Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vqCYytr656-5qwzz_SzH0J7pi94.roa
File: vqCYytr656-5qwzz_SzH0J7pi94.roa (raw, json)
Hash identifier: 1ca6Mr2fVZifRQTVZXQ7XybNkNJObVlnUkaU1C9xCCg=
Subject key identifier: BE:A0:98:CA:DA:FA:E7:AF:B9:AB:0C:F3:FD:2C:C7:D0:9E:E9:8B:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198A17E49DEDBADC6E6E007059AA94BF560
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vqCYytr656-5qwzz_SzH0J7pi94.roa
Signing time: Wed 13 Aug 2025 03:34:24 +0000
ROA not before: Wed 13 Aug 2025 03:34:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:7e:49:de:db:ad:c6:e6:e0:07:05:9a:a9:4b:f5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 13 03:34:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bea098cadafae7afb9ab0cf3fd2cc7d09ee98bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:cb:9b:48:cc:fe:55:69:5c:4e:7d:cf:15:
e2:92:73:8b:5e:8d:29:cc:54:fe:9d:b4:24:fc:da:
52:9b:da:e7:a1:57:18:d5:5b:88:57:e4:6e:f1:86:
fa:a8:f7:83:b6:af:fe:25:ea:41:99:3e:55:32:f8:
3b:0d:51:45:f4:92:a1:20:9e:96:f8:59:22:55:48:
f9:19:a2:14:83:40:4f:0e:2f:1d:a2:77:77:f3:db:
8f:a4:72:9a:81:77:38:e2:5f:5b:cd:a8:11:a3:cf:
bd:75:2d:af:6e:6d:2a:b5:c7:ac:59:96:ba:0d:5a:
1b:eb:49:02:f6:18:ff:6d:29:17:a4:eb:df:f4:1b:
24:4d:8e:4b:80:1a:68:91:12:51:f5:d8:55:de:e2:
bb:3f:a2:e8:6d:0c:4c:18:d4:fa:f5:3c:3a:aa:e3:
22:eb:ce:4b:fb:17:c0:0b:96:d3:58:e9:10:eb:7b:
cc:8d:33:52:23:cb:9a:86:fa:01:9b:d7:06:f5:51:
08:ca:6f:02:c1:6b:09:48:fd:5e:70:6a:24:d6:ad:
db:c7:3e:10:9c:5e:0d:29:0c:4d:de:ca:12:37:51:
1b:bd:04:bd:5d:4d:cb:a2:84:ac:e1:53:c2:22:11:
7e:c5:d5:ba:c4:08:10:e2:03:62:f9:4a:ca:a1:90:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:98:CA:DA:FA:E7:AF:B9:AB:0C:F3:FD:2C:C7:D0:9E:E9:8B:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vqCYytr656-5qwzz_SzH0J7pi94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.37.0/24
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4c:01:8c:4f:20:de:ea:33:35:ea:fb:0a:23:8b:c9:12:97:
89:31:45:db:10:27:f5:99:11:1c:68:e4:68:a5:fb:1a:8f:4c:
9f:d7:5b:6e:96:93:36:30:e2:26:bf:02:e9:70:3e:38:b7:8c:
3b:62:87:fa:fc:28:04:d4:9e:b1:4b:26:3b:bc:f9:cf:0a:a8:
fc:f9:4b:bc:a0:fb:77:10:09:b4:c0:64:f7:b5:38:fa:bc:11:
ce:9b:ef:b2:68:82:54:60:7f:f4:01:86:88:9a:f4:37:a0:ac:
fb:b2:16:3c:67:14:ee:34:52:75:8c:f0:ac:92:ff:26:8b:e7:
aa:38:83:3e:c1:4e:ac:24:27:a6:4a:5a:bd:cf:ee:e9:bd:01:
f2:2f:8a:b3:6e:ad:1d:41:06:36:33:73:58:45:db:85:97:3e:
82:5d:23:07:19:0f:1f:3a:30:85:32:ca:26:df:4f:cc:0b:8f:
3f:7d:a9:65:8e:c3:f6:3d:6f:bd:bd:82:0b:39:cc:b3:02:31:
81:55:dd:4f:16:f3:57:aa:c3:c1:81:5b:d9:99:c2:68:d8:d9:
d9:aa:8b:75:e1:da:29:a0:6d:b5:97:18:fd:85:b0:54:9a:2d:
98:76:41:9b:76:f2:be:0a:00:7e:5e:88:75:d2:a2:a5:22:64:
8d:ec:26:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:11 2025 by rpki-client