0:36:4a:04:d7:d3:d0:5b:ec:da:f3:a8:ff:16:96:1a:9d:
db:57:b5:aa:cd:84:7f:3b:61:3f:bf:46:47:1c:db:24:d3:3c:
b9:f9:04:fd:0a:a0:f1:85:96:3a:17:b3:f9:63:6a:9e:73:7a:
5d:25:19:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjOZGtzbUFehUpRwn+NKTuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwODIxMjA0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzc4NWNmZGFlNTEzODY0OTRiNzBlYjA3MTNmYWMzZTEwZTFhZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZoubgyvavMOywMchcdkyeCNYWcF
BpEsejWMkeSQtDFy3YgF+X+Qkj45HIvafl1t5jfsLykAwWJMXUiAGY8XchWFeS9J
dt6u3zG5W8nqOO5azM+0U0iIqpI/odSUReypvB6kbgcayZAivgqGnx8eSEP1FPd4
9voGp+dAHjR/kCXnBQCtfdCpYeDiSTTymXAmJHa5DzORyMuvp7S9+UOuFQGS/DGK
YUXUPruJCS7TgTC56Z9Xp5W3QtW2SRIIqez3BWIBENzqeiY+zZbFEFyAqPMKE7r2
y23irtKjKuLbweP7USELZ0nGVL/Heof+799EYO+UoXtbktDw77GRoBerTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCx4XP2uUThklLcOsHE/rD4Q4a9TMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvTEhoY19hNVJPR1NVdHc2d2NULXNQaERocjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bbUMA0G
CSqGSIb3DQEBCwUAA4IBAQBOLFxIFK3RdPvvt+52ZdIFl6rYOJHzlq258TLDBAF/
37NN0Onmr4ERHxzYWahWrF74eegIp5efk6PVl6Ah1CIz8txHOeZdyr/aIEzZDdU5
DZET75mkRCTwWYvJNH6m9lhJ5Q8jxSn/GdqupXBK1kHXBc8Lz2C7Hzr4uLbsZImG
qLw2PAUNwWsoF5TL+ewVH9/lKHxlAL+XuPFulCgrBamf1JYNy5v2UrbRUZk7Vy3H
jAEwy5QLrJbzYkeht3kTR14AGPnQHbsk0DZKBNfT0Fvs2vOo/xaWGp3bV7WqzYR/
O2E/v0ZHHNsk0zy5+QT9CqDxhZY6F7P5Y2qec3pdJRlP
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:07 2025 by rpki-client