Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/VqTKdS0wUklb387Znd5hFzPRASE.roa
File: VqTKdS0wUklb387Znd5hFzPRASE.roa (raw, json)
Hash identifier: rDOvuh2F3d3eA0aeY1ATjqwPgZrek24RyHk+1v/gN1M=
Subject key identifier: 56:A4:CA:75:2D:30:52:49:5B:DF:CE:D9:9D:DE:61:17:33:D1:01:21
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 01989CA5BEC4160B4385EF146AF087BB1E8D
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/VqTKdS0wUklb387Znd5hFzPRASE.roa
Signing time: Tue 12 Aug 2025 04:59:24 +0000
ROA not before: Tue 12 Aug 2025 04:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 2a02:e00:ffe9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a5:be:c4:16:0b:43:85:ef:14:6a:f0:87:bb:1e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Aug 12 04:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56a4ca752d3052495bdfced99dde611733d10121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:12:66:b9:25:f2:f3:0e:bc:4d:8a:64:a2:
ef:82:3d:de:d9:bb:06:fb:73:1f:8a:94:2c:57:21:
bb:3b:bf:e4:c2:90:ef:96:8c:84:69:be:f9:f0:69:
5b:2f:67:b7:83:7b:d7:b9:cc:c4:e4:12:8b:f6:73:
ba:6a:58:6a:7c:2d:ac:a0:b0:59:bf:69:8b:f2:5d:
d2:19:56:96:ac:d9:a7:61:0c:31:11:3f:21:16:b7:
88:ef:a9:77:bf:f6:18:6f:ab:5b:41:bd:be:15:7e:
01:36:08:d3:e7:0a:9d:b7:82:5e:c5:62:91:76:47:
bd:4b:61:a2:ca:2c:49:29:47:ab:0e:98:82:d9:c9:
54:0a:e8:13:c0:ba:1a:bd:68:3d:df:bb:4a:b6:c1:
48:3f:c5:ef:8e:93:0e:59:cb:8f:8f:88:97:0c:e3:
ef:28:dd:f4:d8:a5:18:f6:c4:e1:ab:96:3e:eb:1f:
6b:b6:d6:c7:c7:26:fb:2f:5c:cb:7e:4e:6e:4f:63:
7f:1a:78:e8:23:88:ff:48:2b:b9:be:26:d2:f3:00:
c6:0e:ba:a9:6b:8e:cf:78:60:a2:64:32:d0:24:cd:
1a:94:8a:5d:df:79:bd:ef:42:ef:d4:44:7c:a8:63:
43:c8:d2:f1:96:f6:eb:41:39:de:6b:36:e0:2e:70:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A4:CA:75:2D:30:52:49:5B:DF:CE:D9:9D:DE:61:17:33:D1:01:21
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/VqTKdS0wUklb387Znd5hFzPRASE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e00:ffe9::/48
Signature Algorithm: sha256WithRSAEncryption
78:42:94:98:6a:51:85:48:1b:54:12:ba:0d:07:40:ef:57:79:
fc:8b:7b:5c:e3:bb:52:f4:0d:7c:f1:0d:dd:be:bc:5a:a5:01:
58:06:12:f7:b1:a7:dd:ec:aa:d2:9e:bc:73:03:f0:31:d4:e4:
2a:8c:14:e2:89:81:e6:46:94:5d:bc:72:b8:58:67:8e:bc:d6:
07:46:11:95:70:b5:51:14:f9:9b:c7:8b:95:ab:96:63:67:a1:
9d:3d:d1:7f:a2:20:c3:94:5b:2a:57:15:f0:7b:bd:30:5a:d6:
47:05:c4:e4:20:ec:e9:47:f0:7e:b5:28:14:37:dd:ac:ba:0d:
3c:3a:01:83:85:fb:22:25:25:7f:9b:03:88:cd:6d:74:d6:5d:
cd:da:f4:45:29:d0:9b:14:20:d3:1f:88:8a:39:8d:37:b3:a8:
af:dd:31:e2:a6:b3:89:3f:2d:87:f7:e0:b8:8e:4d:5d:d5:e1:
55:61:4a:9b:75:d7:5f:34:88:40:2e:c6:6f:fe:b9:34:4b:44:
c0:15:e1:87:46:35:ef:2b:ac:09:b8:7e:62:93:d7:bc:05:a6:
f2:59:b7:b0:b9:33:62:a5:a9:d2:b3:70:8c:67:22:3e:75:4b:
db:20:20:e7:96:d9:ea:7f:54:26:46:e5:e2:50:38:e5:92:35:
66:cc:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:49 2025 by rpki-client