Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ltogBTKKP3YwW6qX9EFNQHqYqDY.roa
File: ltogBTKKP3YwW6qX9EFNQHqYqDY.roa (raw, json)
Hash identifier: 0g4YXtPVFTAZDoNyfjazoEulAUnVYgi84dLEleZkwWE=
Subject key identifier: 96:DA:20:05:32:8A:3F:76:30:5B:AA:97:F4:41:4D:40:7A:98:A8:36
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01993E5A1737E9A9BF2334382F2B406700B1
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ltogBTKKP3YwW6qX9EFNQHqYqDY.roa
Signing time: Fri 12 Sep 2025 14:35:15 +0000
ROA not before: Fri 12 Sep 2025 14:35:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 92.60.69.0/24 maxlen: 24
92.60.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:5a:17:37:e9:a9:bf:23:34:38:2f:2b:40:67:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Sep 12 14:35:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96da2005328a3f76305baa97f4414d407a98a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:00:be:07:d0:b8:8e:a4:81:71:25:9b:44:
c4:8a:2f:34:1c:c0:83:06:1f:17:5c:44:75:27:c8:
b0:a1:07:4b:08:da:5b:67:ec:86:4b:05:ee:3f:20:
73:c0:e9:3a:80:c0:a0:dc:42:55:60:2a:ab:40:af:
73:a0:f1:00:86:23:9b:8b:a6:46:2b:59:e2:ef:db:
20:2a:c3:55:40:1f:f2:1e:26:00:e7:b8:36:96:23:
fb:d8:6e:8e:f9:60:28:b0:b0:ae:e8:f9:84:9e:81:
6e:25:8c:8d:3b:7a:58:16:e0:19:aa:f4:71:03:78:
17:77:b9:80:15:2b:40:73:93:2d:63:3c:d3:5a:b6:
48:e5:f8:d7:cc:9f:9c:fd:0a:f3:a3:9a:a5:a1:53:
de:24:67:8f:09:e8:67:44:e7:24:d5:cc:b3:49:05:
86:cd:ff:05:cf:a5:d3:fe:35:73:6b:f0:4e:62:6f:
f1:30:88:4b:c8:35:97:94:ce:32:79:87:7c:76:d6:
c9:20:01:15:11:92:4c:5d:3a:bc:c3:50:14:f9:fd:
ab:94:ce:44:38:17:02:bd:68:ce:3f:8e:b1:7c:4d:
5f:48:c8:e2:e8:64:41:cd:23:36:7e:df:8d:1c:f3:
1d:70:6e:62:35:23:ef:52:fb:84:58:1c:c4:49:4f:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:20:05:32:8A:3F:76:30:5B:AA:97:F4:41:4D:40:7A:98:A8:36
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ltogBTKKP3YwW6qX9EFNQHqYqDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.69.0/24
92.60.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cb:5e:0a:16:85:50:aa:7d:c8:bb:df:cb:c5:7f:1f:c9:f5:
e4:53:24:6e:2e:32:a2:12:f8:96:1a:14:d3:3d:bd:9d:fe:be:
5a:05:42:32:97:1e:66:0c:b7:45:52:f9:f3:8f:8a:a2:05:39:
60:dc:3e:61:f3:a1:ec:aa:fe:16:4d:2a:59:2e:56:5b:2d:89:
f4:d1:99:cc:6f:ea:91:35:ca:26:d0:bd:40:fe:f6:77:2a:7f:
03:4e:03:06:8f:60:40:4b:f3:c2:ec:e2:69:e1:0f:03:ab:9b:
ee:9e:55:e3:96:30:3b:61:88:4d:4c:e4:32:f0:ce:0d:3a:8a:
c6:8b:f4:74:2c:95:f5:f9:cb:d7:3b:b0:ff:a7:f9:8a:05:02:
5f:45:f3:f1:f7:bb:cc:13:eb:d9:6b:6b:ac:c2:cb:f7:60:fc:
35:2c:83:0b:32:a8:6b:3c:e9:2a:66:14:56:c7:f3:e0:ac:00:
b7:68:57:74:95:7d:57:ca:0a:ce:6a:74:cb:e5:49:d1:25:51:
fb:77:04:6d:a5:0b:89:21:f7:2a:9c:5a:1b:ea:da:39:50:ae:
e7:7f:f5:7c:1d:48:ee:68:5b:97:cb:76:b7:3b:99:6e:0c:b0:
6b:a0:ed:b9:f2:b9:58:32:e3:58:34:0c:15:31:ad:76:59:37:
61:88:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:49 2025 by rpki-client