Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/veLJ4L5EYT10h17WiouBEd9ghYg.roa
File: veLJ4L5EYT10h17WiouBEd9ghYg.roa (raw, json)
Hash identifier: SL3KXjVWHmfowaZ8673tndrXHNHka8vX7pXlSqc5uVs=
Subject key identifier: BD:E2:C9:E0:BE:44:61:3D:74:87:5E:D6:8A:8B:81:11:DF:60:85:88
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 0199FD32F3EA98830E4926B79983CA4C57DF
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/veLJ4L5EYT10h17WiouBEd9ghYg.roa
Signing time: Sun 19 Oct 2025 15:59:58 +0000
ROA not before: Sun 19 Oct 2025 15:59:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213251
IP address blocks: 146.19.42.0/24 maxlen: 24
185.216.212.0/22 maxlen: 32
2a0b:bbc0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:32:f3:ea:98:83:0e:49:26:b7:99:83:ca:4c:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Oct 19 15:59:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde2c9e0be44613d74875ed68a8b8111df608588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:31:8c:79:13:c9:89:85:64:c3:f8:3c:bc:
b1:8d:16:56:38:ba:59:a7:17:77:0d:b8:6e:ae:33:
c6:80:37:37:ba:d1:86:1a:36:37:e4:7f:cb:e6:cb:
45:52:4b:ab:ff:3c:2f:d2:74:ab:88:45:04:a5:fb:
62:33:04:25:7e:62:a9:bd:96:46:ea:8e:5d:9f:e7:
b8:c8:c3:45:b7:10:47:76:31:b8:5c:b5:d3:2a:24:
90:b9:77:5d:48:5b:48:34:e4:49:90:4a:85:41:2b:
8e:b8:ba:d9:54:87:60:3a:7e:d9:a9:df:f6:cb:86:
27:49:54:88:ab:07:e9:1b:42:4c:eb:92:46:28:5d:
b0:ea:86:5e:14:ea:2d:4c:f0:3b:35:4d:1e:cd:55:
55:f8:96:6f:b9:83:ee:93:b3:7b:46:25:6f:de:4d:
15:84:90:6e:39:ff:67:ee:cf:08:05:9a:e2:b3:1e:
27:1d:00:39:55:a6:4f:7c:7e:64:61:18:9b:4d:8f:
a9:d1:cc:5c:b1:b6:3e:71:2e:b4:56:01:bd:39:57:
6d:71:ac:2b:2d:3e:0d:cb:d6:18:97:b3:9c:d8:73:
df:94:45:74:7f:15:f9:ba:78:07:4b:40:58:fc:46:
74:95:89:0f:d1:69:5a:1b:dd:2e:82:ed:3b:76:36:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:C9:E0:BE:44:61:3D:74:87:5E:D6:8A:8B:81:11:DF:60:85:88
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/veLJ4L5EYT10h17WiouBEd9ghYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.42.0/24
185.216.212.0/22
IPv6:
2a0b:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
ce:50:79:98:88:02:06:ef:88:b8:7f:2e:6c:a4:24:8b:a0:ee:
aa:5b:b7:81:00:fa:c5:4f:08:7d:16:96:c4:af:aa:49:1c:4a:
b6:45:7e:7e:7d:16:95:bb:1d:ab:47:ed:dd:2a:fe:a8:7b:77:
13:e0:0b:3c:a5:9f:db:e1:b1:0d:d0:18:89:6c:bf:d3:41:e8:
c5:8e:d3:ab:02:a6:54:70:e3:fc:a0:b4:96:af:5e:b6:b7:3d:
2e:24:6a:5f:c9:66:b3:d7:3e:5c:5f:98:b4:7a:4f:de:34:fd:
a3:f5:54:40:ee:97:20:71:bf:9a:cc:f6:8e:e8:57:af:36:e3:
45:81:df:6a:fc:05:0f:d7:f3:2e:50:e6:e4:89:9c:e1:c7:46:
f4:01:0f:b3:26:57:b8:51:81:f8:9b:6b:7e:57:b8:36:d3:30:
6d:19:2a:aa:21:6d:3c:51:4e:fe:e5:cf:a6:2a:14:76:e0:d5:
b9:f9:98:15:ec:5e:47:e2:24:a2:d1:67:0d:7e:75:43:1c:c0:
eb:48:0b:70:59:08:38:2d:25:5e:13:23:2d:71:d0:f7:cc:6f:
a6:ca:0f:40:82:ea:14:7f:c7:bb:8d:66:a2:a5:17:02:6c:06:
19:36:66:1f:da:97:ca:bd:b3:4b:1d:00:92:5e:45:b8:dd:c1:
e9:50:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:53 2025 by rpki-client