Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/lvAa3CzIy8pmEBVOTiPDxrHc4bQ.roa
File: lvAa3CzIy8pmEBVOTiPDxrHc4bQ.roa (raw, json)
Hash identifier: yG11VCgqR40kBzo5qjdUwtFhvHq746Cc4Gs+mxBZoZE=
Subject key identifier: 96:F0:1A:DC:2C:C8:CB:CA:66:10:15:4E:4E:23:C3:C6:B1:DC:E1:B4
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0199A5B84C18217517CD0C7A995CE216F074
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/lvAa3CzIy8pmEBVOTiPDxrHc4bQ.roa
Signing time: Thu 02 Oct 2025 16:19:02 +0000
ROA not before: Thu 02 Oct 2025 16:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 194.179.152.0/22 maxlen: 24
194.179.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:b8:4c:18:21:75:17:cd:0c:7a:99:5c:e2:16:f0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Oct 2 16:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f01adc2cc8cbca6610154e4e23c3c6b1dce1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:35:3a:42:56:55:f0:83:89:59:ad:d0:14:
97:0c:ab:bf:9e:9b:b8:eb:b5:14:23:3d:60:74:e4:
83:21:65:b7:8a:4a:d3:0f:39:bb:3f:d6:d0:d6:e8:
99:c2:54:4e:5c:ba:ca:8c:10:70:ef:c7:7e:37:2b:
86:d9:06:4c:11:ac:e4:b4:4c:3d:6b:e6:ee:73:58:
5e:60:e8:78:3a:b4:55:83:8e:1b:73:3b:ea:9e:e1:
0f:8d:3b:35:b6:8e:32:fa:7e:90:eb:cd:75:33:9e:
ae:5d:2f:39:d1:28:be:46:ad:6f:22:c5:c7:2e:6d:
02:14:b6:d1:a9:75:7e:e5:d4:bb:db:5c:57:cb:16:
85:91:57:22:46:1f:f5:66:09:1a:05:30:26:e4:8f:
0b:9c:af:46:86:96:35:5d:31:de:1a:df:63:12:87:
c3:30:49:7e:64:67:8c:7d:d4:41:eb:84:23:aa:b9:
a4:8b:79:77:52:5f:d7:05:41:52:2f:2f:07:e8:98:
36:b9:67:6b:0f:8f:d6:0c:4f:82:c9:32:fc:4f:27:
81:3d:a9:eb:0c:14:d2:0d:ef:bd:02:11:fd:4a:fc:
c6:76:08:41:53:c7:d5:4a:3f:b0:91:d4:44:41:50:
33:ae:97:d6:d8:f4:e0:bb:b8:90:1e:e9:a1:ed:65:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:1A:DC:2C:C8:CB:CA:66:10:15:4E:4E:23:C3:C6:B1:DC:E1:B4
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/lvAa3CzIy8pmEBVOTiPDxrHc4bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.152.0/21
Signature Algorithm: sha256WithRSAEncryption
16:1c:9b:3a:9a:80:f0:c9:6b:d7:9d:7d:cb:93:47:3c:d8:4f:
f0:3d:f2:d3:23:86:69:a3:fe:dd:6f:96:c9:3d:da:33:8c:e9:
09:1c:55:85:5d:5e:9c:a5:37:e6:00:d7:7d:91:b2:b6:7c:0f:
ce:37:42:e9:c3:98:cd:6b:ff:d6:1a:aa:26:13:1c:cc:dd:54:
4a:c3:11:f7:a4:93:df:10:3d:da:36:b0:07:cf:e2:e5:81:5d:
05:ef:99:b0:bc:40:f4:bf:18:ee:36:20:f7:77:36:6d:52:47:
9c:81:34:68:81:45:e0:a9:70:d7:e9:13:c7:b7:19:68:b4:a9:
38:02:04:4e:28:a0:7c:c0:14:57:ac:84:a0:73:c8:79:b0:9b:
ff:62:98:20:b0:66:28:7d:55:fe:85:90:d7:03:8b:14:c0:57:
c1:2f:31:47:75:f4:b0:a6:31:3c:7c:dd:e9:7a:36:00:c1:1a:
c0:0c:45:c2:af:01:4c:4d:25:6c:c5:f7:e5:68:24:98:7c:2b:
8f:95:bc:8b:15:75:cf:56:a4:e2:61:db:92:4d:8a:9e:9c:d6:
2a:75:2e:ce:30:a5:8f:bf:8f:9a:1a:1a:e3:9d:9c:28:18:41:
08:10:e9:55:c4:ad:87:0d:ed:e2:70:d8:ca:58:e7:f1:ca:84:
c8:df:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:23 2025 by rpki-client