Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa
File: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (raw, json)
Hash identifier: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=
Subject key identifier: 2F:54:A1:A1:41:47:FF:74:33:29:7F:E4:7B:C1:C0:5F:41:70:C3:A7
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019968ECA7C7BF217FBB524860E7AD9C3125
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa
Signing time: Sat 20 Sep 2025 20:59:23 +0000
ROA not before: Sat 20 Sep 2025 20:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:68:ec:a7:c7:bf:21:7f:bb:52:48:60:e7:ad:9c:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Sep 20 20:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f54a1a14147ff7433297fe47bc1c05f4170c3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fd:08:19:13:52:38:be:f9:31:fd:b0:22:89:
6b:9f:ac:2b:2d:52:64:f1:a0:63:20:9a:cc:1a:b9:
f8:d0:d9:c3:7f:06:8f:44:32:9c:7a:1a:49:f1:14:
59:c2:23:1d:a4:44:03:d1:ad:9f:71:ee:93:4e:e0:
9d:cb:d2:81:24:00:c0:a4:f4:6f:75:d7:4f:30:fb:
93:2a:82:ba:fe:d5:bc:25:d2:02:9f:7d:69:c0:c2:
67:34:48:fc:fd:35:45:c5:7f:65:51:83:3b:49:06:
51:95:86:92:8e:c2:96:d5:4d:98:a0:c7:fe:26:3e:
e2:0b:90:f5:a8:1c:64:17:d9:44:0a:c8:33:4a:33:
57:d7:f7:64:c8:68:62:4a:09:4b:3b:2c:0f:99:8c:
79:ab:cc:5a:92:42:74:a1:0f:bd:ed:ed:0d:17:30:
68:7d:6a:d5:87:46:f6:4d:d2:62:f0:5e:61:8b:49:
74:fa:5d:aa:77:c2:f4:aa:82:ce:4c:4e:a8:4e:c9:
a8:15:fc:29:a9:9b:71:a1:c5:41:69:c0:fe:fa:15:
67:67:20:5f:35:fe:46:8b:3b:cb:fd:33:bb:52:e8:
75:49:5d:13:f2:9c:ce:9b:c8:6b:f8:f1:de:33:06:
bc:ef:65:49:59:18:d8:1c:54:4d:58:85:a1:ff:2c:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:A1:A1:41:47:FF:74:33:29:7F:E4:7B:C1:C0:5F:41:70:C3:A7
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/24
46.254.51.0/24
46.254.54.0/23
Signature Algorithm: sha256WithRSAEncryption
88:c5:02:82:45:19:e5:23:de:34:97:dd:e7:f1:dd:ea:54:39:
31:a7:74:6e:a8:fd:8d:42:cc:90:3d:06:ea:6b:8d:fb:e4:7b:
9c:16:14:1f:f5:13:c3:21:41:eb:39:bf:12:65:43:e9:2c:06:
b8:60:6f:82:da:d5:ec:36:d6:92:0e:db:a0:ad:93:37:55:30:
4c:90:0d:10:04:0b:91:e7:34:de:61:b4:b0:00:0c:da:d3:a4:
0c:2c:da:4e:35:22:79:40:4e:13:5a:bb:c1:8c:fe:a7:1f:d3:
2f:90:91:e9:b8:45:df:d9:b8:19:63:ba:9b:47:7e:74:b1:59:
9b:c9:77:e2:97:ca:03:44:f8:6e:6f:8a:31:50:63:ac:ac:f8:
91:24:1e:fe:c4:5b:14:5b:55:3e:97:b6:28:be:e6:cf:ce:ee:
39:ea:ca:6b:9f:9d:2a:af:c0:06:10:3f:23:68:10:da:47:c8:
6c:67:ed:25:37:50:c1:a9:9e:06:7a:47:a0:8b:c0:24:00:ea:
a5:93:d7:6a:82:71:51:e4:de:fe:fb:5b:cf:33:cd:3b:54:16:
20:d7:87:0a:fe:26:b8:b6:46:b6:3d:0b:b0:21:ee:3a:34:62:
a5:1f:b3:22:55:3b:5a:87:66:2d:bf:d5:38:67:14:34:4f:73:
1a:e9:8a:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlo7KfHvyF/u1JIYOetnDElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjUwOTIwMjA1OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjU0YTFhMTQxNDdmZjc0MzMyOTdmZTQ3YmMxYzA1ZjQxNzBjM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f0IGRNSOL75Mf2wIolrn6wrLVJk
8aBjIJrMGrn40NnDfwaPRDKcehpJ8RRZwiMdpEQD0a2fce6TTuCdy9KBJADApPRv
dddPMPuTKoK6/tW8JdICn31pwMJnNEj8/TVFxX9lUYM7SQZRlYaSjsKW1U2YoMf+
Jj7iC5D1qBxkF9lECsgzSjNX1/dkyGhiSglLOywPmYx5q8xakkJ0oQ+97e0NFzBo
fWrVh0b2TdJi8F5hi0l0+l2qd8L0qoLOTE6oTsmoFfwpqZtxocVBacD++hVnZyBf
Nf5GizvL/TO7Uuh1SV0T8pzOm8hr+PHeMwa872VJWRjYHFRNWIWh/ywUaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC9UoaFBR/90Myl/5HvBwF9BcMOnMB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvTDFTaG9VRkhfM1F6S1hfa2U4SEFYMEZ3dzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALv4wAwQA
Lv4zAwQBLv42MA0GCSqGSIb3DQEBCwUAA4IBAQCIxQKCRRnlI940l93n8d3qVDkx
p3RuqP2NQsyQPQbqa4375HucFhQf9RPDIUHrOb8SZUPpLAa4YG+C2tXsNtaSDtug
rZM3VTBMkA0QBAuR5zTeYbSwAAza06QMLNpONSJ5QE4TWrvBjP6nH9MvkJHpuEXf
2bgZY7qbR350sVmbyXfil8oDRPhub4oxUGOsrPiRJB7+xFsUW1U+l7YovubPzu45
6sprn50qr8AGED8jaBDaR8hsZ+0lN1DBqZ4Gekegi8AkAOqlk9dqgnFR5N7++1vP
M807VBYg14cK/ia4tka2PQuwIe46NGKlH7MiVTtah2Ytv9U4ZxQ0T3Ma6Yox
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:59 2025 by rpki-client