Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Lb95JQJ7Z2-UVp5fy_MYoGmrhLA.roa
File: Lb95JQJ7Z2-UVp5fy_MYoGmrhLA.roa (raw, json)
Hash identifier: vWJ3oPdDk8h9SIQmahbzaDgOm6h+b4uGYKjU+5jbiBQ=
Subject key identifier: 2D:BF:79:25:02:7B:67:6F:94:56:9E:5F:CB:F3:18:A0:69:AB:84:B0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01988AEF25236FF0E68FC5678588E54805CE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Lb95JQJ7Z2-UVp5fy_MYoGmrhLA.roa
Signing time: Fri 08 Aug 2025 18:26:24 +0000
ROA not before: Fri 08 Aug 2025 18:26:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.151.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:ef:25:23:6f:f0:e6:8f:c5:67:85:88:e5:48:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 18:26:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dbf7925027b676f94569e5fcbf318a069ab84b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a9:78:35:2f:0d:ef:ac:1d:9b:70:6f:75:95:
1d:82:57:d5:24:5b:57:b5:ad:4b:8a:35:27:d6:53:
e5:0a:dc:73:5b:ec:92:12:56:76:8f:2a:7b:ea:72:
8b:f4:99:dc:62:2d:05:32:75:86:7a:22:12:bf:c5:
c1:e1:0e:e4:3a:e4:a3:f7:99:1a:07:b2:99:3f:0b:
78:f2:1d:ce:9b:77:7d:a5:28:a2:65:05:df:1b:df:
26:31:8d:3a:29:2e:6b:cc:6e:23:a6:a9:2f:09:2b:
3e:9c:6a:f1:af:ea:75:6f:13:0d:65:34:0c:d1:9e:
3e:b9:7a:ec:2f:fe:1d:0f:d7:f8:7f:d6:39:f1:67:
50:f9:02:53:65:23:3c:98:3f:78:3e:eb:b2:dd:da:
5c:41:6b:06:40:78:05:89:b9:06:3c:71:29:14:90:
01:94:64:b7:01:c0:94:1d:ed:da:64:f1:f5:9c:2b:
27:61:42:72:f5:26:1e:33:d1:64:da:97:06:bf:d1:
c4:36:48:cd:e6:19:e9:62:83:94:c3:e4:5b:34:36:
f1:e5:52:d6:bf:3b:79:db:9c:e0:82:2d:50:af:cd:
cf:a0:d6:0e:99:4f:07:a4:4f:86:22:dd:76:82:01:
bf:9e:0a:cc:33:19:6c:1f:0a:71:53:f0:4d:18:2e:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:79:25:02:7B:67:6F:94:56:9E:5F:CB:F3:18:A0:69:AB:84:B0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Lb95JQJ7Z2-UVp5fy_MYoGmrhLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.100.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:fa:be:92:e3:81:5e:c7:95:ee:bc:45:5b:6f:47:76:ab:
df:06:a3:54:fb:37:1c:f8:d3:2b:05:40:76:94:97:6c:c7:f4:
cd:2b:c5:1f:65:91:17:7a:88:e7:e3:5d:06:ba:f4:44:29:0a:
58:c7:b1:72:04:db:5c:f1:5f:74:e3:b7:03:8e:f5:03:d7:d2:
4a:53:a1:fd:c2:4b:62:a8:8d:6c:9e:f0:9e:78:d0:03:28:18:
30:8d:52:95:59:80:a6:ae:57:77:8d:51:9d:e3:5c:69:22:41:
20:52:a1:e3:7f:b1:31:2e:ca:bb:ea:0e:ed:0a:3f:98:d8:84:
a9:6a:38:a8:ea:51:b7:0e:bc:fc:82:64:c7:66:98:fe:44:32:
a1:7d:0b:b0:fb:dd:71:f6:dc:a2:08:5e:59:68:63:62:c7:ca:
5e:4b:51:8b:1c:5e:81:b5:95:7d:04:ad:76:b4:4d:a3:2d:5f:
9a:57:58:69:46:10:33:04:ab:97:4d:00:d7:d8:58:03:82:89:
ab:cf:3a:b1:7c:fe:87:62:e5:ae:42:e7:4a:1f:29:3b:67:8d:
97:49:1b:ea:66:f9:36:f1:1a:aa:ba:c0:54:5f:a8:a1:41:e0:
04:ca:e5:b2:86:67:0c:a2:c3:38:11:b9:cb:dc:cb:d9:54:7e:
92:a3:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:20:15 2025 by rpki-client