Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/VLw1EWrCkyb_rdXf9TDgYbCHeew.roa
File: VLw1EWrCkyb_rdXf9TDgYbCHeew.roa (raw, json)
Hash identifier: /Sj7KN24kf9dv3jUWBEzrHZU9OXT9XGdXyhoTf0MEII=
Subject key identifier: 54:BC:35:11:6A:C2:93:26:FF:AD:D5:DF:F5:30:E0:61:B0:87:79:EC
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 01989827D7EE3D90320201282B192BA1D0FA
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/VLw1EWrCkyb_rdXf9TDgYbCHeew.roa
Signing time: Mon 11 Aug 2025 08:03:24 +0000
ROA not before: Mon 11 Aug 2025 08:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201701
IP address blocks: 151.216.47.0/24 maxlen: 24
185.66.192.0/22 maxlen: 22
185.66.193.0/24 maxlen: 24
185.66.194.0/24 maxlen: 24
185.66.195.0/24 maxlen: 24
2a03:2260::/30 maxlen: 30
2a03:2260:1000::/36 maxlen: 36
2a03:2260:2000::/36 maxlen: 36
2a03:2260:3000::/36 maxlen: 36
2a0a:d882::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:27:d7:ee:3d:90:32:02:01:28:2b:19:2b:a1:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Aug 11 08:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54bc35116ac29326ffadd5dff530e061b08779ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:8a:5e:1b:e4:b2:6f:53:c6:f2:d8:bb:f4:
ff:89:ad:fb:e1:8c:2b:d4:d8:5c:ca:39:f9:04:9c:
3f:b5:0c:d0:1e:20:0f:f5:af:22:6e:ed:49:ff:33:
2d:ad:38:6e:58:f1:ae:15:b1:73:e6:6c:b9:10:33:
9c:21:37:8f:f6:c4:13:19:05:36:c4:ea:be:7e:3d:
4c:3a:10:20:a0:12:f1:1b:26:99:21:2f:be:44:30:
67:b3:1e:13:7a:15:b7:f7:b3:0d:99:e8:ec:dd:43:
79:3f:33:d6:2f:75:c8:a8:bc:22:07:d1:bb:3e:ec:
3e:f4:f7:f0:83:ab:ae:98:3f:24:d3:40:5f:da:94:
da:7f:03:ed:24:d6:17:79:03:29:c9:96:d3:cb:e3:
1c:12:69:20:75:28:1f:30:59:ae:76:35:0e:04:1d:
e5:4b:87:69:d0:87:b1:1f:77:77:c4:2e:7b:a4:c8:
47:b3:39:6f:7f:c6:78:c1:54:5e:49:1b:5b:bf:22:
93:ff:b7:d6:b7:e8:d2:5e:f4:46:54:12:a0:69:91:
93:d5:ee:eb:08:14:4c:93:9a:57:50:11:ac:27:7c:
46:3b:3d:fa:46:b9:16:e6:79:2c:7b:70:72:22:7d:
6b:cf:74:fe:11:df:97:a0:ba:d4:f8:94:98:c4:f9:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:35:11:6A:C2:93:26:FF:AD:D5:DF:F5:30:E0:61:B0:87:79:EC
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/VLw1EWrCkyb_rdXf9TDgYbCHeew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.47.0/24
185.66.192.0/22
IPv6:
2a03:2260::/30
2a0a:d882::/48
Signature Algorithm: sha256WithRSAEncryption
d0:58:6b:1f:56:64:df:26:4c:de:54:4b:ec:79:af:25:f4:ed:
4b:c6:02:19:8f:b9:42:cd:3a:b5:55:80:e4:a6:4f:61:37:6c:
5f:1b:8f:41:ce:aa:3e:bc:a7:6c:40:a4:95:33:f2:d1:0e:d3:
0c:31:76:8c:82:21:eb:0e:60:94:f0:a6:f6:b8:7c:86:6a:1e:
7c:27:b0:72:a4:bc:08:6f:88:fa:87:bf:73:df:2e:3b:b9:14:
37:c0:ca:51:85:eb:05:07:56:a6:30:29:65:71:c8:8e:e0:a2:
20:4a:a4:73:9b:dd:d1:e8:da:ef:0d:ff:d7:48:90:85:de:b3:
5d:7d:f0:dc:1c:2a:7b:b0:d6:43:59:7d:a7:84:9c:da:fb:94:
5f:58:b8:63:65:8c:b4:6c:72:26:a7:80:23:a9:64:95:9d:0b:
31:54:b4:e4:c9:72:ea:b9:e1:68:84:fc:12:50:83:80:4b:2a:
45:c5:d0:5d:14:a9:f0:4a:73:41:03:da:23:b1:fb:46:59:1f:
c7:45:88:18:a3:7a:50:18:aa:eb:e3:c5:58:07:4a:0a:2a:90:
cc:60:73:0d:e4:c8:36:a0:6a:b7:bb:db:7e:9e:b5:8d:74:46:
5a:27:a3:04:65:cb:59:64:28:44:83:97:b3:76:c7:94:b5:7f:
45:dc:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:19 2025 by rpki-client