Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/VnEAEVAj205N-9TkiWYWJw63OBY.roa
File: VnEAEVAj205N-9TkiWYWJw63OBY.roa (raw, json)
Hash identifier: UiAdH3zJCJa1I0z2gapdgCxGzhoMD3wqUBzrxQt0q4k=
Subject key identifier: 56:71:00:11:50:23:DB:4E:4D:FB:D4:E4:89:66:16:27:0E:B7:38:16
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0199F0B41AF19C9A3541F650795FEE458356
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/VnEAEVAj205N-9TkiWYWJw63OBY.roa
Signing time: Fri 17 Oct 2025 05:45:59 +0000
ROA not before: Fri 17 Oct 2025 05:45:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57841
IP address blocks: 31.42.88.0/23 maxlen: 23
195.245.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:b4:1a:f1:9c:9a:35:41:f6:50:79:5f:ee:45:83:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 17 05:45:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567100115023db4e4dfbd4e4896616270eb73816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:7e:c7:82:37:50:d0:05:05:96:69:1b:66:
a0:e1:2b:90:84:4a:6e:7e:7a:87:a1:f6:2e:38:c4:
0d:79:ec:bb:bc:2a:b2:f8:e8:2e:9c:f0:bc:1f:1a:
2e:a1:96:1f:98:9d:b4:ad:51:94:c9:0d:e7:6f:44:
09:96:b0:5b:61:2e:94:ff:69:3a:21:e8:d6:e8:28:
b2:05:8d:c7:c4:25:20:b4:9f:bf:a7:d3:1e:f4:17:
00:6f:67:b9:a8:e7:b6:5b:ab:28:a1:7d:d3:df:ac:
a7:65:e8:5e:1b:21:84:97:5c:a7:69:4d:55:46:b2:
15:97:11:63:c7:f6:30:b3:7f:ea:b4:9f:f7:88:6f:
c5:3b:36:28:11:b1:21:76:09:a0:06:9c:d1:1f:9c:
d5:87:f5:61:15:2d:3e:75:96:2b:9d:9b:52:6e:34:
79:6d:b5:d5:bb:5f:3b:3c:8f:8a:69:c9:3f:a0:64:
11:11:bc:1d:d6:64:c2:2f:3c:9c:01:ff:c5:91:87:
ab:00:40:fc:ea:df:c8:3d:b3:b1:29:9c:4d:b9:04:
5c:4d:b3:b0:70:32:1f:96:cd:67:1a:77:d2:c5:46:
4e:ba:28:a7:53:9d:08:d0:8c:ef:37:a4:13:03:ba:
b4:2f:d0:ea:87:ae:9e:17:b0:b9:54:d5:a1:97:50:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:00:11:50:23:DB:4E:4D:FB:D4:E4:89:66:16:27:0E:B7:38:16
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/VnEAEVAj205N-9TkiWYWJw63OBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.88.0/23
195.245.194.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b3:a4:db:e5:89:96:fb:07:5e:9b:82:48:5c:0b:fd:71:7e:
39:a0:df:0a:4a:85:11:16:cf:9f:29:dc:4c:a3:7d:f0:0d:f6:
dd:c4:ac:2e:91:7e:d7:e4:81:05:7f:1f:ff:da:b3:4a:1c:80:
b3:9c:65:94:be:04:23:1c:11:c3:c5:55:29:78:dd:27:69:19:
cb:6e:ff:38:3f:e8:13:52:f1:f7:48:e9:1c:9f:1d:54:9d:38:
04:3b:22:08:ee:9e:d7:05:04:25:de:77:cf:c5:23:0b:74:ca:
c0:38:15:26:2d:ed:9e:36:85:43:b2:d2:b7:a6:bf:7a:14:59:
b7:f7:4f:08:c5:3d:5f:6d:f9:5c:98:49:2e:30:1c:4a:b5:22:
a1:97:b1:f2:e5:d9:d5:f2:b0:26:76:e1:35:98:54:b8:5a:43:
05:dc:9d:e1:3d:c1:17:f3:99:5a:4e:18:06:d6:01:9f:1d:6a:
18:3b:f7:8f:b5:9b:08:f4:14:91:f3:43:67:95:a9:ee:21:dd:
34:3f:aa:89:38:89:e3:40:a6:6c:00:30:f9:ed:a5:ac:6b:e0:
87:e6:22:e0:fc:9b:67:c2:5b:ed:b7:63:3a:a0:57:1c:cd:28:
8a:2d:40:75:02:50:1f:37:d7:7b:9c:40:9c:67:e2:fd:b8:7b:
ca:0e:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:35 2025 by rpki-client