Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LoviSVbZ-8MB9K1M4mxEpOnR-pY.roa
File: LoviSVbZ-8MB9K1M4mxEpOnR-pY.roa (raw, json)
Hash identifier: dviOAmP2uVcZtYl6KmL1MjXJvLrB7PMep/FjDc0M9bw=
Subject key identifier: 2E:8B:E2:49:56:D9:FB:C3:01:F4:AD:4C:E2:6C:44:A4:E9:D1:FA:96
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0199710A8E86A3858687DDD567F9F3C51983
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LoviSVbZ-8MB9K1M4mxEpOnR-pY.roa
Signing time: Mon 22 Sep 2025 10:49:01 +0000
ROA not before: Mon 22 Sep 2025 10:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 85.208.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:0a:8e:86:a3:85:86:87:dd:d5:67:f9:f3:c5:19:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 22 10:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8be24956d9fbc301f4ad4ce26c44a4e9d1fa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:75:da:7b:61:71:cc:c2:0e:48:65:07:80:
4b:b0:2f:4f:26:86:78:26:d0:f2:4f:a5:f5:5f:b3:
ed:e3:3e:7f:6d:cc:d7:97:89:af:9f:13:40:1d:a4:
45:ae:4b:07:90:ab:62:55:5b:1d:fd:dc:98:1b:a6:
ea:d6:bb:70:fe:0a:9b:eb:fc:ab:16:e4:9c:9d:1d:
0e:15:1b:2f:8f:23:a6:4b:f9:6b:14:62:c4:80:83:
a3:2e:9e:80:e6:b6:f8:8b:54:f8:41:ac:96:34:aa:
81:b1:b7:ea:25:39:fa:16:9e:ac:0e:35:97:bf:1e:
c9:3b:df:31:66:8b:38:a7:94:02:83:03:6f:47:69:
29:e2:0d:3d:a5:e6:f5:10:8c:90:9c:fb:ca:12:2e:
81:d6:4e:8f:48:dd:bf:cf:77:d1:26:47:b8:67:db:
a8:d8:23:ef:00:1d:f8:31:94:98:bf:c6:f4:b0:cb:
51:44:96:21:45:dd:71:3b:f9:6a:e6:c6:6a:4c:de:
2d:5a:88:a2:fa:09:32:da:bf:c6:f3:47:6c:33:e5:
43:5f:13:35:22:37:d9:69:53:ed:39:93:06:1c:a8:
6f:28:98:16:c2:21:58:4e:b9:74:00:4a:8e:e7:95:
de:aa:20:e1:85:31:fd:06:ef:78:3c:7a:7a:e1:5d:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:E2:49:56:D9:FB:C3:01:F4:AD:4C:E2:6C:44:A4:E9:D1:FA:96
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LoviSVbZ-8MB9K1M4mxEpOnR-pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c7:9a:53:12:d6:bf:bb:c9:6b:91:3e:d5:e0:85:d3:1f:f0:
5f:97:9a:ec:d2:61:87:fb:66:69:f6:48:10:4a:74:1a:57:06:
2e:fa:22:93:2a:81:eb:82:e2:c3:5a:ba:18:87:6d:56:4d:73:
c0:1f:39:fe:99:e9:c4:d0:81:21:4e:06:1d:bd:15:f5:97:9b:
c9:37:ee:97:43:ee:be:9d:ac:94:67:39:3c:d7:87:36:40:45:
31:f6:de:fe:f9:9d:14:b2:c2:bf:47:43:b0:fe:bb:4b:87:6c:
c9:95:3e:fb:3a:6a:c2:18:df:56:5b:7d:81:7a:7e:b5:c7:a1:
1c:2e:97:61:ab:aa:1c:00:4b:1c:ff:91:07:d7:aa:09:14:b6:
61:d0:d7:c0:c8:98:63:98:0e:5a:04:89:94:fe:5d:ed:78:48:
ac:5f:46:b8:50:6f:cc:60:a5:67:51:aa:f9:2b:b4:4c:a3:20:
7d:7b:6e:45:3b:26:be:5b:d7:21:e9:dc:81:fd:02:00:ef:69:
a6:47:cb:7b:fe:e5:5f:39:14:c9:93:ac:e5:74:a4:31:63:b1:
10:5c:20:84:cd:f6:f2:b2:ea:45:0d:71:37:a7:eb:a7:cc:55:
25:e2:f6:5f:16:93:2a:c1:14:93:c7:4d:f2:2d:04:88:e1:29:
15:8e:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:03 2025 by rpki-client