Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5-Lpz_S2s8dYJUzVLM1NVn8okfQ.roa
File: 5-Lpz_S2s8dYJUzVLM1NVn8okfQ.roa (raw, json)
Hash identifier: jvQMp9S2I3rI3kvAVWwccJEIi3Q2zU5IBCvoRdMfYGU=
Subject key identifier: E7:E2:E9:CF:F4:B6:B3:C7:58:25:4C:D5:2C:CD:4D:56:7F:28:91:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01967CE16D741470C4486B6315D1A12BCD34
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5-Lpz_S2s8dYJUzVLM1NVn8okfQ.roa
Signing time: Mon 28 Apr 2025 14:51:10 +0000
ROA not before: Mon 28 Apr 2025 14:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.94.47.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e1:6d:74:14:70:c4:48:6b:63:15:d1:a1:2b:cd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 28 14:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7e2e9cff4b6b3c758254cd52ccd4d567f2891f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:18:a9:19:0c:3d:5e:20:59:c4:bd:55:8d:
6b:56:79:08:9d:79:8e:c7:25:18:3a:b4:1e:73:73:
93:ea:87:5c:81:80:9d:32:93:26:98:32:42:cf:2f:
34:6b:6b:78:cf:be:32:b1:0e:04:fc:b6:f8:01:1d:
28:c7:93:97:53:f5:f8:71:16:2c:7a:0a:12:91:c2:
a7:89:f1:63:e1:5f:f3:7b:94:07:83:ec:f7:ff:28:
01:83:d3:db:ca:a4:82:7e:81:c2:20:7a:35:49:8f:
11:bd:f2:3f:ad:c0:66:e1:f9:75:e9:68:6d:e3:0e:
db:71:50:f1:3e:7d:94:9d:35:5b:c0:63:80:d2:47:
3d:b2:c2:f9:a0:05:38:5e:6e:ed:39:1c:28:1e:0d:
8c:57:68:70:25:dd:67:74:f1:6e:9d:e6:85:5d:39:
55:32:98:78:d0:7c:39:ab:23:92:40:58:8d:a0:69:
18:50:b8:b8:4a:8d:2a:c0:d0:6e:ca:fb:f8:94:58:
ba:1d:8a:50:77:de:73:c3:ba:67:e9:dd:6c:bd:87:
c4:92:63:01:11:a1:0b:a6:1f:05:76:ef:a7:66:30:
59:cd:33:cc:77:01:84:17:0c:f2:d6:e3:61:61:f3:
e0:bc:7a:7f:b0:d6:5c:42:4c:77:ff:00:1b:b8:0b:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:E9:CF:F4:B6:B3:C7:58:25:4C:D5:2C:CD:4D:56:7F:28:91:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5-Lpz_S2s8dYJUzVLM1NVn8okfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.47.0/24
195.66.26.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
4a:33:af:77:93:ce:67:f1:d3:d8:27:24:ff:61:32:cc:94:40:
f4:b3:08:b3:9f:3d:8d:ed:18:3d:06:b2:4f:17:2b:de:3b:24:
c3:a6:38:f4:11:54:a7:14:77:34:d1:bc:3a:a7:5e:33:7b:b3:
3f:5d:99:ee:13:4f:c2:f6:fe:f5:0d:6e:3a:81:17:72:af:15:
5a:2d:7c:1c:be:59:90:97:80:ca:11:42:7e:bb:b1:05:d8:79:
61:cb:f4:ae:f3:9d:7b:1d:6f:d8:1b:be:e2:f8:73:ca:da:f6:
d9:e0:5b:39:62:d8:4f:2b:ef:ea:0e:b9:e8:39:37:8f:09:2a:
21:99:b3:6c:42:04:fc:85:22:e7:fd:05:ac:0f:cf:90:ff:f3:
f2:8c:d3:63:b7:46:89:c9:e0:07:68:c0:89:83:2a:85:dc:31:
62:1e:6b:34:ae:0a:7a:b8:6c:44:c5:44:03:62:6c:79:86:a1:
a6:dd:a5:b9:c2:6f:56:ed:93:d2:dd:37:bc:42:0b:8b:d8:e1:
ee:c6:e4:a3:5b:98:3a:0d:71:03:8f:ea:80:89:f9:d2:58:3e:
41:17:e5:fd:7b:77:84:97:d9:9f:be:96:13:c4:c7:ee:9e:fd:
a7:5d:e7:24:2d:0f:52:00:7a:19:8e:36:14:0c:90:0a:2a:18:
2e:5e:48:b3
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZZ84W10FHDESGtjFdGhK800MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDI4MTQ1MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2UyZTljZmY0YjZiM2M3NTgyNTRjZDUyY2NkNGQ1NjdmMjg5MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUwYqRkMPV4gWcS9VY1rVnkInXmO
xyUYOrQec3OT6odcgYCdMpMmmDJCzy80a2t4z74ysQ4E/Lb4AR0ox5OXU/X4cRYs
egoSkcKnifFj4V/ze5QHg+z3/ygBg9PbyqSCfoHCIHo1SY8RvfI/rcBm4fl16Wht
4w7bcVDxPn2UnTVbwGOA0kc9ssL5oAU4Xm7tORwoHg2MV2hwJd1ndPFuneaFXTlV
Mph40Hw5qyOSQFiNoGkYULi4So0qwNBuyvv4lFi6HYpQd95zw7pn6d1svYfEkmMB
EaELph8Fdu+nZjBZzTPMdwGEFwzy1uNhYfPgvHp/sNZcQkx3/wAbuAsIoQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFOfi6c/0trPHWCVM1SzNTVZ/KJH0MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvNS1McHpfUzJzOGRZSlV6VkxNMU5Wbjhva2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTASBAIAATAMAwQALV4vAwQA
w0IaMB8EAgACMBkDBwAqD+fEABADBQMqETUAAwcAKhOMhgEgMA0GCSqGSIb3DQEB
CwUAA4IBAQBKM693k85n8dPYJyT/YTLMlED0swiznz2N7Rg9BrJPFyveOyTDpjj0
EVSnFHc00bw6p14ze7M/XZnuE0/C9v71DW46gRdyrxVaLXwcvlmQl4DKEUJ+u7EF
2Hlhy/Su8517HW/YG77i+HPK2vbZ4Fs5YthPK+/qDrnoOTePCSohmbNsQgT8hSLn
/QWsD8+Q//PyjNNjt0aJyeAHaMCJgyqF3DFiHms0rgp6uGxExUQDYmx5hqGm3aW5
wm9W7ZPS3Te8QguL2OHuxuSjW5g6DXEDj+qAifnSWD5BF+X9e3eEl9mfvpYTxMfu
nv2nXeckLQ9SAHoZjjYUDJAKKhguXkiz
-----END CERTIFICATE-----
Generated at Thu May 8 10:15:35 2025 by rpki-client