Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LqjbyVbAdVYrSevaijXrsAWxi8k.roa
File: LqjbyVbAdVYrSevaijXrsAWxi8k.roa (raw, json)
Hash identifier: oU336O0LVBTAE0GZeHZ6H8+NG9i5ZVvjD3fYxORSN3M=
Subject key identifier: 2E:A8:DB:C9:56:C0:75:56:2B:49:EB:DA:8A:35:EB:B0:05:B1:8B:C9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019987B9C5B837EE23307CF688F5CFE935F4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LqjbyVbAdVYrSevaijXrsAWxi8k.roa
Signing time: Fri 26 Sep 2025 20:32:02 +0000
ROA not before: Fri 26 Sep 2025 20:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267890
IP address blocks: 45.142.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:b9:c5:b8:37:ee:23:30:7c:f6:88:f5:cf:e9:35:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 26 20:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ea8dbc956c075562b49ebda8a35ebb005b18bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:a8:04:1e:20:7c:73:bf:d9:5f:b5:aa:a7:
11:ef:1a:56:d6:be:90:9a:cf:5f:32:e8:3e:fc:eb:
0e:bb:74:52:3d:40:7b:86:d8:f3:7a:05:14:12:c3:
06:e8:40:53:af:79:08:14:69:bc:bd:32:91:fd:1a:
15:06:de:e5:74:51:a8:80:c2:ce:82:e4:36:26:9a:
8f:9a:32:e8:26:ec:bc:77:27:50:31:fb:50:f2:56:
36:cb:70:b9:8f:30:c6:da:97:b7:82:4b:cd:ac:d4:
1d:08:94:19:d8:11:17:a9:ae:7d:fb:3d:49:8c:e5:
2d:dc:a0:26:07:84:7c:2f:92:32:e3:7d:2a:0f:d6:
40:5a:f1:08:71:c8:fa:12:db:98:f2:c2:8f:bd:e4:
09:8b:20:8e:43:8a:8c:0b:da:78:98:19:1f:6d:14:
cf:99:16:ff:26:cc:27:9f:e1:f6:8a:cf:80:68:5a:
5f:7c:82:be:d0:89:62:e4:82:04:26:cc:7e:d6:0d:
1a:97:75:ba:59:80:65:e0:1d:d2:9a:e8:e2:3d:04:
4c:f2:f3:46:2a:d0:75:3f:f8:64:ee:eb:3a:2f:5b:
9a:d5:7d:35:33:b0:84:b5:07:c7:1f:7a:40:92:63:
05:35:3b:b7:cb:63:60:da:e0:25:1b:41:3b:ec:2c:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:DB:C9:56:C0:75:56:2B:49:EB:DA:8A:35:EB:B0:05:B1:8B:C9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LqjbyVbAdVYrSevaijXrsAWxi8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.228.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:37:fd:f5:42:e4:f0:86:50:d1:92:e5:ef:0d:59:92:57:85:
5c:e4:5c:e9:64:15:89:b4:4f:dd:e6:52:a6:2e:0b:12:bd:3c:
5c:f2:c0:7e:8a:2f:33:6b:18:28:55:9b:4c:7b:ed:9e:27:06:
59:7f:d7:8f:76:b6:3e:a4:d9:b7:f5:28:f3:19:bb:56:89:3a:
d0:17:28:f2:40:7f:31:c3:22:be:25:56:09:7a:be:f0:7c:91:
4a:2d:cb:07:3d:5e:bc:bc:7d:2d:95:85:07:34:6b:eb:ff:5d:
df:76:0b:4b:0f:7d:41:02:0b:dc:df:5a:10:24:02:6f:29:c1:
42:f5:c5:22:1a:c5:eb:f8:86:6b:6a:de:f1:1b:8f:1e:14:4c:
72:de:7e:45:09:c3:b9:d0:eb:9c:16:65:f9:23:44:13:b4:a6:
29:21:29:7f:c1:f0:bf:18:16:9d:3d:81:a7:63:63:af:0f:45:
49:c0:a1:dd:2e:7c:ff:60:7a:48:32:ce:3d:dd:28:0b:03:fe:
ff:14:f9:b7:32:ed:da:b5:15:40:7c:7d:75:b1:c5:0e:c6:7f:
e3:ab:79:4c:1f:86:23:2e:a5:e4:0c:4d:0d:0f:c9:a9:7f:1c:
cb:0a:eb:72:2d:38:a3:2a:bf:66:ea:6b:cb:03:2d:88:36:a6:
0d:04:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:34 2025 by rpki-client