Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/VvWxBpgkQSp13g1sdt8P4SzC2m0.roa
File: VvWxBpgkQSp13g1sdt8P4SzC2m0.roa (raw, json)
Hash identifier: 9FE7dSvN+4LiBj47pFfaG8MIDBafbeRoSmTUhhQ2sfk=
Subject key identifier: 56:F5:B1:06:98:24:41:2A:75:DE:0D:6C:76:DF:0F:E1:2C:C2:DA:6D
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01996A8F0BE30BF6665C59C05F682D87B2C7
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/VvWxBpgkQSp13g1sdt8P4SzC2m0.roa
Signing time: Sun 21 Sep 2025 04:36:23 +0000
ROA not before: Sun 21 Sep 2025 04:36:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 213.137.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6a:8f:0b:e3:0b:f6:66:5c:59:c0:5f:68:2d:87:b2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Sep 21 04:36:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f5b1069824412a75de0d6c76df0fe12cc2da6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:c9:e1:dc:1b:ad:f8:03:f1:49:5b:2d:a2:
82:1d:56:de:cd:18:34:0c:dd:94:4e:c5:df:fa:5d:
17:35:6c:6b:16:ca:9c:eb:69:57:9f:85:e8:3d:1a:
67:4a:26:da:0c:7e:18:af:fa:f8:2f:6c:71:5d:f0:
d7:83:ce:9c:8a:e2:9e:5b:6a:4c:71:8a:76:0e:f8:
89:d7:f5:20:56:37:28:cb:0f:c5:4c:89:93:bd:d6:
7d:7a:28:50:80:21:1d:f9:34:39:84:40:05:41:4c:
f8:60:ad:91:10:9c:e7:99:7a:7c:67:74:b2:6e:6f:
15:45:30:1c:61:21:02:d2:19:9b:22:68:3b:20:a1:
a3:fd:60:fb:35:8a:31:36:12:0a:fe:0b:d0:e4:c5:
23:0f:27:88:f7:9e:6f:cc:76:29:fc:9e:91:0c:24:
bb:44:09:6a:79:38:ff:7e:9a:80:d8:d4:2c:39:b2:
f3:e8:bb:33:d4:42:ff:cb:2e:27:ec:b2:1b:6b:5f:
df:d3:97:23:ef:be:a5:ef:fe:5b:56:e4:2d:a1:9c:
a5:86:80:af:16:c2:26:04:ad:de:f4:1d:64:8d:2a:
d1:bd:d8:d2:2a:45:37:49:e6:ab:1a:79:bf:cf:51:
6b:33:a7:8f:c8:cf:4f:69:5b:20:50:cd:4d:44:b1:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:B1:06:98:24:41:2A:75:DE:0D:6C:76:DF:0F:E1:2C:C2:DA:6D
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/VvWxBpgkQSp13g1sdt8P4SzC2m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.83.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ac:21:a5:cd:21:12:15:9c:20:73:e2:5a:3c:02:06:69:4c:
89:e5:7c:f2:5a:0d:71:f5:8f:35:06:75:a6:f0:97:71:00:8a:
ec:6c:c1:5e:79:e8:99:bf:10:39:1b:03:7b:8b:fc:5c:50:74:
b8:72:9e:3f:6c:61:cf:92:51:25:87:93:7e:f1:bf:56:be:d1:
bf:01:00:ff:34:58:f4:f4:56:1b:1d:60:25:ac:54:b1:31:80:
01:5b:57:21:3b:dd:13:ce:84:11:c3:b8:93:48:11:d6:a4:4e:
8e:3f:7c:d2:ca:79:ba:78:6c:99:2e:b2:d6:3b:e9:e7:d2:8d:
79:a7:a4:bd:29:be:be:89:36:fe:c7:36:ae:c8:48:4d:8b:25:
32:88:e5:38:25:70:41:6f:a8:bc:86:f8:07:22:d5:de:78:82:
6b:f5:af:87:52:ea:0d:03:4b:23:23:f1:9e:d3:b2:15:aa:dd:
b3:c8:f2:f3:bc:1c:28:dc:e9:10:aa:1b:4c:79:4e:31:3a:41:
10:9a:ef:6f:ec:80:df:94:07:86:5f:e4:38:a4:d5:06:c5:b2:
da:86:0e:99:5f:6f:e8:03:20:37:9f:48:95:32:03:bd:0d:9e:
6f:10:47:f0:bd:85:c0:55:a8:2b:0a:d7:b4:57:a9:c5:92:20:
f3:72:94:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlqjwvjC/ZmXFnAX2gth7LHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwOTIxMDQzNjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmY1YjEwNjk4MjQ0MTJhNzVkZTBkNmM3NmRmMGZlMTJjYzJkYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw67J4dwbrfgD8UlbLaKCHVbezRg0
DN2UTsXf+l0XNWxrFsqc62lXn4XoPRpnSibaDH4Yr/r4L2xxXfDXg86ciuKeW2pM
cYp2DviJ1/UgVjcoyw/FTImTvdZ9eihQgCEd+TQ5hEAFQUz4YK2REJznmXp8Z3Sy
bm8VRTAcYSEC0hmbImg7IKGj/WD7NYoxNhIK/gvQ5MUjDyeI955vzHYp/J6RDCS7
RAlqeTj/fpqA2NQsObLz6Lsz1EL/yy4n7LIba1/f05cj776l7/5bVuQtoZylhoCv
FsImBK3e9B1kjSrRvdjSKkU3SearGnm/z1FrM6ePyM9PaVsgUM1NRLFAOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFb1sQaYJEEqdd4NbHbfD+EswtptMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvVnZXeEJwZ2tRU3AxM2cxc2R0OFA0U3pDMm0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YlTMA0G
CSqGSIb3DQEBCwUAA4IBAQBhrCGlzSESFZwgc+JaPAIGaUyJ5XzyWg1x9Y81BnWm
8JdxAIrsbMFeeeiZvxA5GwN7i/xcUHS4cp4/bGHPklElh5N+8b9WvtG/AQD/NFj0
9FYbHWAlrFSxMYABW1chO90TzoQRw7iTSBHWpE6OP3zSynm6eGyZLrLWO+nn0o15
p6S9Kb6+iTb+xzauyEhNiyUyiOU4JXBBb6i8hvgHItXeeIJr9a+HUuoNA0sjI/Ge
07IVqt2zyPLzvBwo3OkQqhtMeU4xOkEQmu9v7IDflAeGX+Q4pNUGxbLahg6ZX2/o
AyA3n0iVMgO9DZ5vEEfwvYXAVagrCte0V6nFkiDzcpSt
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:25 2025 by rpki-client