Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/LaUurGDUq2o8zKjmdP6EKMhYRRg.roa
File: LaUurGDUq2o8zKjmdP6EKMhYRRg.roa (raw, json)
Hash identifier: PdH/EcQsHTPGDdo5iM9wwav8RGw2qjlgL3N/YSGExz8=
Subject key identifier: 2D:A5:2E:AC:60:D4:AB:6A:3C:CC:A8:E6:74:FE:84:28:C8:58:45:18
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019855DEDA01142567220A59FFE0C355A1EA
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/LaUurGDUq2o8zKjmdP6EKMhYRRg.roa
Signing time: Tue 29 Jul 2025 11:08:44 +0000
ROA not before: Tue 29 Jul 2025 11:08:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203953
IP address blocks: 89.150.128.0/18 maxlen: 18
90.184.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:da:01:14:25:67:22:0a:59:ff:e0:c3:55:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Jul 29 11:08:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2da52eac60d4ab6a3ccca8e674fe8428c8584518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:c9:9f:c1:d3:ea:bc:e0:e6:62:52:f6:23:
ab:fb:c2:c9:55:8f:3d:3c:b8:69:10:1d:97:1d:82:
5d:f0:d6:83:52:46:e3:e2:11:57:8c:67:f2:f9:d1:
ad:38:04:df:c3:7d:14:20:f1:72:66:59:87:c6:5c:
1b:b3:68:6d:7a:02:ae:21:80:3a:74:93:8f:ac:99:
9d:96:d7:ab:ec:2d:68:67:b0:04:6c:be:5d:42:cd:
c6:12:fa:fe:5a:9e:6c:1c:00:a2:90:0e:7f:db:16:
4d:18:19:e4:05:26:11:23:f6:8c:13:7a:b3:92:5b:
f6:ce:34:bf:84:72:ee:17:d8:3e:bc:35:fa:2d:3a:
62:16:38:95:d7:2d:8f:e7:b8:ae:ba:70:43:49:00:
8f:20:d8:0b:f5:63:9b:5d:67:61:e2:b6:1f:70:23:
58:08:c0:e1:78:69:9b:1d:80:a4:8b:7d:88:40:b4:
43:40:8d:fb:ae:d4:51:23:32:ad:b2:21:c2:4a:e9:
7b:20:99:b4:49:3c:89:70:44:80:e4:3c:d0:b4:e4:
5d:dd:c4:9e:0e:be:9c:c4:2d:2e:6b:5d:11:06:e7:
62:05:8f:f5:a9:58:e5:a1:70:fa:fb:84:e5:dd:6f:
7f:13:64:5a:bd:a0:65:b3:5f:38:41:f2:43:ff:da:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:2E:AC:60:D4:AB:6A:3C:CC:A8:E6:74:FE:84:28:C8:58:45:18
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/LaUurGDUq2o8zKjmdP6EKMhYRRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.128.0/18
90.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
79:5b:83:78:5e:d0:b0:15:78:e0:97:15:5d:3e:ec:71:71:3b:
19:cc:3b:a0:a0:b6:20:b7:db:2b:12:50:77:8f:f1:a9:85:99:
20:f0:e4:25:48:3d:70:82:2a:f2:0d:ee:be:52:8e:94:14:02:
0e:fa:4a:59:f1:0e:99:04:34:12:fd:8b:99:fa:a3:dd:3a:47:
35:11:64:cc:0f:b5:a3:a2:4c:61:92:c8:5f:00:05:33:a7:8b:
3e:36:3d:40:42:cd:de:9c:8b:57:89:2a:44:dc:bb:13:4b:a9:
61:b8:81:75:91:c1:1e:36:e4:1d:12:f6:d0:71:ca:c1:60:1f:
db:ff:ad:91:93:bf:b0:80:47:09:9c:12:30:f2:f7:48:ba:da:
15:06:7c:42:9d:f1:c1:9e:00:87:1f:1c:2e:e9:f9:f6:96:f9:
c4:fe:e8:46:45:67:3b:e0:9c:a1:77:7c:f2:99:b0:57:56:cc:
39:3c:e9:ed:63:69:0b:ec:33:df:e4:b8:20:18:43:6b:01:fc:
2c:93:98:a2:63:0d:64:b8:c5:e2:e2:e1:77:f2:50:f0:26:14:
8d:4b:30:73:5d:77:04:10:94:60:a1:44:8f:df:85:29:4f:33:
ce:e1:d1:0d:5a:4a:a9:7e:15:22:e0:b9:10:20:1a:22:ea:50:
1c:4d:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:58 2025 by rpki-client