Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VKY8dcHGQDmUTllPwIhIIN1m0u4.roa
File: VKY8dcHGQDmUTllPwIhIIN1m0u4.roa (raw, json)
Hash identifier: gZS90FuJwa6MvK0o75EUYOqliIgxAY3dlC24WqH4Sqs=
Subject key identifier: 54:A6:3C:75:C1:C6:40:39:94:4E:59:4F:C0:88:48:20:DD:66:D2:EE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199CCE9315D92654AC35A50167B179E5BF3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VKY8dcHGQDmUTllPwIhIIN1m0u4.roa
Signing time: Fri 10 Oct 2025 06:57:38 +0000
ROA not before: Fri 10 Oct 2025 06:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 5.231.226.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:e9:31:5d:92:65:4a:c3:5a:50:16:7b:17:9e:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 10 06:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54a63c75c1c64039944e594fc0884820dd66d2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:84:e5:7e:3b:f3:1e:a7:94:b8:e5:f0:5f:
f6:a4:71:c5:4f:64:a3:32:c1:e2:1a:c3:75:6a:a7:
78:ff:ef:36:4e:36:8a:6f:53:21:e2:a6:2d:85:c5:
1c:d0:2b:52:95:11:82:09:df:44:6b:db:2b:ac:42:
c9:0a:f3:da:d3:98:23:73:79:ac:f6:fe:0a:e8:ea:
00:30:3d:66:a6:02:99:87:02:0d:14:32:24:a0:47:
3c:4e:84:34:04:d3:05:c4:97:5a:78:e6:40:07:89:
61:f4:48:9c:7d:de:58:f8:56:fe:bc:39:9a:71:c3:
55:ed:bb:60:c8:74:cb:34:ee:97:8b:5d:19:f5:fb:
f9:58:a1:72:f3:75:2c:d0:31:cd:f0:56:27:49:de:
86:08:3d:90:ad:87:71:78:fd:9e:80:db:a5:63:9e:
cb:3c:50:18:a4:63:a0:ec:66:80:82:c3:b3:36:cb:
e2:87:7f:14:87:c8:bc:63:96:49:ff:b8:0e:ec:83:
69:3f:38:43:ec:ee:72:c3:d8:f8:12:df:9b:69:50:
70:c3:94:26:66:f5:56:65:d6:a7:18:66:ca:86:25:
4d:4a:5c:44:48:5e:a9:83:1e:e0:6f:10:65:d4:46:
f6:97:99:ac:23:97:48:86:d3:23:a0:dc:87:61:75:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A6:3C:75:C1:C6:40:39:94:4E:59:4F:C0:88:48:20:DD:66:D2:EE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VKY8dcHGQDmUTllPwIhIIN1m0u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.226.0/24
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1a:40:50:68:d6:1d:b4:3c:e4:7c:89:a9:98:5c:bf:31:a1:
51:64:c3:d8:dc:3b:2c:61:3b:81:e9:a5:6b:43:22:0a:5f:86:
17:01:07:94:00:3d:ba:c2:1d:eb:a1:73:7d:62:99:8c:e0:69:
b1:64:f4:2b:ab:f1:84:d6:e6:7a:34:9b:32:bf:de:7e:bf:dc:
bd:93:c2:e3:8d:9a:a7:52:46:9d:bb:db:c9:30:ec:e0:91:48:
08:f5:5a:41:02:7c:cc:99:7a:6f:84:be:e5:cd:99:0d:c5:22:
87:d2:21:c3:72:b1:b7:92:96:24:bf:a9:9a:fb:bd:13:c0:f7:
2f:f9:d2:5f:b0:92:66:32:aa:42:d5:fd:04:69:e4:75:71:39:
de:9d:3e:75:cb:95:a5:ad:f4:c5:c9:55:6c:ca:92:af:f3:6d:
74:97:9b:0c:b3:7d:41:92:d0:8d:1b:cf:b9:df:07:6d:76:d4:
8d:36:fb:7a:f0:e3:0c:65:c8:4f:c9:52:4a:55:fa:25:cf:4a:
85:ac:be:68:b6:55:45:69:56:d8:ff:45:fa:ab:c6:97:1f:c4:
4a:bf:a6:e2:a2:e1:32:06:ba:26:8c:4c:00:56:b3:63:11:86:
c5:cb:bc:cc:c8:b1:a2:35:eb:d2:4a:fb:33:94:a3:d9:2b:17:
00:6f:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:06 2025 by rpki-client