Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vRYZM54g6V8t5TRHUMx3TLGc9W0.roa
File: vRYZM54g6V8t5TRHUMx3TLGc9W0.roa (raw, json)
Hash identifier: 61wMxYFBGG6RvTpLm9ErONj/cnGC2yl/eV7LNurpvOQ=
Subject key identifier: BD:16:19:33:9E:20:E9:5F:2D:E5:34:47:50:CC:77:4C:B1:9C:F5:6D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0198D0EE7258A41B65CD8C74EE8E1A62420C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vRYZM54g6V8t5TRHUMx3TLGc9W0.roa
Signing time: Fri 22 Aug 2025 08:39:04 +0000
ROA not before: Fri 22 Aug 2025 08:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:ee:72:58:a4:1b:65:cd:8c:74:ee:8e:1a:62:42:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 22 08:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd1619339e20e95f2de5344750cc774cb19cf56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:46:0a:36:71:24:d3:ae:5c:72:9f:6d:17:
a1:e1:fd:61:b4:cc:6b:34:07:73:8c:09:6c:7a:98:
d2:80:6e:43:86:64:a0:52:6c:32:27:32:4a:3a:5b:
62:09:32:bf:3e:64:ee:c8:71:5d:95:9d:21:48:27:
ce:7d:cd:9f:3c:b7:13:83:53:35:29:e0:ed:a5:99:
d7:cb:9c:03:c0:a6:c8:42:08:f6:e7:f9:1c:a2:7f:
b1:60:55:90:ab:4f:0e:88:92:89:ca:72:df:f3:cb:
c5:57:ca:3d:b3:b2:19:b7:31:cd:7f:29:ad:0a:4e:
4f:f1:e1:43:83:10:9e:10:a8:10:b0:f8:3d:76:06:
d4:30:30:3e:42:a6:98:cd:67:3b:81:f5:a5:17:69:
e2:08:b3:b3:5b:01:f6:3b:0f:d9:32:b8:32:b4:26:
02:41:70:b8:24:32:0b:54:f4:e0:ac:7e:71:08:b2:
f4:b5:4e:40:4e:f3:bd:f4:de:c9:e1:a5:8c:60:78:
0f:4d:a7:e2:65:94:87:f1:53:f4:6a:e2:d2:cd:dc:
22:db:d5:6e:4a:da:2b:8f:74:0e:12:3a:1c:19:04:
3b:d6:a7:c2:ee:9b:ff:97:66:60:b8:a2:5e:f6:39:
9d:e9:80:9f:5d:d4:68:cd:dc:3e:17:0e:7f:e7:40:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:19:33:9E:20:E9:5F:2D:E5:34:47:50:CC:77:4C:B1:9C:F5:6D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vRYZM54g6V8t5TRHUMx3TLGc9W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:75:84:e1:3c:56:c9:ce:28:7a:70:53:0c:2e:86:cd:07:74:
ae:74:a0:d7:d6:08:30:66:cc:52:0e:80:0a:65:40:5b:86:f7:
d0:e5:fa:78:f5:51:c6:64:ab:fd:d1:c4:dd:cf:2e:79:4f:5b:
09:17:a0:a5:b4:ca:a3:fd:a3:e8:27:a0:6e:d3:6d:f6:44:e4:
8b:09:0e:21:b2:b6:fc:24:3d:2b:4d:c2:26:1c:44:ec:d6:ce:
be:ff:58:01:35:37:56:24:ef:01:70:55:5b:7b:ea:77:13:d5:
ba:b2:bf:cb:cd:09:b8:61:b9:14:7b:43:6d:f1:27:e8:5d:0d:
88:84:04:a9:5d:2a:84:1b:bb:c9:8b:89:10:fd:84:03:1b:0f:
c5:c2:aa:c3:d2:a3:be:54:25:97:59:17:97:f9:09:f6:11:f3:
96:85:8e:b1:0b:c4:be:54:9a:60:56:37:ae:d1:47:c5:dc:a0:
60:70:e0:a5:38:1e:67:e0:78:07:4f:95:27:e7:92:48:7f:64:
d2:a3:c4:52:70:c1:89:bf:1d:74:b6:fa:2a:c3:e9:a8:d8:26:
7d:4f:01:66:fc:29:f2:d5:aa:58:6c:e2:61:43:63:85:13:3f:
0d:47:dc:32:0f:d3:9e:bf:50:cb:98:bf:67:08:d5:b3:10:26:
a2:76:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:24:46 2025 by rpki-client