
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lVAmyqvtxuOJDwJSUtc4o13q5-E.roa
File: lVAmyqvtxuOJDwJSUtc4o13q5-E.roa (raw, json)
Hash identifier: b1UIEQASIPWTkKgkeSMdWj4InKJnzFsTlpDpa3wpVg4=
Subject key identifier: 95:50:26:CA:AB:ED:C6:E3:89:0F:02:52:52:D7:38:A3:5D:EA:E7:E1
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019958EE4B9AF8FA408413EE0CCB3AD3760E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lVAmyqvtxuOJDwJSUtc4o13q5-E.roa
Signing time: Wed 17 Sep 2025 18:27:15 +0000
ROA not before: Wed 17 Sep 2025 18:27:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:ee:4b:9a:f8:fa:40:84:13:ee:0c:cb:3a:d3:76:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Sep 17 18:27:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=955026caabedc6e3890f025252d738a35deae7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:19:c7:0d:40:dc:30:50:6d:44:c6:90:7a:
d0:46:01:9e:a2:00:32:64:a2:01:cc:00:4c:55:db:
d0:93:bd:ef:a9:c6:c9:ed:b6:1b:89:d1:05:8c:e8:
d1:50:be:70:7a:e3:5f:96:7e:ee:64:83:44:94:b2:
f6:aa:72:85:b1:b7:d9:27:30:24:8e:07:92:cc:fe:
78:d6:16:63:06:ae:93:d3:9c:da:19:a5:be:ec:61:
ce:12:51:e9:bc:27:83:18:89:78:cb:0d:79:22:be:
01:4e:ca:f1:c9:9e:0d:0a:8c:26:28:18:a4:b9:81:
3a:6b:15:2b:1a:aa:66:c8:7e:21:62:19:d3:88:07:
09:8f:57:c8:66:c6:d4:fc:79:ac:97:7b:ec:db:da:
df:4e:1c:6c:07:49:f5:3a:ff:5b:4d:c1:8c:e8:39:
74:82:ac:43:1d:75:55:94:7b:1e:cd:d8:c8:5a:c4:
cd:53:3d:23:c0:45:8d:e1:c9:f3:29:23:15:1b:5a:
04:dd:47:d4:f1:72:e9:11:8a:f3:f4:13:0a:ba:1b:
dc:89:25:2a:86:ab:a8:a8:dc:45:ca:47:4c:c0:ca:
81:76:d5:cf:e7:78:97:95:97:51:b9:65:5b:bf:67:
4a:6f:8a:be:6f:d5:71:1d:1b:32:3e:4a:7b:35:ef:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:26:CA:AB:ED:C6:E3:89:0F:02:52:52:D7:38:A3:5D:EA:E7:E1
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lVAmyqvtxuOJDwJSUtc4o13q5-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
185.117.21.0/24
185.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
be:96:b4:c8:cd:cf:24:b5:75:cf:16:04:aa:bc:ad:7a:1b:6c:
21:a4:1b:43:54:13:91:ea:8d:12:0c:66:75:b2:59:53:c9:34:
fc:9c:b9:af:10:13:3c:65:00:d1:84:2f:2f:72:c9:0c:06:b8:
3c:3f:cf:9f:19:da:7b:18:e1:3a:bf:e0:24:01:e6:b6:51:bd:
67:05:1f:22:5f:6d:cb:b8:f2:3d:39:c7:5b:5f:27:3d:60:cc:
aa:92:44:52:24:10:d7:8c:07:2d:fa:b2:10:bd:89:34:db:01:
e6:aa:ef:91:f8:6d:0f:64:f2:dc:62:4e:4a:af:70:a1:65:93:
8c:39:d0:28:8d:e2:25:c4:23:ce:a5:de:33:f4:9f:ab:03:17:
47:eb:e9:89:92:d4:bb:08:de:ca:10:49:7a:52:5b:78:54:3d:
29:73:a5:72:65:c7:ca:11:50:59:e6:bd:b4:dd:9a:b3:ff:f3:
68:9d:ea:72:bc:93:05:eb:19:82:f3:59:d7:92:bc:b9:87:d8:
ff:9a:d4:f5:17:d9:45:5f:16:b3:e8:ee:f3:66:94:a4:3f:59:
69:30:24:84:ce:b2:d7:9f:bd:6a:d2:73:6c:52:c5:fb:81:c4:
f8:ba:e2:67:61:d1:e8:10:70:42:cb:ae:d1:6f:19:b8:84:bd:
30:1d:b8:b4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlY7kua+PpAhBPuDMs603YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwOTE3MTgyNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTUwMjZjYWFiZWRjNmUzODkwZjAyNTI1MmQ3MzhhMzVkZWFlN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTAZxw1A3DBQbUTGkHrQRgGeogAy
ZKIBzABMVdvQk73vqcbJ7bYbidEFjOjRUL5weuNfln7uZINElLL2qnKFsbfZJzAk
jgeSzP541hZjBq6T05zaGaW+7GHOElHpvCeDGIl4yw15Ir4BTsrxyZ4NCowmKBik
uYE6axUrGqpmyH4hYhnTiAcJj1fIZsbU/Hmsl3vs29rfThxsB0n1Ov9bTcGM6Dl0
gqxDHXVVlHsezdjIWsTNUz0jwEWN4cnzKSMVG1oE3UfU8XLpEYrz9BMKuhvciSUq
hquoqNxFykdMwMqBdtXP53iXlZdRuWVbv2dKb4q+b9VxHRsyPkp7Ne8hsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJVQJsqr7cbjiQ8CUlLXOKNd6ufhMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvbFZBbXlxdnR4dU9KRHdKU1V0YzRvMTNxNS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYrSAwQA
uXUVAwQAudMxMA0GCSqGSIb3DQEBCwUAA4IBAQC+lrTIzc8ktXXPFgSqvK16G2wh
pBtDVBOR6o0SDGZ1sllTyTT8nLmvEBM8ZQDRhC8vcskMBrg8P8+fGdp7GOE6v+Ak
Aea2Ub1nBR8iX23LuPI9OcdbXyc9YMyqkkRSJBDXjAct+rIQvYk02wHmqu+R+G0P
ZPLcYk5Kr3ChZZOMOdAojeIlxCPOpd4z9J+rAxdH6+mJktS7CN7KEEl6Ult4VD0p
c6VyZcfKEVBZ5r203Zqz//NonepyvJMF6xmC81nXkry5h9j/mtT1F9lFXxaz6O7z
ZpSkP1lpMCSEzrLXn71q0nNsUsX7gcT4uuJnYdHoEHBCy67Rbxm4hL0wHbi0
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:42 2025 by rpki-client