
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VOzWkHIaCC7eYl6t9F85nRa8bkg.roa
File: VOzWkHIaCC7eYl6t9F85nRa8bkg.roa (raw, json)
Hash identifier: xY2hAOApfRFWWqk0T1Awsm6MAg8hpqg0hVcxNyZScMs=
Subject key identifier: 54:EC:D6:90:72:1A:08:2E:DE:62:5E:AD:F4:5F:39:9D:16:BC:6E:48
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0199AF6959F787BAD3E50EFB4D1D23BBFFFB
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VOzWkHIaCC7eYl6t9F85nRa8bkg.roa
Signing time: Sat 04 Oct 2025 13:29:01 +0000
ROA not before: Sat 04 Oct 2025 13:29:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214931
IP address blocks: 2a14:67c1:c700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:af:69:59:f7:87:ba:d3:e5:0e:fb:4d:1d:23:bb:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Oct 4 13:29:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ecd690721a082ede625eadf45f399d16bc6e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:63:08:1a:a9:78:49:a0:23:1c:7b:b3:12:
83:81:d8:e7:25:48:85:e2:41:2e:c7:00:04:06:b5:
e1:80:6f:64:05:a5:38:37:09:61:1e:bc:61:5a:93:
42:6a:a9:32:dc:11:21:aa:8f:4b:c8:2f:74:6f:b3:
4f:6e:c1:81:a3:af:60:85:c4:59:6d:06:03:d2:1c:
64:d0:a6:d7:54:72:50:e2:c3:1a:50:5f:b0:0b:9d:
1e:c1:d6:bd:42:c2:6f:68:cc:8e:53:f4:ad:b4:da:
ed:6a:58:5d:9e:55:ed:c0:3e:a2:05:c0:28:fc:d4:
32:07:4e:f9:6b:ae:75:79:0c:c7:fe:fd:63:32:ab:
14:e8:ec:28:40:14:0b:40:15:1a:b5:1a:fb:15:4b:
1e:5f:bf:37:6f:85:b2:5e:23:39:ee:15:72:c6:db:
63:af:b5:cb:b3:9f:31:c5:56:3d:07:ea:cd:b9:fa:
78:6b:95:f7:37:09:65:04:5c:f6:4a:96:a6:d5:a9:
5b:3e:08:6a:25:6e:33:fc:60:71:be:10:fa:41:7d:
79:dd:2f:81:e4:b7:51:dd:15:d5:5d:2d:54:3f:c5:
01:c4:f1:5d:c9:72:ea:b1:a1:06:fc:09:68:60:84:
a9:e7:5e:79:8e:90:7b:f5:f8:82:94:ef:e5:f1:26:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:D6:90:72:1A:08:2E:DE:62:5E:AD:F4:5F:39:9D:16:BC:6E:48
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VOzWkHIaCC7eYl6t9F85nRa8bkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:c700::/40
Signature Algorithm: sha256WithRSAEncryption
30:df:75:9e:86:1b:c8:c7:33:62:ac:68:ea:86:94:14:2c:38:
ef:f1:de:20:3c:ee:87:f4:40:ec:c3:53:a9:e7:41:2b:e9:b6:
6e:10:c0:27:e4:72:54:b6:f5:26:e8:dd:ab:b3:6a:c7:63:c3:
90:2b:c7:28:90:fd:aa:9d:ba:80:d6:0b:96:bf:a4:9a:a1:e5:
b9:ec:dc:cf:97:d0:8e:98:73:62:72:06:3d:b5:ab:c4:46:88:
4d:5f:a4:ee:f6:fb:1b:ae:d8:6e:1a:80:b0:7d:ec:60:4d:c7:
02:96:88:78:53:17:3f:cf:5c:60:42:72:f0:49:39:20:67:db:
8d:3b:e1:c7:77:8a:0c:2a:f4:61:c3:86:74:c2:9e:97:d0:21:
0d:43:5f:6d:e4:2f:4c:5b:cd:1a:be:1d:9a:a7:29:1e:6c:73:
fc:48:20:36:a6:7e:8a:52:dd:d6:ee:d9:6f:b6:1f:c7:5d:44:
64:e7:24:9b:54:42:6f:79:fa:2d:03:e0:30:56:8e:ca:83:1b:
28:b9:d3:13:16:ca:10:0d:9b:11:7f:0b:ce:39:fb:09:4b:89:
15:ff:6a:34:b5:6e:27:76:7f:42:d8:98:6b:96:d3:36:2f:e6:
2c:54:16:2c:fc:10:ec:db:4d:f7:d2:88:6f:c5:be:9f:7f:a5:
a5:c9:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:25 2025 by rpki-client