Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vrIpud-UYLaqp5tYhvvkoylZJ_s.roa
File: vrIpud-UYLaqp5tYhvvkoylZJ_s.roa (raw, json)
Hash identifier: kFNNnYe0z6zJNhi1eGl2OV7VBOF3FSOfmv+0tGHaec4=
Subject key identifier: BE:B2:29:B9:DF:94:60:B6:AA:A7:9B:58:86:FB:E4:A3:29:59:27:FB
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0199292AA324523DCD90FC9A23CE7BB72E22
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vrIpud-UYLaqp5tYhvvkoylZJ_s.roa
Signing time: Mon 08 Sep 2025 11:51:24 +0000
ROA not before: Mon 08 Sep 2025 11:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62282
IP address blocks: 193.34.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:2a:a3:24:52:3d:cd:90:fc:9a:23:ce:7b:b7:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Sep 8 11:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beb229b9df9460b6aaa79b5886fbe4a3295927fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:bb:f8:c1:93:1f:f5:82:2b:47:08:ec:de:
54:e6:9c:cf:ac:03:9d:3d:4c:ee:e2:f5:34:1f:27:
12:78:db:ed:76:d8:43:f7:06:19:3d:88:56:e8:fb:
9e:c8:a4:67:b0:bb:14:78:bd:12:76:aa:90:84:e2:
c0:94:ce:22:8d:b3:5b:09:a2:28:d7:0b:cc:9f:9e:
a5:50:91:26:51:0f:45:8a:59:36:52:a5:b3:2a:d9:
ae:da:59:f3:17:0c:da:64:89:be:8f:c6:19:61:27:
75:fa:9f:65:c0:25:46:c0:a7:af:d1:c3:1b:d3:a7:
33:d7:b9:61:e2:30:50:ae:a6:84:a0:aa:cb:30:75:
6b:11:63:9b:0c:ce:8f:88:ee:52:e9:0b:b6:6b:31:
f3:f6:64:28:ef:a8:5b:76:65:b0:b1:f8:fe:24:ea:
3c:b8:df:87:60:6a:3e:c3:f0:31:9d:82:75:2b:65:
4c:11:61:01:50:96:ef:11:cc:c1:56:c5:c6:d7:5c:
9a:96:0c:dc:df:93:25:28:f2:44:c2:4f:1d:ad:e3:
21:71:0d:6d:72:56:11:11:75:70:f0:00:9c:a0:66:
2f:35:8a:b2:02:84:72:cf:41:4a:a0:6a:a8:98:5d:
0b:f9:51:19:9c:ac:ed:3b:81:a4:d5:01:49:e7:9a:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:29:B9:DF:94:60:B6:AA:A7:9B:58:86:FB:E4:A3:29:59:27:FB
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vrIpud-UYLaqp5tYhvvkoylZJ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:e6:ae:86:57:6f:1c:88:44:a6:f6:8c:5a:32:4a:63:09:0c:
6a:ea:d5:09:c5:fe:c3:e4:10:81:c4:e3:23:8e:7a:d3:2b:b1:
53:49:ba:04:cb:08:2a:cb:4a:6a:4e:16:db:83:13:b3:83:1b:
d9:88:9c:24:ce:30:de:8e:cc:d7:41:8a:e4:b6:eb:32:28:9f:
29:26:d3:7a:26:c5:cf:cd:84:8d:cd:de:91:00:cc:1f:ec:39:
0a:7d:d0:e6:93:bc:6f:2c:ef:30:49:18:5e:d8:91:fa:30:8a:
28:1a:81:37:21:da:85:60:4d:fb:37:98:27:40:ac:35:00:34:
22:e4:0a:15:50:0b:7a:51:66:d0:84:6d:9d:ea:7e:1c:e5:ee:
79:83:21:6a:89:c7:5e:c9:fe:00:3f:7f:4a:08:f4:9f:22:f8:
9d:26:1f:54:7b:94:cb:b9:53:df:d1:b1:65:dd:af:3f:14:43:
b5:5b:5b:b2:ab:f7:27:86:f5:b3:a1:fc:df:f0:d5:18:94:e2:
5c:46:b7:78:b9:d0:d5:ce:38:87:f1:35:e4:4a:ff:e9:fd:ba:
64:f4:82:03:e9:47:6f:fc:15:81:9c:fc:05:e7:52:8a:64:07:
8c:c2:93:53:31:7b:9e:fd:30:1f:bd:ab:f1:00:5a:36:25:45:
39:19:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:17 2025 by rpki-client