Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/LnojP8VZuP5sxRZNy8ZImHWuCkE.roa
File: LnojP8VZuP5sxRZNy8ZImHWuCkE.roa (raw, json)
Hash identifier: QEFAmHDz1wMAzZ2EtfKdNmGtBfZo2twIT8EusXqnCMo=
Subject key identifier: 2E:7A:23:3F:C5:59:B8:FE:6C:C5:16:4D:CB:C6:48:98:75:AE:0A:41
Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial: 01996914061BF421995B34BED7DCF2AAA3A3
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/LnojP8VZuP5sxRZNy8ZImHWuCkE.roa
Signing time: Sat 20 Sep 2025 21:42:23 +0000
ROA not before: Sat 20 Sep 2025 21:42:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206236
IP address blocks: 45.14.232.0/23 maxlen: 23
195.245.66.0/24 maxlen: 24
2a0e:1580::/29 maxlen: 29
2a10:1a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:69:14:06:1b:f4:21:99:5b:34:be:d7:dc:f2:aa:a3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Validity
Not Before: Sep 20 21:42:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7a233fc559b8fe6cc5164dcbc6489875ae0a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:49:d5:09:97:13:c1:25:f2:69:e3:ea:dd:
b3:c1:23:8c:8a:f6:1d:f8:a3:74:20:d0:02:59:da:
c5:7a:c6:9d:cd:bd:01:04:3a:e3:b7:3c:6b:b1:33:
d0:e6:56:57:9b:06:d9:f3:6a:ed:d4:ac:ff:c5:2f:
ed:16:45:34:9e:e7:2a:b7:fe:c1:45:00:46:34:ff:
0c:fc:a1:70:23:9d:8b:9d:2d:10:b1:3d:3d:b6:de:
69:51:69:d7:27:0b:1d:e7:ab:07:ea:88:9f:54:21:
01:dd:ea:3c:83:2e:5b:e7:cf:b9:a4:5c:11:ba:16:
6c:9f:0b:8d:da:0d:9a:0c:fb:c3:cf:52:2f:13:c6:
17:8d:cf:09:37:31:ee:72:01:87:7a:66:ec:80:06:
5f:7c:12:6f:04:e7:9c:77:bd:26:6d:ac:3b:3c:80:
f8:66:43:82:53:8a:3f:5d:e2:1c:02:70:a2:52:b6:
b7:c1:a4:ab:35:78:3b:d6:c7:21:d0:f6:02:e1:65:
bd:58:ea:62:31:f8:11:31:0f:ae:8b:1f:e3:25:f3:
98:7c:71:5d:b0:3a:4a:f8:34:80:2f:13:a7:51:17:
b0:e6:96:be:d9:af:65:99:53:9a:5b:45:06:fc:0d:
ee:25:c1:cf:eb:8e:21:dd:5f:a6:60:f7:c5:57:d3:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:23:3F:C5:59:B8:FE:6C:C5:16:4D:CB:C6:48:98:75:AE:0A:41
X509v3 Authority Key Identifier:
keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/LnojP8VZuP5sxRZNy8ZImHWuCkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.232.0/23
195.245.66.0/24
IPv6:
2a0e:1580::/29
2a10:1a40::/29
Signature Algorithm: sha256WithRSAEncryption
b5:ff:28:9e:32:05:93:9f:13:91:48:46:de:e8:b9:11:38:c6:
28:9d:dc:e1:6d:6c:0f:7a:68:50:9a:a4:5d:d9:c5:b8:5f:59:
06:c4:71:e0:9f:2f:c5:7b:64:e6:69:85:44:62:4d:0d:ef:32:
a1:41:a4:45:91:88:78:05:98:67:9e:8d:2f:a4:bb:f0:dc:ea:
25:9e:a6:5a:99:08:4a:77:2f:08:15:7c:35:44:b1:2c:e9:43:
97:f0:c8:f8:b2:45:cf:5b:28:e7:fd:f0:16:5c:ac:19:0e:38:
36:df:5d:96:ad:58:c3:b7:2f:f6:2d:8b:96:2d:21:1e:d3:7b:
ad:aa:b6:af:ce:d2:45:75:ca:ee:cc:ef:7a:c7:d6:93:cd:f0:
87:90:a0:fd:3b:69:b8:45:70:74:29:a3:c5:51:ef:39:26:93:
29:d0:c8:95:ad:32:95:8c:cd:95:68:7c:90:ce:dd:69:a7:84:
56:18:36:01:bf:6e:0d:e5:03:d4:ee:33:d7:a1:e1:e2:5b:cb:
b1:34:dc:ac:8d:05:79:4c:86:f7:96:c4:89:bb:d9:81:4a:28:
2c:e4:94:16:d0:cf:0f:f8:e3:84:61:0f:19:9f:af:ae:ff:f8:
98:43:93:c7:40:b4:91:b8:7a:a1:a6:b9:8a:5d:55:56:4e:25:
6c:1a:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:27 2025 by rpki-client