
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1vnm_kEik2dB3-1qf2aCGK1KUrg.roa
File: 1vnm_kEik2dB3-1qf2aCGK1KUrg.roa (raw, json)
Hash identifier: 6FuXUSgDq/YjhS84Sn5sPhmpbKP0Hq7SG/XFd8FaBoM=
Subject key identifier: D6:F9:E6:FE:41:22:93:67:41:DF:ED:6A:7F:66:82:18:AD:4A:52:B8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0199CEE2909C79635D8A5D547E346477BB27
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1vnm_kEik2dB3-1qf2aCGK1KUrg.roa
Signing time: Fri 10 Oct 2025 16:09:38 +0000
ROA not before: Fri 10 Oct 2025 16:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:e2:90:9c:79:63:5d:8a:5d:54:7e:34:64:77:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 10 16:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f9e6fe4122936741dfed6a7f668218ad4a52b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:66:89:c3:df:b4:29:10:54:50:63:7e:be:
d7:22:35:1d:36:2a:75:25:5e:6b:82:b8:44:00:71:
48:cc:7f:36:a1:0f:db:2d:c2:80:c2:c4:0d:58:4c:
23:95:4d:cb:e0:2d:c5:13:52:e4:df:9c:07:99:56:
26:8e:9c:2a:b4:3d:43:10:f9:b6:cf:7a:e9:c4:a4:
f6:7c:4a:32:94:7b:91:b2:a9:b5:f9:30:40:c3:1e:
b5:61:93:2b:ec:b8:43:c6:39:33:9b:13:3a:aa:a7:
e5:cb:cc:2a:6e:3e:5c:cb:37:7c:fa:ec:71:a9:e1:
be:a7:4c:34:c7:04:66:dc:ad:01:36:91:b7:8b:a8:
b7:98:55:cb:62:17:e3:7a:1a:d2:3f:69:60:fb:28:
ba:05:2b:47:4c:61:6c:05:36:91:85:a8:cb:e7:25:
6d:ea:4b:c6:b6:32:f2:da:9b:5e:3c:51:85:c8:7b:
fd:d0:84:6a:d2:ba:26:17:a1:17:a3:3f:61:01:f9:
2f:c7:30:65:32:03:c5:62:60:a4:77:f2:35:6f:fb:
d7:e6:0d:91:0e:19:0d:fa:45:4a:ef:44:e9:b3:7b:
a6:cc:fd:7a:dc:bc:52:8f:f4:4a:a4:f3:68:ee:4c:
f5:16:20:86:c9:5f:dc:ce:3a:55:3d:a1:8b:7d:a4:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:E6:FE:41:22:93:67:41:DF:ED:6A:7F:66:82:18:AD:4A:52:B8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1vnm_kEik2dB3-1qf2aCGK1KUrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4a:1a:dd:03:6e:47:a4:59:b3:69:4a:82:ea:f4:06:ed:23:
54:00:ae:e2:4c:7f:6b:2c:89:92:1d:71:27:ab:3e:f6:8a:ee:
5d:a7:dc:2e:81:2a:b5:82:b3:dd:0f:25:d1:d2:34:11:79:21:
f2:44:31:f7:24:7f:f9:5b:78:87:5c:64:95:d2:2d:8d:42:41:
26:c5:19:63:fb:ad:61:e7:ee:86:bf:f2:a8:75:00:ab:4d:44:
f1:8d:ff:a2:33:f6:2d:d2:29:54:41:72:5f:f0:03:49:fc:e5:
77:a3:a4:c2:8d:3f:a3:f2:65:b2:9a:b6:e2:ad:5a:24:f3:50:
bf:8f:3f:aa:50:a7:7d:44:4d:49:93:c9:b3:a5:c6:55:ea:c9:
e4:ce:b9:13:f3:82:ef:3f:bc:1c:56:6a:81:8f:0c:c6:3e:ad:
a9:77:be:e8:67:40:5e:b6:63:5a:54:7b:bd:17:3b:86:0e:1d:
c8:c5:11:e6:6e:6f:cd:b5:c8:94:ec:17:eb:63:12:bc:ef:8c:
55:fb:0c:a9:2a:c1:63:ab:bd:19:d8:af:88:9f:6e:49:23:b4:
ff:72:96:23:c7:cc:a9:18:61:68:aa:27:67:24:e2:73:50:91:
13:9e:08:c0:81:6d:7c:8d:52:f0:5f:07:ea:b6:42:d5:c1:73:
d8:8c:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:53 2025 by rpki-client