Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/VP-hz1rx2nlz5DLyKObO4ZVhOpM.roa
File: VP-hz1rx2nlz5DLyKObO4ZVhOpM.roa (raw, json)
Hash identifier: OfQxpz1wsxm2W2m9x0OXY3aGOD+jsnKHtfm8qwqJi4M=
Subject key identifier: 54:FF:A1:CF:5A:F1:DA:79:73:E4:32:F2:28:E6:CE:E1:95:61:3A:93
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01990A2F119203BE8F8D8D9295834D32DA7D
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/VP-hz1rx2nlz5DLyKObO4ZVhOpM.roa
Signing time: Tue 02 Sep 2025 11:28:00 +0000
ROA not before: Tue 02 Sep 2025 11:28:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21021
IP address blocks: 31.6.128.0/18 maxlen: 18
31.6.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
37.131.128.0/19 maxlen: 19
37.190.128.0/17 maxlen: 17
46.186.0.0/17 maxlen: 17
46.231.56.0/21 maxlen: 21
62.61.32.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
80.244.128.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
81.190.0.0/16 maxlen: 16
82.115.64.0/19 maxlen: 19
83.68.64.0/19 maxlen: 19
84.38.80.0/20 maxlen: 20
85.117.0.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
89.17.224.0/19 maxlen: 19
89.228.0.0/16 maxlen: 16
89.229.0.0/16 maxlen: 16
89.229.64.0/19 maxlen: 19
89.230.0.0/16 maxlen: 16
89.231.0.0/16 maxlen: 16
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
94.78.128.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
95.129.224.0/21 maxlen: 21
95.174.32.0/19 maxlen: 19
176.107.112.0/21 maxlen: 21
176.221.96.0/19 maxlen: 19
185.31.184.0/22 maxlen: 22
193.43.240.0/22 maxlen: 22
193.43.242.0/24 maxlen: 24
193.43.243.0/24 maxlen: 24
193.106.76.0/22 maxlen: 22
193.200.118.0/23 maxlen: 23
194.116.132.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
195.93.222.0/23 maxlen: 23
213.136.224.0/19 maxlen: 19
217.70.48.0/20 maxlen: 20
217.75.48.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
217.172.224.0/19 maxlen: 19
2a00:1c00::/32 maxlen: 32
2a00:bde0::/34 maxlen: 34
2a00:bde0:4000::/34 maxlen: 34
2a00:bde0:8000::/34 maxlen: 34
2a00:bde0:c000::/34 maxlen: 34
2a02:2a40::/32 maxlen: 32
2a02:2a40::/34 maxlen: 34
2a02:2a40:4000::/34 maxlen: 34
2a02:2a40:8000::/34 maxlen: 34
2a02:2a40:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:2f:11:92:03:be:8f:8d:8d:92:95:83:4d:32:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Sep 2 11:28:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ffa1cf5af1da7973e432f228e6cee195613a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:5d:76:36:bb:76:f1:8d:20:43:83:9f:b4:
24:6e:08:31:76:b7:87:34:96:5b:73:00:01:ca:4d:
91:69:5d:81:9a:a9:4a:61:af:90:02:19:7b:2d:a9:
59:75:0f:94:79:d9:51:0d:44:8f:0d:39:53:ca:1e:
aa:67:04:a0:1c:78:69:dd:c8:fc:f9:a6:c4:eb:7d:
06:d1:fa:e1:b3:5c:72:b0:62:48:a9:11:51:06:05:
92:b1:b5:a8:fa:0e:e2:a4:31:a4:9e:9a:e6:86:8b:
11:fc:07:4c:4d:0a:c9:b1:8e:95:aa:40:0b:76:12:
9b:14:b6:92:95:30:94:16:80:69:65:14:cd:b5:4c:
c8:70:42:db:eb:ea:d6:b4:70:62:62:bd:eb:eb:9d:
70:30:e8:27:fb:84:2a:88:19:f6:cb:e4:e9:e2:fd:
f6:15:51:cc:6b:9a:ca:7c:17:ed:d7:fa:bf:0d:60:
89:af:f7:b8:05:f5:71:4c:25:5e:f1:0e:36:7c:c8:
58:34:aa:cb:0c:d2:7a:3b:2a:f7:12:c0:ff:1b:58:
94:4f:97:89:4a:cf:a0:06:dc:6b:2a:6a:8f:72:a1:
38:62:cd:6e:a5:82:43:74:e5:08:7b:ef:90:ed:e8:
bd:ca:e1:49:84:0c:c3:cb:92:c1:a1:2d:39:07:ce:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:A1:CF:5A:F1:DA:79:73:E4:32:F2:28:E6:CE:E1:95:61:3A:93
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/VP-hz1rx2nlz5DLyKObO4ZVhOpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
2f:3e:17:64:00:5c:3e:17:34:1d:2e:75:6f:52:1f:76:01:cc:
23:52:af:4b:0f:e1:32:94:41:39:25:a0:20:5e:c5:1b:48:84:
ba:85:24:6c:74:74:b5:ae:c9:76:e3:48:88:fb:e1:21:77:f6:
7a:9b:7f:76:eb:06:f0:86:31:f4:62:c8:54:fd:50:33:70:e4:
93:55:5c:db:36:3f:c4:68:df:e9:6a:8f:94:a3:28:21:64:4b:
88:0f:4f:62:11:ac:7e:c9:e5:64:e7:89:1d:41:84:b4:df:96:
1d:da:89:39:c4:e8:e0:c2:63:3f:89:7e:ed:1f:29:38:60:e6:
16:32:66:88:6c:2e:21:92:85:bb:53:6f:bc:05:1f:b6:64:70:
94:df:f9:98:fb:7d:1e:34:90:a0:7d:a1:f1:d2:9c:db:60:bc:
37:2d:49:96:4c:60:ca:a0:83:4e:4c:03:34:ec:0c:c8:28:4c:
f5:de:d2:14:50:5b:d7:e6:18:46:4e:b8:85:4e:36:0b:08:fd:
13:c2:71:08:80:c7:4a:14:95:42:24:72:36:2e:c7:ea:02:12:
9b:76:bc:93:92:de:39:5d:2c:a2:21:ec:94:6b:94:b7:f6:d7:
08:79:c5:4f:63:5a:01:35:78:60:d1:72:8d:25:e3:01:7e:fe:
e2:9d:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:13 2025 by rpki-client