Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vr6gvvcJMtRVDKroJfsyB7a8ED8.roa
File: Vr6gvvcJMtRVDKroJfsyB7a8ED8.roa (raw, json)
Hash identifier: s4CUM076Yc3vunitTikMyN8PqIzjH0Y2OY0GMLE0CzI=
Subject key identifier: 56:BE:A0:BE:F7:09:32:D4:55:0C:AA:E8:25:FB:32:07:B6:BC:10:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198C1A669EC1ACD94A8BE70E51708D78672
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vr6gvvcJMtRVDKroJfsyB7a8ED8.roa
Signing time: Tue 19 Aug 2025 09:26:05 +0000
ROA not before: Tue 19 Aug 2025 09:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50225
IP address blocks: 141.98.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:a6:69:ec:1a:cd:94:a8:be:70:e5:17:08:d7:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 09:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56bea0bef70932d4550caae825fb3207b6bc103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:81:ec:ef:46:02:21:dc:39:eb:aa:9b:e5:
dc:65:6c:4b:7b:b0:e4:2b:4d:1f:51:0d:a0:00:d7:
35:89:46:ae:1d:14:44:3a:fb:79:9d:61:61:ac:43:
10:fb:3c:f4:17:ef:ac:a1:ec:d4:c6:6e:d9:1d:dd:
25:fc:06:0d:9c:b0:65:4f:14:c8:85:8c:34:bb:77:
26:44:8b:4d:fd:ff:6a:26:e5:76:47:a3:5f:70:9b:
38:4f:10:ca:2a:76:41:55:6e:ba:8d:9a:35:f2:3e:
cc:16:a0:e3:81:04:e3:52:8c:ad:2d:d5:79:a7:f8:
c0:09:d9:32:9b:ee:15:b2:58:02:db:2c:27:8b:2e:
c4:e9:5e:14:02:d0:38:6d:0f:51:6e:cf:ca:1d:7a:
9a:42:8f:22:f6:36:62:2b:81:01:56:3c:dc:86:0a:
6c:a0:ec:c9:c9:b3:6e:8c:2f:14:7f:bf:07:d9:af:
55:9d:05:be:96:d3:07:56:6d:39:6e:66:32:c2:5b:
28:24:5f:30:5c:75:2e:02:f0:9e:e3:3b:80:d7:24:
6c:60:7b:44:ef:f4:59:7b:aa:f3:25:0f:90:6e:82:
3f:34:06:fc:22:d7:b1:a9:96:b6:20:13:ca:d6:ed:
90:3c:07:5f:2a:46:d9:6e:c1:d1:24:38:9d:7d:8a:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:A0:BE:F7:09:32:D4:55:0C:AA:E8:25:FB:32:07:B6:BC:10:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vr6gvvcJMtRVDKroJfsyB7a8ED8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:74:14:08:35:89:71:8a:aa:31:20:31:13:f2:0d:29:be:7a:
05:d0:15:cf:87:96:1d:97:9e:c1:14:8a:6d:86:d0:d0:64:d2:
7c:02:84:88:b6:f5:c4:fb:7a:47:0b:50:d7:f1:2c:b9:77:8e:
f9:44:d2:e8:0a:bf:69:24:76:b2:48:8d:50:90:0b:b5:92:f2:
c2:4d:db:89:00:93:a7:57:ef:fd:65:bc:85:7d:19:7e:c6:56:
75:42:25:cd:31:90:bd:24:ce:18:31:d5:c1:62:4d:a0:4d:04:
d5:b9:3d:d3:73:3b:16:bb:b9:2d:15:1b:a2:63:2c:b6:f1:57:
26:e4:2c:39:47:88:55:e0:db:fc:fd:72:bb:27:3a:2e:42:f8:
0c:f2:1a:e6:93:73:2b:87:bd:55:fe:20:e9:fd:e8:4c:62:1e:
9d:69:2e:4a:88:7e:44:b7:a4:28:0b:8d:46:e4:87:78:20:cb:
4a:c1:e9:b0:d7:5e:2d:38:78:fa:4b:68:f7:3f:b9:9d:af:98:
30:37:0b:f4:86:6d:10:bd:bd:59:76:b9:68:ed:80:b0:2b:9e:
c1:3b:8e:d3:31:2e:23:85:d6:c8:31:06:08:68:91:af:8e:a8:
e7:f3:b3:68:4c:76:e4:40:b9:2f:34:99:a9:e8:a8:65:1c:19:
4e:7a:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:39 2025 by rpki-client