Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/VT0K_B8TP9VNzMUCzAKb_pcrAJs.roa
File: VT0K_B8TP9VNzMUCzAKb_pcrAJs.roa (raw, json)
Hash identifier: +Nq8vpSYKTk/bSDILQBzEhxSC3uLfEy4XvcRR6emT/s=
Subject key identifier: 55:3D:0A:FC:1F:13:3F:D5:4D:CC:C5:02:CC:02:9B:FE:97:2B:00:9B
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 0199566C80AFA5D24433EC406C420008E8C7
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/VT0K_B8TP9VNzMUCzAKb_pcrAJs.roa
Signing time: Wed 17 Sep 2025 06:46:15 +0000
ROA not before: Wed 17 Sep 2025 06:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 158.173.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:6c:80:af:a5:d2:44:33:ec:40:6c:42:00:08:e8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 17 06:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553d0afc1f133fd54dccc502cc029bfe972b009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:cc:88:08:dc:80:92:de:e7:e5:2e:c8:f8:
43:97:af:cb:5e:60:36:2c:00:bd:68:27:fa:53:4b:
31:4c:04:69:79:fa:6e:0b:07:56:22:eb:2c:45:fa:
9a:08:7b:e7:24:73:57:08:57:84:7c:79:4e:4d:69:
c7:c4:70:98:1b:c8:ff:5c:2c:48:04:36:a3:c2:13:
68:b9:b0:2f:31:92:0e:2e:c4:ea:9f:b6:52:24:b6:
1b:cb:b1:f8:dd:ad:a7:5c:6a:1c:cc:d5:6f:15:29:
fa:ef:e3:a4:1f:89:4f:6d:19:12:f1:be:e6:06:39:
06:81:31:b8:36:25:98:0e:06:26:6d:86:33:9d:b7:
2f:da:16:da:bf:5c:e1:46:16:03:a9:cf:16:2c:ad:
04:ba:ea:18:af:b2:d7:2a:1e:2f:7a:ff:18:93:de:
1e:88:1f:30:35:d9:17:ff:41:3e:5a:8d:01:76:8e:
29:cf:3c:02:78:45:b2:bf:e8:f2:3c:d8:19:3a:fb:
d7:54:e5:a4:8a:d3:79:b6:fb:58:96:1a:3b:d4:1a:
03:78:7f:bf:f6:65:97:7f:8a:e7:f6:11:ca:e4:08:
74:54:51:91:34:6b:07:24:b4:d8:3e:37:14:24:61:
dc:58:bf:1d:8f:5b:88:8c:bb:c8:f2:80:49:7a:26:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3D:0A:FC:1F:13:3F:D5:4D:CC:C5:02:CC:02:9B:FE:97:2B:00:9B
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/VT0K_B8TP9VNzMUCzAKb_pcrAJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:81:e7:63:e7:14:7b:21:0c:cf:71:a5:13:71:75:a8:81:ff:
91:ed:0e:17:63:18:78:66:bb:23:3c:37:53:df:b2:ff:aa:42:
a6:38:b7:b4:18:5e:e3:55:6c:8c:22:2c:0b:00:b4:98:73:1a:
9d:4b:d0:af:24:31:b6:64:00:c6:12:8f:fd:3d:7d:9c:bd:47:
81:cf:ec:a4:4d:b0:ca:68:81:06:6d:02:b8:c3:68:d6:c1:35:
80:ed:3b:70:8f:3c:2b:11:02:18:a0:d3:3a:3f:5a:2d:64:87:
57:ef:e4:e9:ab:56:4e:1e:28:78:87:70:99:b9:25:6f:be:35:
df:5c:02:84:30:6c:24:95:73:96:58:fb:40:e1:6c:fc:eb:23:
f2:a4:29:59:7a:8c:20:3a:eb:ed:47:e7:5a:0e:bd:fb:fb:94:
a4:cc:97:9a:2e:a6:ab:28:cf:78:0c:e9:0c:ec:ca:6f:d3:6d:
d2:4a:11:e8:43:6c:50:20:88:e0:03:43:83:2e:d6:2b:c6:ac:
95:45:ff:a8:a7:bf:01:9b:22:ad:31:f9:c5:56:19:2d:54:9f:
b2:c2:40:02:63:81:ef:f0:d8:16:77:54:e1:91:78:38:d4:bc:
bc:b1:0a:60:66:16:48:ae:6e:4e:5a:b7:c3:49:64:3f:47:f8:
a7:26:75:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlWbICvpdJEM+xAbEIACOjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjUwOTE3MDY0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTNkMGFmYzFmMTMzZmQ1NGRjY2M1MDJjYzAyOWJmZTk3MmIwMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH3MiAjcgJLe5+UuyPhDl6/LXmA2
LAC9aCf6U0sxTARpefpuCwdWIussRfqaCHvnJHNXCFeEfHlOTWnHxHCYG8j/XCxI
BDajwhNoubAvMZIOLsTqn7ZSJLYby7H43a2nXGoczNVvFSn67+OkH4lPbRkS8b7m
BjkGgTG4NiWYDgYmbYYznbcv2hbav1zhRhYDqc8WLK0EuuoYr7LXKh4vev8Yk94e
iB8wNdkX/0E+Wo0Bdo4pzzwCeEWyv+jyPNgZOvvXVOWkitN5tvtYlho71BoDeH+/
9mWXf4rn9hHK5Ah0VFGRNGsHJLTYPjcUJGHcWL8dj1uIjLvI8oBJeiaCtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFU9CvwfEz/VTczFAswCm/6XKwCbMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvVlQwS19COFRQOVZOek1VQ3pBS2JfcGNyQUpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq0iMA0G
CSqGSIb3DQEBCwUAA4IBAQCagedj5xR7IQzPcaUTcXWogf+R7Q4XYxh4ZrsjPDdT
37L/qkKmOLe0GF7jVWyMIiwLALSYcxqdS9CvJDG2ZADGEo/9PX2cvUeBz+ykTbDK
aIEGbQK4w2jWwTWA7TtwjzwrEQIYoNM6P1otZIdX7+Tpq1ZOHih4h3CZuSVvvjXf
XAKEMGwklXOWWPtA4Wz86yPypClZeowgOuvtR+daDr37+5SkzJeaLqarKM94DOkM
7Mpv023SShHoQ2xQIIjgA0ODLtYrxqyVRf+op78BmyKtMfnFVhktVJ+ywkACY4Hv
8NgWd1ThkXg41Ly8sQpgZhZIrm5OWrfDSWQ/R/inJnV2
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:27 2025 by rpki-client