Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-VpnVXv-OAaHXZ_I_69ET6t3XXA.roa
File: 1-VpnVXv-OAaHXZ_I_69ET6t3XXA.roa (raw, json)
Hash identifier: WaQRREKJG5KArsBYPF9givP7GzJPTTq30lPAgQadsDY=
Subject key identifier: F9:5A:67:55:7B:FE:38:06:87:5D:9F:C8:FF:AF:44:4F:AB:77:5D:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197632B19101EC63A8CD990D6806A03211F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-VpnVXv-OAaHXZ_I_69ET6t3XXA.roa
Signing time: Thu 12 Jun 2025 08:04:18 +0000
ROA not before: Thu 12 Jun 2025 08:04:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 91.92.244.0/22 maxlen: 22
94.156.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:2b:19:10:1e:c6:3a:8c:d9:90:d6:80:6a:03:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 12 08:04:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f95a67557bfe3806875d9fc8ffaf444fab775d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:71:d1:6f:ca:5b:8d:7a:25:ce:70:be:74:
69:9a:57:1e:8d:0e:b4:10:f1:9d:a0:d4:42:66:1d:
18:7e:0e:a7:71:d3:03:f6:b6:a7:f7:17:da:83:17:
22:7a:45:cf:94:0b:60:50:29:a0:a2:66:08:bc:97:
f8:b2:33:ec:a9:48:99:6c:7d:11:ec:83:70:13:f9:
ec:28:ff:7c:75:ce:5a:3f:d1:b2:98:6f:97:7d:80:
14:5e:cf:a6:88:10:bd:60:e9:dd:8b:34:32:15:e3:
3d:ec:0d:a8:85:d2:9c:f2:99:8a:90:90:e2:44:49:
c2:ae:41:ee:b7:36:88:ae:25:ec:95:8f:b1:d5:75:
29:a2:ad:8c:23:1c:4e:7a:1f:44:b5:da:7a:d1:33:
ce:ef:c1:ef:2f:45:86:74:ed:b4:1f:59:99:d5:4c:
34:91:50:18:d0:e2:0d:78:df:87:f8:1c:f9:6a:6c:
3b:d6:63:ca:24:77:01:5e:36:a1:86:ea:c4:7d:fc:
03:14:25:cd:60:82:67:da:eb:f2:41:95:d8:1d:ea:
25:8a:cc:22:f8:fa:86:32:6b:46:7c:ee:20:92:60:
5a:91:df:62:60:f4:16:14:37:3e:63:e0:f3:41:03:
04:4f:90:cc:20:7a:04:63:73:b1:56:19:0b:46:93:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:67:55:7B:FE:38:06:87:5D:9F:C8:FF:AF:44:4F:AB:77:5D:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-VpnVXv-OAaHXZ_I_69ET6t3XXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.244.0/22
94.156.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:53:dd:f0:4f:87:51:9a:57:8b:c0:d7:c5:a7:4c:f3:25:bb:
18:5e:58:d4:d3:0f:58:fa:d3:23:83:98:42:33:45:4a:0e:22:
26:2b:e9:12:a0:e5:44:06:33:ef:b9:53:2a:60:81:c4:89:47:
3c:31:3d:f1:8b:28:9f:0a:08:27:e6:c6:25:50:b2:b7:f7:8d:
59:98:75:eb:91:5b:21:88:d4:51:2b:98:d3:56:be:82:e0:17:
b8:83:87:3c:e9:29:df:36:31:b4:64:ff:bc:42:bb:43:04:5c:
a3:6e:7e:f4:66:c8:0f:9e:ee:9d:e5:1f:44:3b:d4:e6:82:b6:
49:a7:8f:52:83:15:e0:dd:5a:da:5a:b6:37:64:b9:45:f6:20:
a6:bb:91:9a:5e:64:25:03:4f:2e:c5:22:69:46:f5:8b:06:fa:
4e:60:e8:94:5d:ee:d4:24:35:e5:69:ca:76:80:a1:20:44:d4:
ba:f2:07:cc:c0:56:7d:70:66:c6:e6:28:c7:50:f7:7a:c7:90:
c5:30:f4:95:b6:0f:dd:e9:e2:60:c5:46:19:32:9d:80:ac:7d:
4d:8c:2d:06:25:df:d9:43:f4:92:79:74:b1:3a:6d:73:50:40:
77:e1:10:70:63:e5:93:eb:3a:25:b1:5d:12:74:12:8c:a3:0d:
34:53:a3:00
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZdjKxkQHsY6jNmQ1oBqAyEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNjEyMDgwNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTVhNjc1NTdiZmUzODA2ODc1ZDlmYzhmZmFmNDQ0ZmFiNzc1ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/dx0W/KW416Jc5wvnRpmlcejQ60
EPGdoNRCZh0Yfg6ncdMD9ran9xfagxciekXPlAtgUCmgomYIvJf4sjPsqUiZbH0R
7INwE/nsKP98dc5aP9GymG+XfYAUXs+miBC9YOndizQyFeM97A2ohdKc8pmKkJDi
REnCrkHutzaIriXslY+x1XUpoq2MIxxOeh9Etdp60TPO78HvL0WGdO20H1mZ1Uw0
kVAY0OINeN+H+Bz5amw71mPKJHcBXjahhurEffwDFCXNYIJn2uvyQZXYHeoliswi
+PqGMmtGfO4gkmBakd9iYPQWFDc+Y+DzQQMET5DMIHoEY3OxVhkLRpPePwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPlaZ1V7/jgGh12fyP+vRE+rd11wMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMS1WcG5WWHYtT0FhSFhaX0lfNjlFVDZ0M1hYQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx
Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAltc9AME
Al6cQDANBgkqhkiG9w0BAQsFAAOCAQEAGlPd8E+HUZpXi8DXxadM8yW7GF5Y1NMP
WPrTI4OYQjNFSg4iJivpEqDlRAYz77lTKmCBxIlHPDE98YsonwoIJ+bGJVCyt/eN
WZh165FbIYjUUSuY01a+guAXuIOHPOkp3zYxtGT/vEK7QwRco25+9GbID57uneUf
RDvU5oK2SaePUoMV4N1a2lq2N2S5RfYgpruRml5kJQNPLsUiaUb1iwb6TmDolF3u
1CQ15WnKdoChIETUuvIHzMBWfXBmxuYox1D3eseQxTD0lbYP3eniYMVGGTKdgKx9
TYwtBiXf2UP0knl0sTptc1BAd+EQcGPlk+s6JbFdEnQSjKMNNFOjAA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:36 2025 by rpki-client