Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VSWFLR0TdpHzgz-2RY7tA3VR8TE.roa
File: VSWFLR0TdpHzgz-2RY7tA3VR8TE.roa (raw, json)
Hash identifier: H6dibTyKWdB3QM85BWZdHsn8W23jvZah0qRGtGgN8zk=
Subject key identifier: 55:25:85:2D:1D:13:76:91:F3:83:3F:B6:45:8E:ED:03:75:51:F1:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019883CDD0BF487DE08F8DF34BCA82305FA8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VSWFLR0TdpHzgz-2RY7tA3VR8TE.roa
Signing time: Thu 07 Aug 2025 09:12:40 +0000
ROA not before: Thu 07 Aug 2025 09:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:cd:d0:bf:48:7d:e0:8f:8d:f3:4b:ca:82:30:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 09:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5525852d1d137691f3833fb6458eed037551f131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:45:08:11:e0:e3:fb:14:aa:d3:7e:d7:ea:
fb:16:8e:90:8d:65:f9:f6:d0:04:59:02:d4:2e:67:
60:45:d4:2e:fd:a9:ab:ed:52:ba:91:66:ed:a2:ab:
59:41:84:22:03:27:6e:89:73:ec:5b:18:de:15:04:
0d:ce:ba:21:07:3a:ee:8f:c8:91:1a:b5:32:3e:62:
48:6a:b9:21:25:ad:69:5d:a2:2f:1c:5e:be:83:3d:
44:ca:df:05:aa:79:6a:b4:b4:6c:45:93:f1:54:b6:
b8:f1:de:a4:1f:0d:8b:dc:b9:57:19:1f:a5:2d:b8:
33:c7:51:09:4b:be:61:64:85:40:b7:a5:af:9f:45:
7c:9e:89:5a:00:e7:05:19:66:57:7f:dc:1a:22:64:
c7:d7:f6:c9:73:ca:5c:29:bd:bc:b7:62:82:a6:39:
32:25:f1:b5:5f:3e:74:05:57:a3:62:5c:06:f0:3c:
04:bf:90:ea:04:b8:7f:6f:e3:15:ff:7c:88:e3:f5:
5e:b4:a8:80:c2:e7:ac:fc:bb:0e:33:e4:2c:c0:09:
49:d0:90:5d:2f:97:32:69:ed:e3:4a:19:0b:c4:02:
c3:37:3f:8c:13:0d:37:eb:cf:35:e2:dc:08:a0:11:
02:51:f9:43:be:26:44:e8:2d:75:20:a5:4c:9c:34:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:85:2D:1D:13:76:91:F3:83:3F:B6:45:8E:ED:03:75:51:F1:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VSWFLR0TdpHzgz-2RY7tA3VR8TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
87:2c:c3:f6:d0:e9:f3:22:e0:0f:7c:6c:66:54:11:57:3d:67:
71:3d:f9:3e:79:17:56:ab:e4:f5:0d:c5:0a:9b:83:e7:fe:f5:
ac:48:ac:cf:c4:85:5f:26:c6:47:bf:60:b9:08:45:e6:1d:01:
56:c0:31:f2:7c:1f:51:75:92:a5:4b:b2:16:bb:1b:e8:ac:2a:
81:72:6f:32:bc:24:34:34:a3:bf:92:60:a1:07:3c:15:f4:69:
05:69:b1:d8:d8:26:0a:aa:74:2e:7b:ca:33:a6:0b:9f:e4:63:
4f:9a:b8:ab:d3:b0:e0:7e:1f:1d:0d:b4:71:46:f1:1f:89:24:
a4:b8:a7:0f:ba:5c:03:8a:29:2b:3b:c9:44:ac:fb:1b:40:eb:
55:42:fc:ff:ce:e3:5f:07:ee:f3:e9:b0:21:07:e2:ae:33:9a:
57:9e:52:df:aa:44:99:b0:52:7a:15:bc:62:3d:8d:32:92:72:
52:3b:ab:c7:ee:42:3b:86:cc:da:3d:db:b1:c6:07:ad:dd:69:
2d:fe:de:f1:5d:0c:2e:29:3c:7c:06:ae:40:ea:ac:69:ee:de:
ec:6c:5b:35:f5:c5:41:db:74:41:05:5a:b4:35:ff:1d:b6:1f:
38:b3:cc:52:e9:2a:e6:42:31:38:ec:42:13:98:d6:44:5d:d1:
96:c1:58:6c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZiDzdC/SH3gj43zS8qCMF+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwODA3MDkxMjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI1ODUyZDFkMTM3NjkxZjM4MzNmYjY0NThlZWQwMzc1NTFmMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3FFCBHg4/sUqtN+1+r7Fo6QjWX5
9tAEWQLULmdgRdQu/amr7VK6kWbtoqtZQYQiAyduiXPsWxjeFQQNzrohBzruj8iR
GrUyPmJIarkhJa1pXaIvHF6+gz1Eyt8FqnlqtLRsRZPxVLa48d6kHw2L3LlXGR+l
Lbgzx1EJS75hZIVAt6Wvn0V8nolaAOcFGWZXf9waImTH1/bJc8pcKb28t2KCpjky
JfG1Xz50BVejYlwG8DwEv5DqBLh/b+MV/3yI4/VetKiAwues/LsOM+QswAlJ0JBd
L5cyae3jShkLxALDNz+MEw0368814twIoBECUflDviZE6C11IKVMnDR3GQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFUlhS0dE3aR84M/tkWO7QN1UfExMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVlNXRkxSMFRkcEh6Z3otMlJZN3RBM1ZSOFRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBV3hEAwQB
V3k8AwQBXXtKAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQCHLMP20OnzIuAPfGxm
VBFXPWdxPfk+eRdWq+T1DcUKm4Pn/vWsSKzPxIVfJsZHv2C5CEXmHQFWwDHyfB9R
dZKlS7IWuxvorCqBcm8yvCQ0NKO/kmChBzwV9GkFabHY2CYKqnQue8ozpguf5GNP
mrir07Dgfh8dDbRxRvEfiSSkuKcPulwDiikrO8lErPsbQOtVQvz/zuNfB+7z6bAh
B+KuM5pXnlLfqkSZsFJ6FbxiPY0yknJSO6vH7kI7hszaPduxxget3Wkt/t7xXQwu
KTx8Bq5A6qxp7t7sbFs19cVB23RBBVq0Nf8dth84s8xS6SrmQjE47EITmNZEXdGW
wVhs
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:55:27 2025 by rpki-client