
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/VWCKQLWfEJArBPgjqn1y3QF-M0s.roa
File: VWCKQLWfEJArBPgjqn1y3QF-M0s.roa (raw, json)
Hash identifier: Pvnjz6Z1kdnTY2B8V2B0JwmeucbK2OLPuOj7UzzKFk8=
Subject key identifier: 55:60:8A:40:B5:9F:10:90:2B:04:F8:23:AA:7D:72:DD:01:7E:33:4B
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0199EF11B4FAAB8479BE0A070A73CBED0C9D
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/VWCKQLWfEJArBPgjqn1y3QF-M0s.roa
Signing time: Thu 16 Oct 2025 22:08:58 +0000
ROA not before: Thu 16 Oct 2025 22:08:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 185.239.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ef:11:b4:fa:ab:84:79:be:0a:07:0a:73:cb:ed:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 16 22:08:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55608a40b59f10902b04f823aa7d72dd017e334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:d6:2b:a7:5f:8e:64:6c:31:cf:2a:f2:81:
b8:87:79:61:23:f3:f9:49:2b:ce:01:59:63:0d:6c:
ef:64:9c:d7:3d:75:e6:ba:bd:66:9c:f8:ac:ee:46:
f4:ec:f0:bb:10:15:3a:0e:b5:ba:57:b2:23:d3:b7:
9d:4d:08:61:7f:a5:a8:00:0d:22:e0:46:f4:4f:c0:
f8:e0:50:c2:ae:74:89:f5:7a:c4:ce:85:ea:5c:dc:
b3:96:67:10:82:eb:23:46:90:5f:3a:41:a3:c0:1f:
06:43:db:fa:3c:9d:c0:5e:be:10:08:83:5c:1e:f7:
af:3f:21:1a:d5:13:43:d9:d5:f2:58:87:c5:d6:5e:
05:02:80:f6:62:ac:a7:2a:85:44:7d:72:94:fe:2b:
5a:ef:cc:0a:1e:59:ea:69:5e:d9:a8:4b:44:2d:ca:
84:b4:a3:f0:ff:11:b6:f1:ac:a5:db:4e:a4:e5:b4:
a7:8f:f6:ec:03:de:4a:47:c4:75:62:5d:89:1a:23:
b1:f8:f3:ae:7e:1b:bd:ec:57:5d:25:dd:48:f9:c0:
b8:a9:aa:80:f3:2d:b1:eb:53:00:90:ca:f8:e8:43:
4d:d3:0b:4c:67:31:1c:77:85:7d:a7:4f:cd:95:63:
0f:a6:8b:35:cb:96:8f:23:b5:21:05:5c:64:16:4e:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:60:8A:40:B5:9F:10:90:2B:04:F8:23:AA:7D:72:DD:01:7E:33:4B
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/VWCKQLWfEJArBPgjqn1y3QF-M0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:95:24:dd:70:67:a0:e6:77:d1:8d:3e:4b:84:c0:2c:b2:ab:
b1:37:f4:67:a2:a2:1e:a2:07:4e:b5:9f:1c:0f:a3:f3:a4:9f:
fe:f7:f4:4d:05:10:eb:c5:a7:2b:50:a7:bd:3c:d8:c3:4b:7d:
1f:be:91:42:47:8d:2f:a5:33:15:4f:c4:a6:66:19:1f:0b:e7:
be:a4:80:1b:59:5e:25:e1:2b:9a:1c:93:c1:50:c4:29:40:da:
48:cc:72:77:fc:c7:6d:8c:25:82:40:7c:76:a5:0e:b6:a0:97:
ae:fa:c1:30:c3:c5:37:4f:1c:95:26:09:58:68:dc:05:82:28:
31:f5:6f:c2:6f:4f:b3:a8:43:37:4d:dc:13:06:69:7d:94:dd:
ec:14:75:c0:38:d7:fe:f3:f0:bb:ad:7e:84:73:67:8b:6e:4d:
0a:de:50:33:33:d0:09:45:97:f6:e6:e9:a6:11:71:30:58:3a:
cf:87:7c:62:aa:72:14:80:29:ea:41:72:82:ad:56:c5:37:83:
0d:6c:77:1a:21:53:36:c5:b1:57:30:65:ee:4f:d1:9a:e9:51:
a8:81:72:c5:30:b4:68:a4:aa:e4:31:b3:36:60:e1:f3:57:f5:
e1:00:94:38:ee:cc:70:b0:20:c0:a4:f6:1e:52:f6:92:b1:13:
5f:c1:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:15 2025 by rpki-client