
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lUScd1q-8HJMFWgaC4Wtuksyggk.roa
File: lUScd1q-8HJMFWgaC4Wtuksyggk.roa (raw, json)
Hash identifier: 103Kp33DDjoa2BV5Lil0r1FAOGUyGyN57pD3Hr/Bqz4=
Subject key identifier: 95:44:9C:77:5A:BE:F0:72:4C:15:68:1A:0B:85:AD:BA:4B:32:82:09
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01983CF8589C1D5F6872CD9FBC8608149EB8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lUScd1q-8HJMFWgaC4Wtuksyggk.roa
Signing time: Thu 24 Jul 2025 15:06:05 +0000
ROA not before: Thu 24 Jul 2025 15:06:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 206.245.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f8:58:9c:1d:5f:68:72:cd:9f:bc:86:08:14:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 24 15:06:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95449c775abef0724c15681a0b85adba4b328209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:55:93:d3:dc:a6:a8:7a:27:4a:5d:cb:6a:
a5:fe:66:15:6b:d5:e5:68:6a:52:8e:b9:0a:dd:1b:
24:bb:03:8c:d3:45:d3:a1:e6:4c:f8:8c:3a:4d:43:
16:c1:44:d1:7f:89:57:51:b7:29:e2:36:43:ea:6d:
dd:e3:7d:71:5a:9c:4b:40:c1:ed:d3:24:ee:53:ba:
b1:28:31:8a:03:7b:b7:db:8b:17:ae:2d:37:a9:43:
35:fe:13:86:24:02:09:14:39:da:78:20:6a:9a:bb:
d7:df:34:84:7c:9f:40:a2:f7:73:52:cf:bd:3b:0f:
2e:79:cf:87:d1:35:ca:d1:fd:15:d0:20:09:a9:3a:
24:ea:ca:09:aa:4c:32:24:5b:09:33:ab:f2:c9:14:
67:32:9d:ab:27:3f:9f:4b:e6:6c:7f:56:8f:54:41:
70:11:db:ed:5a:d0:88:d3:5d:00:1e:81:16:4c:4b:
f1:75:46:d5:c7:d7:e9:f3:68:60:fc:08:76:4d:44:
9e:b5:a0:07:2a:5b:8e:8b:3d:88:3c:6a:48:69:29:
d8:be:00:ba:71:55:5b:77:b0:b0:5f:ff:d0:18:b9:
0d:a0:90:7b:5b:df:e3:40:67:68:b7:03:bc:59:e2:
a8:23:bb:d9:bf:dc:28:f3:ae:c2:b0:e0:41:a5:5c:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:9C:77:5A:BE:F0:72:4C:15:68:1A:0B:85:AD:BA:4B:32:82:09
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lUScd1q-8HJMFWgaC4Wtuksyggk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.158.0/24
Signature Algorithm: sha256WithRSAEncryption
24:18:0e:8e:21:39:5f:36:b6:70:2f:3b:f6:99:01:72:a8:72:
54:76:a2:b9:32:f4:94:ae:96:22:65:1d:2e:ee:a4:cf:19:eb:
72:2e:db:f4:bd:9a:43:2e:a8:f9:cd:90:88:de:b0:53:36:32:
b0:54:0f:21:9d:87:3a:eb:6b:76:8e:36:a2:f2:e6:0b:21:d5:
0b:40:72:c8:42:9f:3c:b2:b8:f1:d8:ff:1e:d2:41:57:5e:36:
1a:6a:d4:7d:a4:e3:04:8d:c2:3b:9e:6c:3a:1a:87:50:22:d1:
fa:bf:0b:f9:20:6c:c0:35:37:3f:40:76:ba:86:6c:5b:ac:0c:
9f:b2:8b:f4:0c:cd:60:54:cc:b3:8c:ae:ad:df:af:73:7f:d0:
28:c9:08:02:d6:bd:d9:90:ce:b5:8a:94:02:a7:61:bb:ce:b2:
8e:e0:28:5a:cb:1f:a6:30:62:75:93:c4:95:e7:7c:4c:78:00:
28:ef:70:0f:a2:6b:74:6c:98:d9:8b:77:bc:e1:f4:f7:18:9c:
ba:36:d8:a1:bb:38:31:81:f2:61:f0:98:3a:1e:3d:15:28:56:
b0:de:04:08:3a:27:a9:d6:4c:8d:6e:bd:51:a0:57:bc:ce:02:
b8:1d:f2:0a:6d:db:da:66:76:e8:3c:f9:ce:4f:83:04:ad:ea:
8b:fd:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:16 2025 by rpki-client