Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa
File: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (raw, json)
Hash identifier: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=
Subject key identifier: 2D:13:3D:FD:05:C9:F3:A9:4B:9F:F4:F8:CA:BE:A9:41:9B:1D:FB:A5
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01985B6451968E670D9F6B834F8089E77C9C
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa
Signing time: Wed 30 Jul 2025 12:52:37 +0000
ROA not before: Wed 30 Jul 2025 12:52:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 46.218.0.0/16 maxlen: 24
77.104.0.0/18 maxlen: 24
82.101.0.0/18 maxlen: 24
83.145.64.0/18 maxlen: 24
89.224.0.0/14 maxlen: 24
92.102.0.0/15 maxlen: 24
185.204.172.0/22 maxlen: 24
195.167.192.0/20 maxlen: 24
195.167.224.0/20 maxlen: 24
195.248.0.0/19 maxlen: 19
212.99.0.0/17 maxlen: 24
212.103.0.0/19 maxlen: 24
213.30.128.0/18 maxlen: 24
213.244.0.0/19 maxlen: 24
217.66.112.0/20 maxlen: 24
2a02:e000::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:64:51:96:8e:67:0d:9f:6b:83:4f:80:89:e7:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jul 30 12:52:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d133dfd05c9f3a94b9ff4f8cabea9419b1dfba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:e1:08:28:4f:83:6c:c4:c3:50:22:d1:c7:
86:43:d6:90:2d:70:67:8a:9e:38:96:fb:d0:65:05:
8d:04:45:44:87:78:fd:f5:67:b1:91:b6:5e:35:6b:
12:4a:c9:08:18:ae:c9:03:56:48:32:77:3f:94:d8:
62:12:61:69:5d:3e:e9:0e:48:97:07:c2:99:67:d1:
59:3c:a5:cb:ba:af:2a:f9:87:bf:b2:84:34:36:0c:
7a:47:86:47:9f:33:74:9f:eb:7d:9b:23:eb:55:25:
a8:e2:f3:47:9f:1c:92:78:c1:d1:98:ee:c3:12:80:
28:33:82:74:a3:42:a9:c3:d6:bd:90:f7:15:86:b4:
8a:d1:33:f3:d3:e4:46:4d:b3:2d:83:59:ae:66:c1:
f7:f8:77:6c:29:af:d4:4c:53:6a:5b:ce:a9:1f:8e:
b6:7d:65:e0:a5:4f:4b:7f:e8:f0:87:12:72:ff:d5:
3f:c0:e2:a4:7f:fd:f7:e8:57:2b:c4:86:c1:e7:15:
82:b7:b6:fc:66:ed:7d:f8:b1:f3:ae:64:55:1c:18:
a3:b6:3b:3b:82:7e:9d:06:72:f9:8b:51:74:58:e8:
be:33:c8:d1:35:4a:9f:06:05:16:80:2a:4d:a8:c6:
29:f6:32:c1:7f:4d:9e:80:4b:03:c3:ae:7a:00:7d:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:3D:FD:05:C9:F3:A9:4B:9F:F4:F8:CA:BE:A9:41:9B:1D:FB:A5
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
89.224.0.0/14
92.102.0.0/15
185.204.172.0/22
195.167.192.0/20
195.167.224.0/20
195.248.0.0/19
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
07:3b:21:b9:ed:c7:2d:72:cd:d7:62:88:c2:e9:65:4f:68:fe:
47:a4:2e:10:6d:ef:3e:e9:5a:0a:6f:cd:43:93:36:32:4f:d0:
27:1c:8f:3f:04:27:44:50:7f:39:f2:d9:d3:98:26:6e:d4:0f:
5a:fd:52:4d:b6:b4:37:c8:b6:72:a1:36:a7:bc:64:c4:7e:d8:
01:3f:75:e8:ad:98:7c:8b:60:7f:40:e4:21:f1:8b:3d:54:56:
cf:48:09:5d:f3:7c:cb:bf:b3:2e:98:98:84:4c:8b:1b:b6:22:
a5:77:44:c6:06:9f:ec:7c:98:1a:d6:b1:88:69:4b:3a:cb:c1:
56:d7:6a:c3:32:13:cc:b1:cb:8c:56:54:79:25:56:a4:ae:a8:
ea:0f:26:39:a4:17:06:54:27:34:3b:95:11:29:72:ae:a8:7a:
56:c6:07:a7:a5:ff:34:1e:b2:9e:53:52:fd:76:b7:cf:0d:c3:
0a:8b:e7:cd:6a:e4:d3:f1:26:2c:a3:b4:81:ea:3b:f6:c0:17:
1f:10:9f:01:7d:fe:ca:7c:77:d5:63:82:ff:c5:dc:35:f5:86:
59:69:1a:a7:2f:e1:49:b1:2e:18:90:13:05:08:8c:df:5b:6f:
50:d2:f2:f8:8e:78:5c:f8:a5:d8:82:14:ee:5e:7e:b5:ae:c0:
15:5c:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:02 2025 by rpki-client