Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/LORCt70jsagRPwhHveF9NwFwAdc.roa
File: LORCt70jsagRPwhHveF9NwFwAdc.roa (raw, json)
Hash identifier: XE1979UTJGbooo6euGXBIIPw0oSDhE+SjzT5/z0ebf0=
Subject key identifier: 2C:E4:42:B7:BD:23:B1:A8:11:3F:08:47:BD:E1:7D:37:01:70:01:D7
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01986EABCA5F4A1DD16C3720579D7C28F27C
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/LORCt70jsagRPwhHveF9NwFwAdc.roa
Signing time: Sun 03 Aug 2025 06:43:28 +0000
ROA not before: Sun 03 Aug 2025 06:43:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.26.0/23 maxlen: 24
212.26.28.0/23 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.76.0/24 maxlen: 24
212.26.78.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 25
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.210.0/24 maxlen: 24
212.138.210.0/28 maxlen: 28
212.138.250.0/24 maxlen: 24
212.138.251.0/24 maxlen: 24
212.138.252.0/24 maxlen: 24
212.138.253.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:100::/48 maxlen: 48
2001:1490:101::/48 maxlen: 48
2001:1490:102::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:108::/48 maxlen: 48
2001:1490:109::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:112::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 50
2001:1490:116::/48 maxlen: 48
2001:1497:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:ab:ca:5f:4a:1d:d1:6c:37:20:57:9d:7c:28:f2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Aug 3 06:43:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ce442b7bd23b1a8113f0847bde17d37017001d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:be:d4:c6:4b:d9:90:b9:cb:47:24:2a:76:
5f:41:03:66:75:80:85:95:42:9a:dc:91:78:86:01:
25:14:f4:9f:3b:c0:c7:ac:06:17:7c:55:e1:e0:bd:
4f:22:02:c4:4c:02:5d:fc:11:33:b5:a4:93:c9:00:
a2:f6:66:16:aa:7d:84:88:0d:81:5d:09:9b:c1:84:
10:3a:be:18:6c:88:9e:07:dc:18:17:fa:27:fb:d1:
4c:5c:3b:55:6f:06:e5:76:0c:43:7b:a7:57:14:d4:
fb:d3:ea:7e:1a:27:41:6f:18:14:ed:0c:dd:6e:72:
1a:de:71:70:a9:71:fd:7e:c5:18:59:23:9a:b1:37:
8a:97:53:7b:97:dd:cd:b8:9c:4d:bc:62:17:2f:3d:
93:bd:d9:76:f2:15:41:85:2c:57:0d:b3:37:13:6a:
08:31:3f:a2:7b:ae:f0:b8:f5:16:6c:79:e1:8c:c3:
70:c6:f9:2c:9a:e9:c4:82:2b:1e:54:b7:2e:a8:27:
99:44:38:cd:bf:76:8f:43:93:2c:52:e7:e7:1d:46:
c5:16:3a:9a:b3:af:31:45:e6:92:b6:b5:b6:da:8b:
ef:93:49:5c:66:48:d4:56:cd:ae:e2:30:b6:11:60:
8f:ff:f5:ed:20:2b:77:01:fc:02:fd:b4:3c:ec:65:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:42:B7:BD:23:B1:A8:11:3F:08:47:BD:E1:7D:37:01:70:01:D7
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/LORCt70jsagRPwhHveF9NwFwAdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/47
2001:1490:100::/46
2001:1490:106::-2001:1490:109:ffff:ffff:ffff:ffff:ffff
2001:1490:110::-2001:1490:116:ffff:ffff:ffff:ffff:ffff
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
5c:08:04:f9:68:44:8c:3e:99:82:15:cc:f9:f3:c2:47:1a:18:
19:36:6b:4b:be:3b:53:da:5f:d6:05:96:ce:49:40:7a:ba:ab:
d7:9c:dc:1a:cf:95:5c:f1:4d:fc:34:33:1d:f2:f6:b9:79:66:
7f:1b:81:c9:90:2d:e4:65:aa:16:ff:13:8d:33:89:da:1b:08:
6c:5f:75:4a:d1:18:fc:6f:86:fd:bf:b0:ae:84:cd:de:6e:bc:
4f:dc:05:85:e1:a7:e6:bf:a0:af:51:8e:19:c0:bb:98:ed:c5:
27:a2:fb:b9:3e:68:d2:82:5a:8b:93:ed:95:78:9d:41:0a:97:
ee:05:53:d7:12:3f:d7:4d:e4:c6:84:3b:e1:c5:44:89:13:13:
ce:ad:d2:28:1d:6e:8e:cf:eb:ff:7f:b6:f1:07:e7:ab:ad:75:
ff:3e:d3:e2:d2:ba:41:f2:c8:93:1f:6c:cc:cb:af:57:6a:04:
77:cd:97:e9:9c:9e:0b:0f:57:48:53:bf:06:b6:96:db:68:58:
df:ac:e4:37:ac:18:71:81:af:b6:5b:60:43:0e:09:c8:b3:5e:
27:22:25:1f:5c:0d:5d:c2:8c:6b:b1:32:75:31:a1:16:39:be:
bf:54:90:99:6d:c6:1a:75:26:4e:f4:2c:1e:03:4a:86:6a:88:
08:ee:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:28 2025 by rpki-client