Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa
File: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (raw, json)
Hash identifier: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=
Subject key identifier: 54:D8:24:D8:49:5B:29:5A:FA:6D:4E:77:52:8D:ED:2D:B3:2E:1C:95
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01989E2F59FDC88A7DCD9A798902B66CDBEB
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa
Signing time: Tue 12 Aug 2025 12:09:19 +0000
ROA not before: Tue 12 Aug 2025 12:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6908
IP address blocks: 185.120.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:2f:59:fd:c8:8a:7d:cd:9a:79:89:02:b6:6c:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Aug 12 12:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54d824d8495b295afa6d4e77528ded2db32e1c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:75:43:80:2c:c8:b4:06:25:2c:15:4a:56:
50:8c:5b:76:2e:f8:f4:df:dd:b6:5e:bc:24:c3:c5:
7a:5a:3f:96:d6:c6:be:b0:7e:5e:b8:02:2e:08:c1:
72:84:8f:db:e7:f6:e1:52:59:9b:23:f5:82:af:ba:
c2:f6:c4:b5:42:a0:69:da:dc:54:fb:07:16:05:72:
9c:c7:c7:8e:85:d2:7b:f0:d5:65:c3:84:4d:9b:3e:
35:64:5c:c8:0f:21:c0:cf:34:f1:b1:f6:47:4f:af:
04:3b:c8:f6:f5:aa:06:53:2b:f3:67:94:c9:9c:5c:
7a:89:d2:fc:95:f8:6c:20:c1:6a:94:82:d0:c8:fd:
1c:df:2f:3f:c1:7c:e6:06:da:73:4b:2c:b2:21:b2:
4c:4b:f4:1b:b8:0d:66:49:33:55:77:ee:4d:20:f7:
f1:55:53:d6:7f:ce:a9:50:8a:d1:30:70:e2:ea:93:
d6:c8:d2:d9:56:3c:bc:2b:7c:ee:e0:16:c6:4c:91:
b1:dc:64:e0:b2:1a:34:d3:7b:51:bb:47:b1:e3:53:
ce:6d:85:49:f3:b4:62:1f:2f:4e:60:cb:ac:96:0f:
9d:c8:55:f9:8c:d0:c0:e2:23:d9:45:17:a6:03:6b:
3d:97:85:13:28:f9:4b:78:6c:2b:f4:b5:ad:4c:56:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:24:D8:49:5B:29:5A:FA:6D:4E:77:52:8D:ED:2D:B3:2E:1C:95
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.72.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f9:16:d4:1c:db:bd:a8:2f:01:07:8a:05:a3:aa:53:01:72:
c4:a8:d2:1e:c5:fb:8e:25:2a:09:19:aa:18:f5:f2:cd:f5:22:
e4:df:da:5f:04:bb:35:65:54:9c:6c:d9:9a:56:a0:db:17:d4:
a7:4c:7f:58:0c:0d:8d:ea:4c:0e:7f:b2:ca:58:6a:bd:44:8b:
e9:77:c9:2f:29:b6:09:32:24:d0:e4:2e:cb:b1:17:a9:3f:91:
86:4c:86:d3:9c:f3:85:03:98:c7:fd:1a:38:a0:68:8a:e1:4b:
e6:e9:62:fb:2e:47:7d:5d:fa:36:46:ba:b5:6b:c3:80:0b:c0:
9a:25:50:c1:7b:68:99:3a:62:8a:c9:3e:6b:96:62:7d:d6:80:
26:ba:05:a1:4a:01:13:ab:fd:e4:7e:fe:a7:c8:b0:a6:02:8b:
3f:92:1e:a2:57:c5:35:2f:d0:73:69:32:3a:b2:15:11:50:b2:
c1:11:3e:73:9a:b1:b5:80:50:88:e5:c9:54:9c:ee:e4:5c:4a:
2b:37:fe:25:2a:30:d3:c9:df:e3:8d:b4:16:42:ec:bf:1c:97:
ff:d2:94:9c:a2:6b:0c:b5:d3:39:d5:52:06:04:65:7c:09:77:
01:70:09:79:ec:ab:0a:24:53:1d:92:67:56:9e:1a:2a:c2:8c:
94:3b:f5:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZieL1n9yIp9zZp5iQK2bNvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjUwODEyMTIwOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGQ4MjRkODQ5NWIyOTVhZmE2ZDRlNzc1MjhkZWQyZGIzMmUxYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKZ1Q4AsyLQGJSwVSlZQjFt2Lvj0
3922Xrwkw8V6Wj+W1sa+sH5euAIuCMFyhI/b5/bhUlmbI/WCr7rC9sS1QqBp2txU
+wcWBXKcx8eOhdJ78NVlw4RNmz41ZFzIDyHAzzTxsfZHT68EO8j29aoGUyvzZ5TJ
nFx6idL8lfhsIMFqlILQyP0c3y8/wXzmBtpzSyyyIbJMS/QbuA1mSTNVd+5NIPfx
VVPWf86pUIrRMHDi6pPWyNLZVjy8K3zu4BbGTJGx3GTgsho003tRu0ex41PObYVJ
87RiHy9OYMuslg+dyFX5jNDA4iPZRRemA2s9l4UTKPlLeGwr9LWtTFZ2tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTYJNhJWyla+m1Od1KN7S2zLhyVMB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvVk5nazJFbGJLVnI2YlU1M1VvM3RMYk11SEpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXhIMA0G
CSqGSIb3DQEBCwUAA4IBAQBk+RbUHNu9qC8BB4oFo6pTAXLEqNIexfuOJSoJGaoY
9fLN9SLk39pfBLs1ZVScbNmaVqDbF9SnTH9YDA2N6kwOf7LKWGq9RIvpd8kvKbYJ
MiTQ5C7LsRepP5GGTIbTnPOFA5jH/Ro4oGiK4Uvm6WL7Lkd9Xfo2Rrq1a8OAC8Ca
JVDBe2iZOmKKyT5rlmJ91oAmugWhSgETq/3kfv6nyLCmAos/kh6iV8U1L9BzaTI6
shURULLBET5zmrG1gFCI5clUnO7kXEorN/4lKjDTyd/jjbQWQuy/HJf/0pScomsM
tdM51VIGBGV8CXcBcAl57KsKJFMdkmdWnhoqwoyUO/XL
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:07 2025 by rpki-client