Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vpSLvAvSq9FcA9tudjCwLDJ7pzg.roa
File: vpSLvAvSq9FcA9tudjCwLDJ7pzg.roa (raw, json)
Hash identifier: LreFE4ihMZSb/4CVTcJQCBOYgR1JBRYKD+5KTe5+aVU=
Subject key identifier: BE:94:8B:BC:0B:D2:AB:D1:5C:03:DB:6E:76:30:B0:2C:32:7B:A7:38
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199DCD175B5B6B455F58F7A75C0461D425A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vpSLvAvSq9FcA9tudjCwLDJ7pzg.roa
Signing time: Mon 13 Oct 2025 09:05:38 +0000
ROA not before: Mon 13 Oct 2025 09:05:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 193.25.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:d1:75:b5:b6:b4:55:f5:8f:7a:75:c0:46:1d:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 13 09:05:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be948bbc0bd2abd15c03db6e7630b02c327ba738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:8f:04:b0:36:f7:17:0c:ee:38:2e:5f:3e:
83:4a:f0:c0:fc:09:dd:6c:9c:e4:f1:88:1b:59:d1:
fb:8e:80:cf:2c:d6:1b:0e:c9:b9:36:93:5a:66:a1:
1e:97:51:d8:16:ee:e0:db:cf:2e:c6:e5:ac:44:b0:
05:cb:61:f0:c3:4d:9a:62:75:8c:53:59:d8:99:c6:
9d:ef:e3:88:ff:a6:16:18:e7:95:d7:ab:dc:ba:47:
21:5d:12:2b:17:c6:dd:f2:af:2e:d5:a2:95:83:f1:
25:d6:9c:73:6a:b0:a3:ab:29:68:1b:88:bd:2b:17:
ca:b5:8b:7a:95:f6:97:38:78:bb:70:e6:17:4a:f2:
9d:11:31:ab:de:14:c6:a5:cd:cc:36:ca:38:68:e2:
7e:2a:56:99:ed:4c:24:44:f1:95:c2:7b:18:d9:89:
b8:f4:e7:65:eb:5d:37:b0:f6:05:6c:a5:10:1b:5d:
3f:be:35:ff:23:f3:a2:4f:46:5e:57:36:92:e8:2f:
4e:a9:5f:1a:45:50:15:02:93:d7:0b:2f:ae:6d:e0:
51:2c:2b:e9:d5:2c:6e:6e:ae:9f:20:81:91:29:2a:
e7:01:b5:6b:40:1b:05:5f:12:b8:b0:19:78:6e:a0:
29:93:a7:06:59:42:b4:17:68:c3:8b:0a:da:2e:90:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:8B:BC:0B:D2:AB:D1:5C:03:DB:6E:76:30:B0:2C:32:7B:A7:38
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vpSLvAvSq9FcA9tudjCwLDJ7pzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:18:54:62:5d:0c:7c:ed:40:b7:5c:04:67:b0:59:21:f0:0f:
1e:6f:ed:7a:67:a5:88:8f:78:b0:6e:56:6f:5e:25:e5:63:67:
20:ae:ad:4f:c0:89:85:91:66:a3:70:35:61:97:23:c8:de:ba:
c0:bf:5f:dd:b9:25:ea:3d:91:0f:ac:0a:86:03:e5:59:82:4d:
c0:16:96:ee:7f:d8:51:e4:35:c2:5c:29:96:bf:b3:bb:32:68:
11:14:ac:d4:89:6a:26:42:d8:1f:aa:89:20:72:e0:63:a7:ef:
31:cc:85:8e:93:93:a9:58:41:a6:55:16:39:10:0c:fa:25:b2:
62:8a:ee:11:5d:f7:1b:17:c8:e7:6c:37:bc:b7:8b:86:65:7c:
ac:c2:22:e9:3c:e9:a5:1f:0c:b8:3b:df:e9:a5:ae:13:3f:d0:
6d:fc:1e:ca:40:b7:6c:59:da:8c:38:bf:14:0b:0b:65:be:8c:
e1:ef:aa:9a:3a:0e:23:f7:e6:5c:16:52:1f:d9:bd:81:67:36:
93:5e:cb:f0:67:31:80:65:1e:0e:e9:0f:06:ef:72:88:07:58:
c9:82:9f:7b:a7:c5:cb:94:5d:da:88:a7:f4:f8:3c:9b:5e:bc:
b3:80:7d:02:08:b2:9b:75:68:93:5a:6b:5d:34:3a:17:09:4f:
af:d4:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:16 2025 by rpki-client