Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Lve6BQbeL2rFjoFCEuei9a2B55k.roa
File: Lve6BQbeL2rFjoFCEuei9a2B55k.roa (raw, json)
Hash identifier: /LeeZHXLPxH/tzbUGQf83LW7pwH4khS3syMv2XfxHPI=
Subject key identifier: 2E:F7:BA:05:06:DE:2F:6A:C5:8E:81:42:12:E7:A2:F5:AD:81:E7:99
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01987640B65B343125EE2EE5742A7A3F9C64
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Lve6BQbeL2rFjoFCEuei9a2B55k.roa
Signing time: Mon 04 Aug 2025 18:03:29 +0000
ROA not before: Mon 04 Aug 2025 18:03:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212913
IP address blocks: 80.76.42.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
89.221.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:40:b6:5b:34:31:25:ee:2e:e5:74:2a:7a:3f:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 4 18:03:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef7ba0506de2f6ac58e814212e7a2f5ad81e799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:7b:3b:ea:c8:ec:53:c4:98:88:ba:57:ff:
39:74:9d:c5:f4:86:d9:f1:28:67:d5:be:77:f7:f6:
1f:b1:2d:bd:7f:98:0e:ff:73:ab:71:63:b9:dc:e6:
26:dc:4b:8d:99:42:87:e4:26:27:8e:2f:29:b8:99:
8c:29:c4:74:12:ed:f3:27:78:d2:39:30:e3:a4:86:
9c:f1:97:f9:74:91:d0:c5:5c:ab:f9:33:c4:06:99:
60:df:11:dc:4b:ff:c4:aa:6b:97:9d:d6:30:60:b0:
d7:25:65:f7:d8:63:2a:dd:79:46:71:1d:54:5b:1b:
5c:21:a6:74:ae:e9:3b:9c:06:20:93:49:ab:2f:f6:
03:26:38:9f:ce:3c:9d:83:81:ad:48:3f:6c:e3:fc:
11:42:ab:f8:76:27:06:4c:f1:1e:49:3e:fe:7e:bd:
00:ad:b2:34:ce:7e:dc:4a:3c:62:3d:93:e3:4c:9d:
1a:d6:99:27:eb:e5:4b:7a:0b:d8:5d:ad:6f:2e:a8:
92:ab:7e:12:94:fb:b4:6f:fb:c2:b8:37:ac:57:e7:
88:8a:10:a8:e6:6a:d7:9f:a3:4a:d0:cb:47:dc:8a:
ec:89:5e:0c:30:1c:2d:e1:06:2e:e2:a0:b4:a7:2d:
4f:86:50:4d:bc:72:79:d0:91:c7:b1:9e:bf:77:4f:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:BA:05:06:DE:2F:6A:C5:8E:81:42:12:E7:A2:F5:AD:81:E7:99
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Lve6BQbeL2rFjoFCEuei9a2B55k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.42.0/24
81.22.193.0/24
89.221.204.0/24
Signature Algorithm: sha256WithRSAEncryption
46:84:5e:ba:ab:b6:8f:1e:5c:e4:70:97:da:53:d3:fc:5a:11:
83:12:dc:7c:78:7c:23:fd:a1:07:20:0a:81:81:86:69:54:a4:
dd:f4:cf:99:8f:ed:92:34:45:59:26:e9:7a:46:ae:db:e2:9c:
34:1c:fc:18:5a:94:fd:fe:e0:1e:03:ef:00:46:d0:39:02:1a:
4e:7f:cd:3b:27:fc:30:c8:dd:79:9a:c7:56:9b:31:e0:73:49:
c6:b1:77:b3:27:e1:fb:b1:ef:0c:8b:8c:ce:f8:10:8b:9c:34:
9e:ef:ef:5a:af:e1:3d:0e:a0:8f:d5:ba:37:2b:9b:d3:60:02:
85:89:31:62:08:59:7c:b6:00:14:eb:7a:6d:6f:be:b6:5b:62:
71:40:33:c0:89:a0:b5:73:e0:96:96:08:7c:8c:33:be:e5:28:
d0:00:c3:2d:89:bc:23:f6:ba:e8:07:1c:17:a9:a0:d3:d9:0d:
1f:e6:52:91:75:2c:a8:da:9a:d6:d7:b5:ba:af:23:0b:c8:1a:
29:f1:d6:b1:2d:15:1b:db:cf:ab:24:ce:e5:4d:46:52:ab:d0:
bc:8b:98:c3:5a:9b:4e:42:e8:fa:fc:11:c8:38:49:e2:9d:49:
ab:6b:fb:28:4b:b3:11:f0:38:15:c5:61:dd:07:e0:39:84:89:
fe:1a:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:23 2025 by rpki-client