Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ld30fipZcrPA_rFwusTBTDtWgAA.roa
File: Ld30fipZcrPA_rFwusTBTDtWgAA.roa (raw, json)
Hash identifier: Cu2sNI/7pQw8ILZI433hzscJlSXRKG87RJstqxuOZ6g=
Subject key identifier: 2D:DD:F4:7E:2A:59:72:B3:C0:FE:B1:70:BA:C4:C1:4C:3B:56:80:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A2A255F33BF345E166B53386069CA5EFA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ld30fipZcrPA_rFwusTBTDtWgAA.roa
Signing time: Tue 28 Oct 2025 09:28:03 +0000
ROA not before: Tue 28 Oct 2025 09:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 77.93.158.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:25:5f:33:bf:34:5e:16:6b:53:38:60:69:ca:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 28 09:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dddf47e2a5972b3c0feb170bac4c14c3b568000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:d3:17:53:ac:1a:4b:9e:b7:eb:e4:86:3d:
0c:a3:87:58:d4:8b:18:3a:a2:8d:8b:1b:03:e3:a8:
4e:06:c1:2d:b1:eb:36:89:13:64:90:7d:e5:54:1b:
9c:7e:44:1a:3d:59:3b:33:ed:02:01:2e:a1:30:cd:
8e:5e:6d:17:ed:99:17:9e:82:bb:24:ee:f0:d3:90:
01:5f:62:cf:24:88:ea:4c:a7:c7:e9:1e:8c:d8:db:
59:a3:c2:b4:ba:c2:a8:8c:22:62:a3:9e:9e:3f:bc:
10:a0:d8:3d:b6:28:77:0b:68:c4:a8:af:ef:1e:2c:
94:42:6f:7f:ed:e7:f6:fe:21:9e:ca:e6:fa:a9:1f:
86:d2:8b:8d:53:ea:3c:93:76:52:87:41:b5:6f:43:
db:b7:e6:0f:b7:60:99:1b:52:d2:bb:e9:79:3a:46:
ee:b0:63:83:5a:63:d0:13:32:77:de:9d:0e:fc:90:
60:35:91:24:cd:46:b1:07:8c:ca:51:ff:c2:e5:1d:
4f:41:13:2e:d5:fa:46:a5:63:65:eb:5f:3d:3b:f1:
ff:3a:52:a0:87:bd:b5:83:62:92:b0:fa:de:bc:dd:
2a:e7:64:84:2b:6b:06:59:a5:8f:8e:94:64:28:b8:
94:2b:aa:ed:49:48:ea:6e:af:0b:dd:06:73:bc:fe:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:F4:7E:2A:59:72:B3:C0:FE:B1:70:BA:C4:C1:4C:3B:56:80:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ld30fipZcrPA_rFwusTBTDtWgAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.158.0/24
82.152.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:de:f1:8d:1a:80:41:c5:6f:7d:c6:fd:48:38:e1:ff:b9:42:
d5:6e:6e:7a:8f:64:a5:ef:ff:f3:ae:30:de:51:cb:5e:bf:3c:
cc:4b:f8:35:e3:bc:28:c1:73:d9:ab:dd:f4:fb:30:97:c8:40:
f8:c3:fd:1d:fc:be:89:23:a8:4a:db:08:42:6e:23:2e:c9:a3:
d4:fa:c7:d7:11:f9:8b:01:ff:66:90:88:af:81:12:09:51:8a:
9d:0b:10:e4:ca:e0:32:74:24:ba:bf:ba:b7:eb:cc:28:30:63:
0b:89:eb:1e:db:b4:09:9b:b1:12:6b:51:02:90:de:e0:7d:73:
7d:e0:b2:b9:da:76:02:89:2b:d9:4b:ce:41:fb:fb:49:c1:51:
77:a4:3c:f1:2c:c1:ed:d0:8c:16:98:e4:83:79:42:94:e5:83:
fe:6e:5a:5c:60:f4:ac:14:4e:bd:e6:5e:49:49:c3:cf:6c:fb:
b2:79:77:1b:47:1f:a3:05:93:b6:14:8a:97:5e:b6:be:6d:2d:
28:ac:9b:98:b3:e6:5f:28:59:dd:1a:9b:e7:25:22:ff:f2:5e:
45:70:8f:51:7b:5a:f3:64:45:9c:b4:c5:2d:1d:ae:9d:53:39:
e4:cc:70:96:f1:ea:01:22:05:66:23:c8:0d:a7:8c:40:ef:7b:
77:50:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:27 2025 by rpki-client