Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/VFYdZxVFCdCpkpyuxb39UT4cTZU.roa
File: VFYdZxVFCdCpkpyuxb39UT4cTZU.roa (raw, json)
Hash identifier: 9daq5hdLe7own+qRWKzM9da7RfcLhRIst1jMZCbP+lo=
Subject key identifier: 54:56:1D:67:15:45:09:D0:A9:92:9C:AE:C5:BD:FD:51:3E:1C:4D:95
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 019882A8D5D8C5BEDCF0DE1B51B1A7CB9A8E
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/VFYdZxVFCdCpkpyuxb39UT4cTZU.roa
Signing time: Thu 07 Aug 2025 03:52:39 +0000
ROA not before: Thu 07 Aug 2025 03:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 194.31.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:a8:d5:d8:c5:be:dc:f0:de:1b:51:b1:a7:cb:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Aug 7 03:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54561d67154509d0a9929caec5bdfd513e1c4d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:ce:d3:a2:20:de:67:0d:68:58:86:ef:40:
f1:7e:2e:15:87:ff:7c:25:3e:9b:bb:a4:ae:dc:7e:
2d:5f:30:92:0d:ef:24:4f:ff:09:e5:24:83:d7:3f:
e1:8a:fb:b3:c0:16:c9:7d:10:ea:b5:f5:06:42:c5:
df:d3:4d:33:84:a8:57:f3:9b:a6:4b:c4:92:a6:57:
48:c6:7d:0a:0f:b7:b0:6b:3b:97:40:2d:38:98:89:
9c:be:56:99:2a:f7:5a:82:9a:5c:af:78:5d:5d:fe:
2f:4a:ea:2f:ae:42:38:5d:92:86:5b:c6:0d:05:dc:
18:b5:cb:08:09:c1:c0:03:41:a4:05:de:c4:75:34:
1c:2e:23:b2:80:fd:02:2f:bd:02:d1:ae:2b:5e:dd:
2d:36:30:2f:7a:2a:d5:fc:2f:c6:a5:a8:be:eb:04:
00:c3:3b:bf:75:e6:5e:73:78:3b:88:5a:9d:47:8b:
65:28:95:64:ba:b2:d8:55:20:04:f7:83:48:e7:35:
44:28:8b:11:a6:63:25:9a:ca:18:b8:24:f5:3b:ce:
05:a3:82:8e:66:82:e5:bc:1b:ed:8d:be:08:a0:f7:
84:68:90:76:89:d9:0f:fa:c9:89:a7:ba:55:58:34:
9f:d6:11:ad:61:84:46:55:93:ef:55:68:f6:73:86:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:1D:67:15:45:09:D0:A9:92:9C:AE:C5:BD:FD:51:3E:1C:4D:95
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/VFYdZxVFCdCpkpyuxb39UT4cTZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5a:28:31:83:b3:b1:e9:17:8b:24:e1:3b:a9:a1:be:9e:5c:
38:df:18:37:14:68:d8:e3:da:98:51:6c:31:71:b1:c4:a5:1b:
82:5b:ee:fd:6f:57:ea:21:b8:b1:48:f8:27:ee:f1:fe:4a:19:
ac:1c:77:ba:07:fb:ab:a0:5f:46:45:29:f4:5d:40:5c:0b:eb:
00:a0:bf:8a:2e:c7:2d:0e:2c:ee:ca:75:bb:63:e1:0d:53:04:
0d:b5:4b:5c:94:a3:87:6c:85:98:e5:9d:8c:dd:de:51:51:cd:
4e:9c:ae:38:8b:1e:03:6d:66:3f:d6:0c:df:83:69:d9:6a:12:
a6:9c:31:85:76:52:88:fd:3c:18:4a:dc:50:73:24:10:de:a0:
97:15:db:00:03:21:39:e0:61:fc:c5:9e:f6:2c:f0:f3:09:92:
82:87:8b:39:28:a0:3b:5f:fc:da:09:78:f1:60:d9:9f:9e:5f:
46:41:7d:b2:49:e9:a9:c4:c6:0b:4e:2f:eb:07:91:35:41:84:
00:17:9a:a2:f4:f1:67:2b:45:01:14:59:45:da:62:b2:ba:c3:
a9:99:43:19:e6:91:02:d3:76:35:b8:41:4c:cb:a1:7b:b1:c9:
f5:dc:c9:00:f7:61:1e:7c:6c:2a:c6:76:f1:dc:15:29:a2:63:
e4:dc:21:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiCqNXYxb7c8N4bUbGny5qOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy
N2MyMzEwHhcNMjUwODA3MDM1MjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDU2MWQ2NzE1NDUwOWQwYTk5MjljYWVjNWJkZmQ1MTNlMWM0ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH7O06Ig3mcNaFiG70Dxfi4Vh/98
JT6bu6Su3H4tXzCSDe8kT/8J5SSD1z/hivuzwBbJfRDqtfUGQsXf000zhKhX85um
S8SSpldIxn0KD7ewazuXQC04mImcvlaZKvdagppcr3hdXf4vSuovrkI4XZKGW8YN
BdwYtcsICcHAA0GkBd7EdTQcLiOygP0CL70C0a4rXt0tNjAveirV/C/Gpai+6wQA
wzu/deZec3g7iFqdR4tlKJVkurLYVSAE94NI5zVEKIsRpmMlmsoYuCT1O84Fo4KO
ZoLlvBvtjb4IoPeEaJB2idkP+smJp7pVWDSf1hGtYYRGVZPvVWj2c4Y2SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRWHWcVRQnQqZKcrsW9/VE+HE2VMB8GA1UdIwQY
MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt
YjhhMjhjYmVmNGFkLzEvVkZZZFp4VkZDZENwa3B5dXhiMzlVVDRjVFpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk
LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9tMA0G
CSqGSIb3DQEBCwUAA4IBAQCjWigxg7Ox6ReLJOE7qaG+nlw43xg3FGjY49qYUWwx
cbHEpRuCW+79b1fqIbixSPgn7vH+ShmsHHe6B/uroF9GRSn0XUBcC+sAoL+KLsct
DizuynW7Y+ENUwQNtUtclKOHbIWY5Z2M3d5RUc1OnK44ix4DbWY/1gzfg2nZahKm
nDGFdlKI/TwYStxQcyQQ3qCXFdsAAyE54GH8xZ72LPDzCZKCh4s5KKA7X/zaCXjx
YNmfnl9GQX2ySempxMYLTi/rB5E1QYQAF5qi9PFnK0UBFFlF2mKyusOpmUMZ5pEC
03Y1uEFMy6F7scn13MkA92EefGwqxnbx3BUpomPk3CEd
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:57:34 2025 by rpki-client